last executing test programs: 6.230155385s ago: executing program 3 (id=197): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x1, 0x2, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 5.906987653s ago: executing program 3 (id=201): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x0) 5.806348974s ago: executing program 3 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.806221435s ago: executing program 3 (id=205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00') 5.197868701s ago: executing program 3 (id=230): r0 = syz_open_dev$dmmidi(&(0x7f00000019c0), 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000000)={0x1}) 4.72207894s ago: executing program 3 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 2.531777982s ago: executing program 4 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 2.466287657s ago: executing program 2 (id=270): r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9f600740b74d86b0}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.159368786s ago: executing program 2 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x6}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @loopback}, @info_reply}}}}}, 0x36) 1.1059724s ago: executing program 4 (id=273): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c04120000c4d02e487e86372eedfd1c32e11fd9"], 0xf) 1.051172261s ago: executing program 4 (id=275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c", 0xec, 0xc000, 0x0, 0x0) 880.656863ms ago: executing program 1 (id=277): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 843.344377ms ago: executing program 1 (id=278): setresuid(0x0, 0xee00, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 786.089755ms ago: executing program 1 (id=279): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 785.815781ms ago: executing program 0 (id=280): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(r0, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @multicast1}}}, 0x84) 785.117243ms ago: executing program 2 (id=281): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x88}}, 0x0) 731.188003ms ago: executing program 2 (id=282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 690.877357ms ago: executing program 0 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 638.234794ms ago: executing program 0 (id=284): r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001b40)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xc0}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 547.02611ms ago: executing program 2 (id=285): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 537.887913ms ago: executing program 0 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x850) 490.75947ms ago: executing program 0 (id=287): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 314.255292ms ago: executing program 0 (id=288): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001300)="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", 0x945}], 0x1}}], 0x1, 0x44000) 259.496727ms ago: executing program 1 (id=289): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0xbe1c, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4044004}, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3100, 0x0) 217.556127ms ago: executing program 1 (id=290): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x21, 0x401, 0x4, 0x7, 0xf7752d9f84279c8b, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @value, @void, @value}, 0x48) 138.322369ms ago: executing program 4 (id=291): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 138.079733ms ago: executing program 1 (id=292): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4436, &(0x7f0000004480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', 0x0, 0x2) 137.959331ms ago: executing program 4 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x45}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 98.882243ms ago: executing program 4 (id=294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x9c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x20800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_VF_PORTS={0x5c, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "d6bb9d3b243622da2474bacf02575a44"}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9f24378a6dd6d31389844f1f8a37c98e"}, @IFLA_PORT_INSTANCE_UUID={0xfffffe6d, 0x4, "823aadb95c779ffe4ef4442c3d06fff6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2cfb14a0420ae99b834857d3f3f69b9a"}]}, {0xc}]}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x9c}}, 0x0) 0s ago: executing program 2 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 31.947596][ T6384] cgroup: Unknown subsys name 'net' [ 32.223476][ T6384] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.552856][ T6384] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.854854][ T6398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.861249][ T6409] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.865222][ T6409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.867752][ T6409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.870450][ T6409] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.870989][ T6410] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.873366][ T6409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.875029][ T6410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.877358][ T6409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.879618][ T6410] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.881024][ T6409] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.882032][ T6410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.884251][ T6409] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.886707][ T6410] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.887980][ T6409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.890282][ T6410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.892421][ T6409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.893933][ T6410] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.895880][ T6409] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 33.897799][ T6410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.899327][ T6409] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.903002][ T6409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.903400][ T6410] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.906512][ T6409] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.908243][ T6410] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 33.910374][ T6410] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 33.912504][ T6403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.917993][ T6410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.920919][ T6398] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 33.924234][ T6398] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.164429][ T6396] chnl_net:caif_netlink_parms(): no params data found [ 34.173652][ T6404] chnl_net:caif_netlink_parms(): no params data found [ 34.211604][ T6401] chnl_net:caif_netlink_parms(): no params data found [ 34.229896][ T6402] chnl_net:caif_netlink_parms(): no params data found [ 34.238034][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 34.288372][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.290577][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.292515][ T6404] bridge_slave_0: entered allmulticast mode [ 34.294636][ T6404] bridge_slave_0: entered promiscuous mode [ 34.316802][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.318912][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.320913][ T6404] bridge_slave_1: entered allmulticast mode [ 34.323057][ T6404] bridge_slave_1: entered promiscuous mode [ 34.337767][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.339792][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.341768][ T6401] bridge_slave_0: entered allmulticast mode [ 34.343745][ T6401] bridge_slave_0: entered promiscuous mode [ 34.353758][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.355792][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.357732][ T6396] bridge_slave_0: entered allmulticast mode [ 34.360270][ T6396] bridge_slave_0: entered promiscuous mode [ 34.364047][ T6396] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.365897][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.367831][ T6396] bridge_slave_1: entered allmulticast mode [ 34.370057][ T6396] bridge_slave_1: entered promiscuous mode [ 34.375809][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.377591][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.379654][ T6402] bridge_slave_0: entered allmulticast mode [ 34.381786][ T6402] bridge_slave_0: entered promiscuous mode [ 34.387223][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.389398][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.391275][ T6401] bridge_slave_1: entered allmulticast mode [ 34.393252][ T6401] bridge_slave_1: entered promiscuous mode [ 34.403136][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.405070][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.406999][ T6397] bridge_slave_0: entered allmulticast mode [ 34.409990][ T6397] bridge_slave_0: entered promiscuous mode [ 34.418106][ T6404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.421463][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.423363][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.425252][ T6402] bridge_slave_1: entered allmulticast mode [ 34.428126][ T6402] bridge_slave_1: entered promiscuous mode [ 34.442243][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.444128][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.446078][ T6397] bridge_slave_1: entered allmulticast mode [ 34.448156][ T6397] bridge_slave_1: entered promiscuous mode [ 34.455356][ T6404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.459915][ T6396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.468222][ T6401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.484625][ T6396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.496000][ T6401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.503990][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.520800][ T6404] team0: Port device team_slave_0 added [ 34.524465][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.528105][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.533235][ T6401] team0: Port device team_slave_0 added [ 34.536547][ T6396] team0: Port device team_slave_0 added [ 34.539143][ T6404] team0: Port device team_slave_1 added [ 34.546729][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.554830][ T6401] team0: Port device team_slave_1 added [ 34.561891][ T6396] team0: Port device team_slave_1 added [ 34.581935][ T6397] team0: Port device team_slave_0 added [ 34.588994][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.590778][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.597292][ T6404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.606933][ T6401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.609131][ T6401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.615750][ T6401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.619569][ T6401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.621431][ T6401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.628000][ T6401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.632320][ T6397] team0: Port device team_slave_1 added [ 34.638908][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.640793][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.647611][ T6396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.651225][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.653073][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.659997][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.664930][ T6402] team0: Port device team_slave_0 added [ 34.675177][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.677153][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.684352][ T6396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.688328][ T6402] team0: Port device team_slave_1 added [ 34.712765][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.714775][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.722165][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.726821][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.729254][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.736206][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.790260][ T6404] hsr_slave_0: entered promiscuous mode [ 34.838903][ T6404] hsr_slave_1: entered promiscuous mode [ 34.879883][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.881730][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.888861][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.892407][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.894302][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.905207][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.970266][ T6401] hsr_slave_0: entered promiscuous mode [ 35.008852][ T6401] hsr_slave_1: entered promiscuous mode [ 35.048651][ T6401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.050682][ T6401] Cannot create hsr debugfs directory [ 35.089994][ T6396] hsr_slave_0: entered promiscuous mode [ 35.129293][ T6396] hsr_slave_1: entered promiscuous mode [ 35.168599][ T6396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.170667][ T6396] Cannot create hsr debugfs directory [ 35.259883][ T6397] hsr_slave_0: entered promiscuous mode [ 35.298956][ T6397] hsr_slave_1: entered promiscuous mode [ 35.338621][ T6397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.340737][ T6397] Cannot create hsr debugfs directory [ 35.420555][ T6402] hsr_slave_0: entered promiscuous mode [ 35.459194][ T6402] hsr_slave_1: entered promiscuous mode [ 35.508679][ T6402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.510765][ T6402] Cannot create hsr debugfs directory [ 35.663386][ T6404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.667389][ T6404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.677687][ T6404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.681972][ T6404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.708033][ T6396] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.712918][ T6396] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.724270][ T6396] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.739660][ T6401] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.745915][ T6396] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.754126][ T6401] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.767268][ T6401] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.772506][ T6401] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.824536][ T6402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.834334][ T6402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.838251][ T6402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.843126][ T6402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.860228][ T6397] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.871637][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.877067][ T6397] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.884039][ T6397] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.903068][ T6397] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.920301][ T6396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.928257][ T6396] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.930874][ T6408] Bluetooth: hci0: command tx timeout [ 35.933816][ T6401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.954979][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.964757][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.966801][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.970499][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.972421][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.983391][ T6404] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.990490][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.992355][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.999112][ T6408] Bluetooth: hci3: command tx timeout [ 35.999135][ T6398] Bluetooth: hci4: command tx timeout [ 36.000648][ T6408] Bluetooth: hci2: command tx timeout [ 36.002114][ T6398] Bluetooth: hci1: command tx timeout [ 36.017346][ T6402] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.022614][ T6401] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.034377][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.036311][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.040150][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.042146][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.062526][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.064612][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.067415][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.069476][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.105482][ T6402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.108245][ T6402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.115303][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.117120][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.169027][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.196307][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.249906][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.251870][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.254726][ T2165] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.256589][ T2165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.276499][ T6396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.347242][ T6396] veth0_vlan: entered promiscuous mode [ 36.352039][ T6396] veth1_vlan: entered promiscuous mode [ 36.362042][ T6404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.367723][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.382151][ T6401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.393663][ T6396] veth0_macvtap: entered promiscuous mode [ 36.396950][ T6396] veth1_macvtap: entered promiscuous mode [ 36.414746][ T6396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.421330][ T6396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.440619][ T6401] veth0_vlan: entered promiscuous mode [ 36.445701][ T6401] veth1_vlan: entered promiscuous mode [ 36.455217][ T6396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.457547][ T6396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.460805][ T6396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.463133][ T6396] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.473039][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.512522][ T6404] veth0_vlan: entered promiscuous mode [ 36.516958][ T6404] veth1_vlan: entered promiscuous mode [ 36.531668][ T6401] veth0_macvtap: entered promiscuous mode [ 36.535484][ T6401] veth1_macvtap: entered promiscuous mode [ 36.559957][ T6404] veth0_macvtap: entered promiscuous mode [ 36.563775][ T6404] veth1_macvtap: entered promiscuous mode [ 36.566005][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.571087][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.574398][ T6401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.596627][ T6397] veth0_vlan: entered promiscuous mode [ 36.605299][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.608135][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.613304][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.616276][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.620515][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.627903][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.632184][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.635546][ T6401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.642588][ T6397] veth1_vlan: entered promiscuous mode [ 36.653385][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.656161][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.659629][ T2165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.661754][ T2165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.662617][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.666401][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.670791][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.674500][ T6401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.676787][ T6401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.679575][ T6401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.681840][ T6401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.698368][ T6397] veth0_macvtap: entered promiscuous mode [ 36.708078][ T6397] veth1_macvtap: entered promiscuous mode [ 36.714652][ T6402] veth0_vlan: entered promiscuous mode [ 36.721813][ T6404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.724200][ T6404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.726464][ T6404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.731149][ T6404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.747348][ T6402] veth1_vlan: entered promiscuous mode [ 36.771971][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.774855][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.777369][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.780904][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.783360][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.786081][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.790137][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.804409][ T2050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.809357][ T2050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.816122][ T6402] veth0_macvtap: entered promiscuous mode [ 36.828735][ T2050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.830707][ T2050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.845759][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.850080][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.852743][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.855311][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.857909][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.861393][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.865659][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.873315][ T6402] veth1_macvtap: entered promiscuous mode [ 36.881574][ T2165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.884305][ T2165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.884367][ T1997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.888295][ T1997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.905413][ T6397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.907800][ T6397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.911001][ T6397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.913379][ T6397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.927866][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.934424][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.937163][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.943655][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.946191][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.956037][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.965278][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.968067][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.985112][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.993661][ T2050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.995628][ T2050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.007571][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.017619][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.029034][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.037674][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.045655][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.051896][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.054604][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.057196][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.068026][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.090437][ T6402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.097158][ T6402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.100406][ T6402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.102873][ T6402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.212406][ T1997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.214550][ T1997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.237452][ T6488] loop0: detected capacity change from 0 to 2048 [ 37.247378][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.261374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.272585][ T6488] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 37.286966][ T6480] loop1: detected capacity change from 0 to 32768 [ 37.306688][ T1997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.309585][ T6480] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (6480) [ 37.315994][ T6488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 37.316201][ T2050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.322917][ T1997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.340010][ T6490] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.342381][ T2050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.344240][ T6490] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 37.367777][ T6484] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6'. [ 37.370879][ T6480] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 37.382027][ T6492] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 37.383076][ T6480] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 37.390650][ T6480] BTRFS info (device loop1): disk space caching is enabled [ 37.392798][ T6480] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 37.400030][ T6492] syz_tun: entered promiscuous mode [ 37.415118][ T6492] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 37.490032][ T6501] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 37.539037][ T6480] BTRFS info (device loop1): rebuilding free space tree [ 37.606239][ T6480] BTRFS info (device loop1): disabling free space tree [ 37.608205][ T6480] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 37.623465][ T6480] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 37.655858][ T6521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 37.713239][ T6521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 37.745294][ T6480] BTRFS info (device loop1): balance: start -f -svrange=0..18446744073709551612,limit=1630855084369772560,limit=16..379713039 [ 37.756098][ T6480] BTRFS info (device loop1): balance: ended with status: 0 [ 37.853927][ T6525] loop0: detected capacity change from 0 to 8 [ 37.858243][ T6396] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 37.869893][ T6525] SQUASHFS error: zlib decompression failed, data probably corrupt [ 37.872135][ T6525] SQUASHFS error: Failed to read block 0x9b: -5 [ 37.877524][ T6525] SQUASHFS error: Unable to read metadata cache entry [99] [ 37.884372][ T6525] SQUASHFS error: Unable to read inode 0x127 [ 37.966769][ T6528] loop0: detected capacity change from 0 to 512 [ 37.977423][ T6528] ======================================================= [ 37.977423][ T6528] WARNING: The mand mount option has been deprecated and [ 37.977423][ T6528] and is ignored by this kernel. Remove the mand [ 37.977423][ T6528] option from the mount to silence this warning. [ 37.977423][ T6528] ======================================================= [ 37.988492][ T6528] EXT4-fs: Ignoring removed bh option [ 37.992554][ T6528] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.996136][ T6528] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 38.000113][ T53] Bluetooth: hci0: command tx timeout [ 38.026826][ T6528] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 38.033592][ T6528] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.049588][ T6528] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 38.062230][ T6528] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 38.065261][ T6528] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.14: Failed to acquire dquot type 1 [ 38.079071][ T53] Bluetooth: hci2: command tx timeout [ 38.079288][ T6408] Bluetooth: hci4: command tx timeout [ 38.080558][ T53] Bluetooth: hci3: command tx timeout [ 38.081981][ T6408] Bluetooth: hci1: command tx timeout [ 38.099369][ T6528] EXT4-fs (loop0): Remounting filesystem read-only [ 38.101192][ T6528] EXT4-fs (loop0): 1 orphan inode deleted [ 38.103862][ T6517] loop3: detected capacity change from 0 to 40427 [ 38.118075][ T6517] F2FS-fs (loop3): build fault injection attr: rate: 11, type: 0x1fffff [ 38.128085][ T6517] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xad [ 38.130508][ T6517] F2FS-fs (loop3): heap/no_heap options were deprecated [ 38.132536][ T6517] F2FS-fs (loop3): Image doesn't support compression [ 38.141665][ T6517] F2FS-fs (loop3): invalid crc value [ 38.149228][ T6517] F2FS-fs (loop3): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x40f8/0x616c [ 38.152196][ T6517] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 38.161165][ T6528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.237032][ T6404] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.357528][ T6547] random: crng reseeded on system resumption [ 38.376245][ T6543] dvmrp9: entered allmulticast mode [ 38.463151][ T6531] loop2: detected capacity change from 0 to 32768 [ 38.534237][ T6558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 38.550200][ T6531] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 38.755199][ T6397] ocfs2: Unmounting device (7,2) on (node local) [ 38.760974][ T6565] netlink: 'syz.0.25': attribute type 4 has an invalid length. [ 39.001899][ T6563] loop4: detected capacity change from 0 to 32768 [ 39.037030][ T6563] JBD2: Ignoring recovery information on journal [ 39.060586][ T6555] loop3: detected capacity change from 0 to 40427 [ 39.067465][ T6555] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 39.074330][ T6555] F2FS-fs (loop3): invalid crc value [ 39.076093][ T6563] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 39.081816][ T6555] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.114473][ T6555] F2FS-fs (loop3): Start checkpoint disabled! [ 39.134413][ T6555] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 39.282275][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 39.287121][ T43] kworker/u8:2: attempt to access beyond end of device [ 39.287121][ T43] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 39.299296][ T43] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 39.309538][ T43] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 39.361389][ T6589] loop0: detected capacity change from 0 to 16 [ 39.417488][ T6589] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.614366][ T6598] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 39.641920][ T6563] (syz.4.23,6563,1):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 39.686624][ T6402] ocfs2: Unmounting device (7,4) on (node local) [ 39.920142][ T6604] wlan0 speed is unknown, defaulting to 1000 [ 39.925907][ T6604] wlan0 speed is unknown, defaulting to 1000 [ 39.927816][ T6604] wlan0 speed is unknown, defaulting to 1000 [ 39.940036][ T6604] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 39.947074][ T6604] wlan0 speed is unknown, defaulting to 1000 [ 39.953230][ T6604] wlan0 speed is unknown, defaulting to 1000 [ 39.959043][ T6604] wlan0 speed is unknown, defaulting to 1000 [ 39.964157][ T6604] wlan0 speed is unknown, defaulting to 1000 [ 39.973048][ T6604] wlan0 speed is unknown, defaulting to 1000 [ 40.078747][ T6410] Bluetooth: hci0: command tx timeout [ 40.133256][ T6610] loop4: detected capacity change from 0 to 32768 [ 40.158388][ T6610] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 40.159881][ T6410] Bluetooth: hci1: command tx timeout [ 40.163417][ T6410] Bluetooth: hci4: command tx timeout [ 40.164881][ T6410] Bluetooth: hci2: command tx timeout [ 40.166357][ T6410] Bluetooth: hci3: command 0x040f tx timeout [ 40.190392][ T6610] (syz.4.38,6610,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 40.192659][ T6610] (syz.4.38,6610,1):ocfs2_get_suballoc_slot_bit:2786 ERROR: read block 137438953611 failed -12 [ 40.213197][ T6610] (syz.4.38,6610,1):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12 [ 40.215468][ T6610] (syz.4.38,6610,1):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12 [ 40.225656][ T6610] (syz.4.38,6610,1):ocfs2_test_inode_bit:2941 ERROR: status = -12 [ 40.227811][ T6610] (syz.4.38,6610,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 40.238120][ T6625] Zero length message leads to an empty skb [ 40.257862][ T6402] ocfs2: Unmounting device (7,4) on (node local) [ 40.289927][ T6615] loop0: detected capacity change from 0 to 32768 [ 40.427507][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.747272][ T6655] siw: device registration error -23 [ 40.820907][ T6477] IPVS: starting estimator thread 0... [ 40.825175][ T6661] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 40.843172][ T6664] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 40.895396][ T6669] loop4: detected capacity change from 0 to 256 [ 40.905963][ T6669] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 40.909602][ T6669] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 40.912204][ T6669] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 40.914214][ T6669] UDF-fs: Scanning with blocksize 512 failed [ 40.921847][ T6663] IPVS: using max 27 ests per chain, 64800 per kthread [ 40.927884][ T6669] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 40.935340][ T6669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.127007][ T6681] loop0: detected capacity change from 0 to 4096 [ 41.141947][ T6681] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 41.309489][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.414732][ T6714] loop3: detected capacity change from 0 to 8 [ 41.416968][ T6714] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 41.853278][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 41.861629][ T6723] loop3: detected capacity change from 0 to 32768 [ 41.867690][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.872466][ T6723] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.84 (6723) [ 41.889234][ T6723] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 41.892614][ T6723] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 41.895044][ T6723] BTRFS info (device loop3): using free-space-tree [ 41.927999][ T6757] loop0: detected capacity change from 0 to 64 [ 41.967623][ T6757] syz.0.99: attempt to access beyond end of device [ 41.967623][ T6757] loop0: rw=0, sector=2564, nr_sectors = 1 limit=64 [ 42.126622][ T6749] loop2: detected capacity change from 0 to 32768 [ 42.130051][ T6749] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.97 (6749) [ 42.136912][ T6749] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 42.140617][ T6749] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 42.143296][ T6749] BTRFS info (device loop2): using free-space-tree [ 42.159603][ T6398] Bluetooth: hci0: command tx timeout [ 42.239291][ T53] Bluetooth: hci2: command tx timeout [ 42.240863][ T53] Bluetooth: hci4: command tx timeout [ 42.242383][ T6398] Bluetooth: hci3: command 0x040f tx timeout [ 42.275304][ T6397] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 42.335997][ T6401] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 42.714553][ T6837] bridge0: port 3(syz_tun) entered blocking state [ 42.722041][ T6837] bridge0: port 3(syz_tun) entered disabled state [ 42.723967][ T6837] syz_tun: entered allmulticast mode [ 42.739050][ T6837] syz_tun: entered promiscuous mode [ 42.741336][ T6837] bridge0: port 3(syz_tun) entered blocking state [ 42.743230][ T6837] bridge0: port 3(syz_tun) entered forwarding state [ 42.756910][ T6837] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 43.034827][ T6871] loop2: detected capacity change from 0 to 64 [ 43.094258][ T6871] Trying to free block not in datazone [ 43.096019][ T6871] Trying to free block not in datazone [ 43.097469][ T6871] Trying to free block not in datazone [ 43.108579][ T6871] Trying to free block not in datazone [ 43.110303][ T6871] minix_free_block (loop2:6): bit already cleared [ 43.126096][ T6871] Trying to free block not in datazone [ 43.137349][ T6871] Trying to free block not in datazone [ 43.225316][ T6885] loop0: detected capacity change from 0 to 512 [ 43.244897][ T6885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.280470][ T6885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.424699][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 43.433405][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 43.514724][ T6404] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.734342][ T6931] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 44.005096][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 44.253426][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 44.318622][ T6398] Bluetooth: hci3: command 0x040f tx timeout [ 44.397161][ T6994] loop2: detected capacity change from 0 to 512 [ 44.413854][ T6994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.437271][ T6977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.446121][ T6994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.519392][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.522111][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.530232][ T6397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.658583][ T7009] loop2: detected capacity change from 0 to 1024 [ 44.685933][ T7009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.723297][ T6397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.945941][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.959811][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.232249][ T6992] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.235120][ T6992] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.237646][ T6992] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.240487][ T6992] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.495541][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 45.624205][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.659034][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.453064][ T6387] infiniband syz1: ib_query_port failed (-19) [ 46.489847][ T6401] bond0: (slave syz_tun): Releasing backup interface [ 46.537028][ T6387] infiniband syz1: ib_query_port failed (-19) [ 46.593194][ T7099] loop1: detected capacity change from 0 to 32768 [ 46.596979][ T7099] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.231 (7099) [ 46.604452][ T7099] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 46.607113][ T7099] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 46.618671][ T7099] BTRFS info (device loop1): using free-space-tree [ 46.729533][ T6396] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 46.772309][ T7127] loop0: detected capacity change from 0 to 2048 [ 46.830269][ T7127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.938255][ T6404] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.983136][ T6410] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.986874][ T6410] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.003232][ T2050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.010514][ T6410] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.029146][ T6410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.031833][ T6410] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 47.035437][ T6410] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.092781][ T7141] wlan0 speed is unknown, defaulting to 1000 [ 47.180692][ T2050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.206809][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 47.651355][ T2050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.671376][ T7167] sp0: Synchronizing with TNC [ 47.716135][ T7167] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 47.850555][ T2050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.161028][ T7179] loop1: detected capacity change from 0 to 32768 [ 48.187161][ T7179] (syz.1.256,7179,1):ocfs2_verify_userspace_stack:854 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 48.197406][ T7179] (syz.1.256,7179,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 48.212793][ T7179] (syz.1.256,7179,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 48.231402][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.327805][ T7141] chnl_net:caif_netlink_parms(): no params data found [ 48.466141][ T7222] syz_tun: entered promiscuous mode [ 48.509013][ T7222] batadv_slave_0: entered promiscuous mode [ 48.549007][ T7222] hsr1: entered allmulticast mode [ 48.557120][ T7222] syz_tun: entered allmulticast mode [ 48.560993][ T7222] batadv_slave_0: entered allmulticast mode [ 48.569309][ T2050] bridge_slave_1: left allmulticast mode [ 48.571060][ T2050] bridge_slave_1: left promiscuous mode [ 48.573771][ T2050] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.613295][ T2050] bridge_slave_0: left allmulticast mode [ 48.614673][ T2050] bridge_slave_0: left promiscuous mode [ 48.616213][ T2050] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.817332][ T7244] loop4: detected capacity change from 0 to 32768 [ 48.863631][ T7244] jfs_lookup: iget failed on inum 5 [ 48.865625][ T7244] jfs_lookup: iget failed on inum 5 [ 49.119647][ T6410] Bluetooth: hci2: command tx timeout [ 50.071983][ T2050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.111282][ T2050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.151351][ T2050] bond0 (unregistering): Released all slaves [ 50.233342][ T7258] loop0: detected capacity change from 0 to 4096 [ 50.233986][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 50.274697][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.276700][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.285233][ T7259] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.290238][ T7141] bridge_slave_0: entered allmulticast mode [ 50.316924][ T7141] bridge_slave_0: entered promiscuous mode [ 50.338994][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.340959][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.342937][ T7141] bridge_slave_1: entered allmulticast mode [ 50.345102][ T7141] bridge_slave_1: entered promiscuous mode [ 50.511680][ T7141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.528768][ T7141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.603417][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.628617][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.648117][ T7141] team0: Port device team_slave_0 added [ 50.651637][ T7141] team0: Port device team_slave_1 added [ 50.824003][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.826183][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.838508][ T7141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.842590][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.844543][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.852047][ T7141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.917445][ T2050] hsr_slave_0: left promiscuous mode [ 50.943240][ T7297] loop0: detected capacity change from 0 to 512 [ 50.964985][ T7297] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.287: casefold flag without casefold feature [ 50.969217][ T2050] hsr_slave_1: left promiscuous mode [ 50.971019][ T7297] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.287: couldn't read orphan inode 15 (err -117) [ 50.975081][ T7297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.058633][ T2050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.059611][ T6404] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.060733][ T2050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.072808][ T2050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.074775][ T2050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.096695][ T2050] veth1_macvtap: left promiscuous mode [ 51.104748][ T2050] veth0_macvtap: left promiscuous mode [ 51.106560][ T2050] veth1_vlan: left promiscuous mode [ 51.108061][ T2050] veth0_vlan: left promiscuous mode [ 51.198505][ T6410] Bluetooth: hci2: command tx timeout [ 51.504973][ T7312] loop1: detected capacity change from 0 to 32768 [ 51.514181][ T7312] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 51.525338][ T7312] [ 51.525969][ T7312] ====================================================== [ 51.527816][ T7312] WARNING: possible circular locking dependency detected [ 51.529739][ T7312] 6.11.0-rc5-syzkaller-gdf54f4a16f82 #0 Not tainted [ 51.531571][ T7312] ------------------------------------------------------ [ 51.533520][ T7312] syz.1.292/7312 is trying to acquire lock: [ 51.535198][ T7312] ffff0000ef1d5100 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0xfc/0x247c [ 51.538958][ T7312] [ 51.538958][ T7312] but task is already holding lock: [ 51.540928][ T7312] ffff0000ef1d31b8 (&oi->ip_xattr_sem){+.+.}-{3:3}, at: ocfs2_xattr_set+0x4e0/0x1448 [ 51.543520][ T7312] [ 51.543520][ T7312] which lock already depends on the new lock. [ 51.543520][ T7312] [ 51.546442][ T7312] [ 51.546442][ T7312] the existing dependency chain (in reverse order) is: [ 51.548950][ T7312] [ 51.548950][ T7312] -> #4 (&oi->ip_xattr_sem){+.+.}-{3:3}: [ 51.551067][ T7312] down_write+0x50/0xc0 [ 51.552231][ T7312] ocfs2_xattr_set_handle+0x40c/0x824 [ 51.553804][ T7312] ocfs2_init_security_set+0xb4/0xd8 [ 51.555412][ T7312] ocfs2_mknod+0x1408/0x243c [ 51.556786][ T7312] vfs_mknod+0x330/0x360 [ 51.558120][ T7312] do_mknodat+0x42c/0x564 [ 51.559240][ T7312] __arm64_sys_mknodat+0xac/0xc8 [ 51.560832][ T7312] invoke_syscall+0x98/0x2b8 [ 51.562204][ T7312] el0_svc_common+0x130/0x23c [ 51.563710][ T7312] do_el0_svc+0x48/0x58 [ 51.565004][ T7312] el0_svc+0x54/0x168 [ 51.566276][ T7312] el0t_64_sync_handler+0x84/0xfc [ 51.567763][ T7312] el0t_64_sync+0x190/0x194 [ 51.569169][ T7312] [ 51.569169][ T7312] -> #3 (jbd2_handle){++++}-{0:0}: [ 51.571164][ T7312] start_this_handle+0xf34/0x11c4 [ 51.572660][ T7312] jbd2__journal_start+0x298/0x544 [ 51.574149][ T7312] jbd2_journal_start+0x3c/0x4c [ 51.575522][ T7312] ocfs2_start_trans+0x3d0/0x71c [ 51.576969][ T7312] ocfs2_reserve_suballoc_bits+0x840/0x4288 [ 51.578707][ T7312] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 51.580562][ T7312] ocfs2_mknod+0xdc8/0x243c [ 51.581958][ T7312] vfs_mknod+0x330/0x360 [ 51.583285][ T7312] do_mknodat+0x42c/0x564 [ 51.584645][ T7312] __arm64_sys_mknodat+0xac/0xc8 [ 51.586149][ T7312] invoke_syscall+0x98/0x2b8 [ 51.587454][ T7312] el0_svc_common+0x130/0x23c [ 51.588841][ T7312] do_el0_svc+0x48/0x58 [ 51.590121][ T7312] el0_svc+0x54/0x168 [ 51.591314][ T7312] el0t_64_sync_handler+0x84/0xfc [ 51.592801][ T7312] el0t_64_sync+0x190/0x194 [ 51.594007][ T7312] [ 51.594007][ T7312] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 51.596442][ T7312] down_read+0x58/0x2fc [ 51.597734][ T7312] ocfs2_start_trans+0x3c4/0x71c [ 51.599284][ T7312] ocfs2_reserve_suballoc_bits+0x840/0x4288 [ 51.601013][ T7312] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 51.602841][ T7312] ocfs2_mknod+0xdc8/0x243c [ 51.604139][ T7312] vfs_mknod+0x330/0x360 [ 51.605438][ T7312] do_mknodat+0x42c/0x564 [ 51.606762][ T7312] __arm64_sys_mknodat+0xac/0xc8 [ 51.608318][ T7312] invoke_syscall+0x98/0x2b8 [ 51.609653][ T7312] el0_svc_common+0x130/0x23c [ 51.611088][ T7312] do_el0_svc+0x48/0x58 [ 51.612292][ T7312] el0_svc+0x54/0x168 [ 51.613439][ T7312] el0t_64_sync_handler+0x84/0xfc [ 51.614985][ T7312] el0t_64_sync+0x190/0x194 [ 51.616289][ T7312] [ 51.616289][ T7312] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 51.618377][ T7312] ocfs2_start_trans+0x244/0x71c [ 51.619831][ T7312] ocfs2_mknod+0xe58/0x243c [ 51.621182][ T7312] vfs_mknod+0x330/0x360 [ 51.622478][ T7312] do_mknodat+0x42c/0x564 [ 51.623747][ T7312] __arm64_sys_mknodat+0xac/0xc8 [ 51.625126][ T7312] invoke_syscall+0x98/0x2b8 [ 51.626523][ T7312] el0_svc_common+0x130/0x23c [ 51.627994][ T7312] do_el0_svc+0x48/0x58 [ 51.629324][ T7312] el0_svc+0x54/0x168 [ 51.630537][ T7312] el0t_64_sync_handler+0x84/0xfc [ 51.632051][ T7312] el0t_64_sync+0x190/0x194 [ 51.633514][ T7312] [ 51.633514][ T7312] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 51.636425][ T7312] __lock_acquire+0x33d8/0x779c [ 51.637902][ T7312] lock_acquire+0x240/0x728 [ 51.639309][ T7312] down_write+0x50/0xc0 [ 51.640657][ T7312] ocfs2_reserve_local_alloc_bits+0xfc/0x247c [ 51.642507][ T7312] ocfs2_reserve_clusters_with_limit+0x194/0xabc [ 51.644365][ T7312] ocfs2_reserve_clusters+0x3c/0x50 [ 51.645964][ T7312] ocfs2_init_xattr_set_ctxt+0x404/0x968 [ 51.647698][ T7312] ocfs2_xattr_set+0xbe0/0x1448 [ 51.649232][ T7312] ocfs2_xattr_user_set+0xc0/0xe8 [ 51.650787][ T7312] __vfs_setxattr+0x3d8/0x400 [ 51.652100][ T7312] __vfs_setxattr_noperm+0x110/0x578 [ 51.653685][ T7312] __vfs_setxattr_locked+0x1ec/0x218 [ 51.655276][ T7312] vfs_setxattr+0x1a8/0x344 [ 51.656668][ T7312] path_setxattr+0x30c/0x428 [ 51.658031][ T7312] __arm64_sys_setxattr+0xbc/0xd8 [ 51.659568][ T7312] invoke_syscall+0x98/0x2b8 [ 51.660913][ T7312] el0_svc_common+0x130/0x23c [ 51.662322][ T7312] do_el0_svc+0x48/0x58 [ 51.663629][ T7312] el0_svc+0x54/0x168 [ 51.664770][ T7312] el0t_64_sync_handler+0x84/0xfc [ 51.666250][ T7312] el0t_64_sync+0x190/0x194 [ 51.667753][ T7312] [ 51.667753][ T7312] other info that might help us debug this: [ 51.667753][ T7312] [ 51.670487][ T7312] Chain exists of: [ 51.670487][ T7312] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 51.670487][ T7312] [ 51.674824][ T7312] Possible unsafe locking scenario: [ 51.674824][ T7312] [ 51.676924][ T7312] CPU0 CPU1 [ 51.678403][ T7312] ---- ---- [ 51.679926][ T7312] lock(&oi->ip_xattr_sem); [ 51.681251][ T7312] lock(jbd2_handle); [ 51.683025][ T7312] lock(&oi->ip_xattr_sem); [ 51.684854][ T7312] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 51.686821][ T7312] [ 51.686821][ T7312] *** DEADLOCK *** [ 51.686821][ T7312] [ 51.689123][ T7312] 3 locks held by syz.1.292/7312: [ 51.690543][ T7312] #0: ffff0000cf90c420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 51.693160][ T7312] #1: ffff0000ef1d3480 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: vfs_setxattr+0x17c/0x344 [ 51.696197][ T7312] #2: ffff0000ef1d31b8 (&oi->ip_xattr_sem){+.+.}-{3:3}, at: ocfs2_xattr_set+0x4e0/0x1448 [ 51.698941][ T7312] [ 51.698941][ T7312] stack backtrace: [ 51.700508][ T7312] CPU: 0 UID: 0 PID: 7312 Comm: syz.1.292 Not tainted 6.11.0-rc5-syzkaller-gdf54f4a16f82 #0 [ 51.703270][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 51.706027][ T7312] Call trace: [ 51.706825][ T7312] dump_backtrace+0x1b8/0x1e4 [ 51.707941][ T7312] show_stack+0x2c/0x3c [ 51.708992][ T7312] dump_stack_lvl+0xe4/0x150 [ 51.710293][ T7312] dump_stack+0x1c/0x28 [ 51.711342][ T7312] print_circular_bug+0x150/0x1b8 [ 51.712731][ T7312] check_noncircular+0x310/0x404 [ 51.714106][ T7312] __lock_acquire+0x33d8/0x779c [ 51.715462][ T7312] lock_acquire+0x240/0x728 [ 51.716754][ T7312] down_write+0x50/0xc0 [ 51.717919][ T7312] ocfs2_reserve_local_alloc_bits+0xfc/0x247c [ 51.719534][ T7312] ocfs2_reserve_clusters_with_limit+0x194/0xabc [ 51.721355][ T7312] ocfs2_reserve_clusters+0x3c/0x50 [ 51.722807][ T7312] ocfs2_init_xattr_set_ctxt+0x404/0x968 [ 51.724375][ T7312] ocfs2_xattr_set+0xbe0/0x1448 [ 51.725658][ T7312] ocfs2_xattr_user_set+0xc0/0xe8 [ 51.727226][ T7312] __vfs_setxattr+0x3d8/0x400 [ 51.728366][ T7312] __vfs_setxattr_noperm+0x110/0x578 [ 51.729825][ T7312] __vfs_setxattr_locked+0x1ec/0x218 [ 51.731223][ T7312] vfs_setxattr+0x1a8/0x344 [ 51.732440][ T7312] path_setxattr+0x30c/0x428 [ 51.733729][ T7312] __arm64_sys_setxattr+0xbc/0xd8 [ 51.735099][ T7312] invoke_syscall+0x98/0x2b8 [ 51.736394][ T7312] el0_svc_common+0x130/0x23c [ 51.737725][ T7312] do_el0_svc+0x48/0x58 [ 51.738825][ T7312] el0_svc+0x54/0x168 [ 51.739924][ T7312] el0t_64_sync_handler+0x84/0xfc [ 51.741238][ T7312] el0t_64_sync+0x190/0x194 [ 51.759548][ T6396] ocfs2: Unmounting device (7,1) on (node local) [ 52.398608][ T6410] Bluetooth: hci3: command 0x040f tx timeout [ 53.019203][ T2050] team0 (unregistering): Port device team_slave_1 removed [ 53.179244][ T2050] team0 (unregistering): Port device team_slave_0 removed [ 53.288544][ T6398] Bluetooth: hci2: command tx timeout [ 54.478532][ T6398] Bluetooth: hci3: command 0x040f tx timeout [ 55.358565][ T6398] Bluetooth: hci2: command tx timeout [ 55.412735][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 55.889009][ T7141] hsr_slave_0: entered promiscuous mode [ 55.930962][ T7141] hsr_slave_1: entered promiscuous mode [ 55.958524][ T7141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.960634][ T7141] Cannot create hsr debugfs directory [ 56.362658][ T7141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.365683][ T7141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.368673][ T7141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.371590][ T7141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.436917][ T7141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.443191][ T7141] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.448969][ T1997] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.450923][ T1997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.458935][ T2023] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.460784][ T2023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.507746][ T7141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.522630][ T7141] veth0_vlan: entered promiscuous mode [ 56.526415][ T7141] veth1_vlan: entered promiscuous mode [ 56.536028][ T7141] veth0_macvtap: entered promiscuous mode [ 56.539703][ T7141] veth1_macvtap: entered promiscuous mode [ 56.544669][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.547415][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.550402][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.553132][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.555518][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.558182][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.561552][ T7141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.565382][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.568090][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.571117][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.573970][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.576537][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.579471][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.582776][ T7141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.586637][ T7141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.588960][ T7141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.591205][ T7141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.593500][ T7141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.607461][ T7141] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 56.616144][ T2023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.618382][ T7141] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 56.621381][ T2023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.627940][ T2023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.630410][ T2023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50