last executing test programs: 46.383141856s ago: executing program 3 (id=799): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001100290180000000000000000700", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x0) 41.182325721s ago: executing program 3 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) 40.192399449s ago: executing program 3 (id=806): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, 0x0, 0x0) 39.942145291s ago: executing program 3 (id=809): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000007440)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301}], {0x14}}, 0x3c}}, 0x0) 39.921053376s ago: executing program 3 (id=810): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x7) 38.655579587s ago: executing program 3 (id=812): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_newroute={0x28, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_EXPIRES={0x8}]}, 0x28}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 27.514103056s ago: executing program 2 (id=828): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x7) 26.595015417s ago: executing program 2 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) 25.669815217s ago: executing program 2 (id=830): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140003000000000002000000000001000000000004000200040001"], 0x40}}, 0x0) 25.590483239s ago: executing program 2 (id=831): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x3}}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x0) lgetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x3) 25.571027977s ago: executing program 2 (id=832): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f0000000140), 0x0) 25.396043594s ago: executing program 2 (id=833): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x7e, 0x0, 0x4}, @enum={0x10, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x7}, {0xe, 0xfffff001}]}]}}, 0x0, 0x46, 0x0, 0x0, 0x5, 0x0, @void, @value}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x16) 6.220085823s ago: executing program 0 (id=853): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdb3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x0, 0x8, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x63, 0x0, 0x0, 0x2f, 0x0, @local, @local}}}}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 6.129566251s ago: executing program 0 (id=854): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x7) 4.642171796s ago: executing program 0 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2020}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x40}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x4c}}, 0x0) 2.745335633s ago: executing program 1 (id=869): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.554025902s ago: executing program 0 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) 1.85938184s ago: executing program 4 (id=873): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f0000000000)={[{@type={'type', 0x3d, "25c2506b"}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'iso8859-5'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask}]}, 0x13, 0x6ad, &(0x7f0000000cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 1.674250827s ago: executing program 1 (id=874): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404005400ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b70000000000000095000000000000003f0c54cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752688300000000dbc2777df150b7cdd77b85b941092314fd085f1b1b2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c830fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b8498aa787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28179f09943b1b0452d1b72183aacf4a84f9130b701b81675dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fd80f3876acb45821d0c48fb657c29b309c73f0977e7cde65a89d9458aac2795b2b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d2665016ac59dd20fde0745db06753a7ac7fe13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2084bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a3894696082417304fff0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bdb539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572ac45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af00200f900cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee78ebf9ef40662d7836961a8de6f2d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408816eae08cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb7819441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005391577f480000ea65559eb00e2b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e710d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d4ac534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f0300000000000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca396eeec1f53bb0bc1bc9ce45bb671f2dea5eafc74551cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b847e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fde46ad265983eb1b1c6adb1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0c5605000063902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f617396c18cc7130000fc000000210000006e00002000000000000027c9a46157a3ffff6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4472b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc4c860495b240e80063bde261fd000000000072f6df342f3e7071e28ef6806b6b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2b3a113e47edf76f7d116d2b0976cf2ec447c0309316d1dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a80500e92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949c68b7a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273061fc5c0e0a33db7f2d43ea8086cf059f40fa2645944cd9e7f2e6ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858e13e8f0ba9d1dec469dc71e998d99ebf7cfda638d7ce859acfec3f14ec2aa98b53cd68a0d99d62a5620b7c0f61dc386c449664a94bca09859a35760b7b818087347697c239990daec8384a12d973d5470efe5dae887be689c6b1551f4c5a649d9dc563d7049c91453facecbee789a1d5a4896b2b7bec3ec5e60c4916e5561888502a12f4985f9c7dab41cbf31c26cd12d5116de95b521a57408adbbac278be82fef3f9d8a51385b376b57e20be83e7b27460729a626250ccd7982eba588f86195e15119eca569bebba8514e5bfcbe51f1a628793b4ed4424c95a731628fa38e167b79affcd50b561d3a9cb4bea872d9e5a06a4201fd09eecfe283854837a65ecf8cd6cdaad4bf223db323de9d4854d66d324a0d125e3ebe2ed3c78e47392962860de6bb86759406e74335443407d9ee7d4a4430b60b6ef369604e1282b0c1aa8d4b18e8db32a0eeaaabc7f7b5c49bd88cfe860f69f5510179d867970f975169591908282cd4367f82e62e3fa37876f30934c23dc2d02a0c25839f008ec099503c8d1b3169aa9c5a7db7f0116d203ac6503596c3a5b063c28f84c9eb4200000000000000000000000000000000000009f491210abc6ed14c49e22898d449d435f7e0e94a6b8b37924f725c47d17471ea258133681ff4dca50beba02eacfe0910c1676bdff06e737e0d12878ab5366985c0e8245864b3abd02e81ba0638e4de4b2f62098108535546b58ae8baee1fcc301a3b4101588e60f6f7678b82aa80e37832a2f49744d23e3a11bd2282ec7ff3400e8748f91e247b80e1b65400"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = dup(r2) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r1, 0x25, 0x0, @val=@netkit={@void, @value}}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r1, 0x25, 0x0, @void}, 0x10) 1.653490751s ago: executing program 0 (id=875): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb7, 0x93, 0xe3, 0x40, 0xeb1a, 0xe303, 0xfca0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa1, 0x7, 0x8a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) 1.582008938s ago: executing program 4 (id=876): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x4810, &(0x7f0000000400)={[{@nossd_spread}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@usebackuproot}, {@ref_verify}, {@autodefrag}, {@enospc_debug}, {@notreelog}]}, 0x3, 0x5145, &(0x7f0000005140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800fee}) 1.557149139s ago: executing program 1 (id=877): r0 = syz_io_uring_setup(0x72a9, &(0x7f0000000a00)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x200}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.504271687s ago: executing program 1 (id=878): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 1.318068239s ago: executing program 1 (id=879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 919.28189ms ago: executing program 4 (id=880): r0 = syz_io_uring_setup(0x520b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 791.640213ms ago: executing program 4 (id=881): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="24005a8020000180140003000000000002000000000001000000000004000200040001"], 0x40}}, 0x0) 682.730812ms ago: executing program 4 (id=882): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x16}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}], 0x28}}], 0x2, 0x0) 418.10509ms ago: executing program 1 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) 242.548157ms ago: executing program 4 (id=884): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x7ac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x780, 0x2, [@TCA_U32_POLICE={0x424, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x35c}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdb86}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x8, 0x7, 0xffffffff, 0x6, 0x0, 0x6, 0x0, 0x7, 0x2, 0x8, 0x2, 0x80000001, 0x8001, 0x5, 0x8, 0x382, 0x7, 0xfffffffc, 0x2, 0x0, 0xffffe418, 0x8, 0x1, 0x704, 0x100, 0x2, 0x8, 0xc84e, 0x7fff, 0x9, 0x1, 0x919, 0xf993, 0x40, 0xfffffffe, 0x9, 0x401, 0x1, 0x5, 0x5, 0x0, 0x5, 0x11b, 0x1000, 0xe72, 0x3, 0xe, 0x7, 0x8, 0x0, 0x1, 0x2, 0x9, 0xfffffffe, 0x9, 0x6, 0x5, 0xfffff800, 0x40, 0xffffff4e, 0x1, 0x6, 0x8, 0x8, 0x5, 0xc2c61f4, 0x5, 0x1000, 0x9, 0x0, 0x2, 0x85c, 0x80000001, 0x1, 0x3, 0x80000000, 0x9, 0x19ce, 0x67, 0x4, 0x81, 0x4, 0x80000000, 0xffffffff, 0x10001, 0x8, 0x7, 0x7, 0x467b, 0x9, 0x0, 0x2, 0x80, 0x2, 0xfffffffa, 0x1, 0x101, 0x60467ea, 0xff, 0x76, 0x80000000, 0x9, 0xfffffffc, 0x1, 0x8001, 0x7, 0x0, 0xffffffcd, 0x6, 0x8, 0x6, 0x80, 0x5, 0x6, 0x7, 0xfff, 0x2, 0x40, 0xff800000, 0x7, 0x8, 0x8, 0x851d, 0x5, 0xf35, 0x7ff, 0x4, 0x6, 0x878, 0x200, 0x4, 0x1, 0x0, 0x71e, 0x1, 0x4, 0x8, 0x210d, 0x1, 0x1000, 0x5, 0x5, 0x3, 0x8, 0x9d, 0x6, 0xb, 0x8, 0xffffffff, 0x9, 0x3, 0xe562, 0x800, 0x0, 0xa78f, 0x9, 0x6, 0x9caf, 0x6, 0x8001, 0x6, 0x1, 0x10001, 0xac0, 0x7, 0x2, 0x4, 0x1, 0x8, 0xa7b, 0x10000, 0x9, 0x2, 0x3, 0x8001, 0xf, 0x2, 0x1, 0x5, 0x1, 0xffff0001, 0xffffffff, 0x6, 0x5, 0x7fffffff, 0x7f, 0x8df, 0x200000, 0x80000001, 0x7, 0x78, 0x401, 0x3, 0x80da, 0x6a5, 0x1000, 0x200, 0x293, 0x4c55b9db, 0x5, 0x4, 0xa, 0xfffffffb, 0x4, 0x172f, 0xd160, 0x9, 0x5, 0xc50, 0x8, 0x2, 0x4, 0x101, 0x1, 0x8, 0xb, 0x5, 0xffffffff, 0x8, 0x7, 0xf16, 0x6, 0xd2e, 0x6, 0x0, 0x5, 0xe, 0x7ff, 0x8, 0x80, 0x10, 0x3, 0xf, 0x3, 0x7ff0, 0x7fff, 0x4, 0xfffffffe, 0x2, 0x72e, 0x10001, 0x5c, 0x1000, 0x2, 0x2, 0x8, 0x9, 0x101, 0x4, 0xffffef91, 0x4, 0x2000000, 0x2, 0x4]}]}, @TCA_U32_SEL={0x324, 0x5, {0xd, 0x20, 0x0, 0x2, 0x0, 0xfffe, 0x1, 0x5, [{0x4, 0x7, 0x5, 0x6}, {0x21d2939c, 0x8, 0x0, 0x7}, {0x0, 0x10, 0xb, 0x5}, {0xc, 0xfffffff7, 0x8001, 0x2}, {0x7, 0x82, 0x3, 0x2}, {0x6, 0xe83, 0xffffff63}, {0x2, 0x3, 0xc7, 0x800000}, {0x7, 0xb8f, 0x8, 0x7}, {0x5, 0xea4, 0x6, 0x1}, {0x5, 0x1, 0x7d, 0x3}, {0x2, 0x3, 0xf3c, 0xea}, {0x3a08, 0xc5, 0x9, 0x800}, {0xb872, 0x44, 0xffffff95, 0x8}, {0x2, 0x3, 0x72ce, 0x8}, {0x9d81, 0x81, 0x2, 0x1}, {0xa, 0x4, 0xf, 0x9}, {0xfffffffe, 0x4, 0x9, 0x2}, {0x6, 0x9, 0x5, 0x1}, {0x80000001, 0x458, 0x2, 0xfffffc00}, {0x10001, 0x4, 0x8, 0x6}, {0x41, 0x0, 0x10001, 0x7f}, {0x6, 0x839, 0x7, 0x5000000}, {0x1, 0x6239, 0x1, 0x4}, {0x8, 0x2e88, 0x8b8d, 0x2}, {0x7, 0xb8, 0x40, 0xfffff865}, {0x3, 0x6, 0x9ddb, 0x3}, {0x4, 0xf7, 0x0, 0x81}, {0x1, 0xe13, 0x0, 0xc}, {0x8000, 0x6, 0xfd19}, {0xd, 0x40, 0x8, 0x80000000}, {0x97, 0x7, 0x2, 0x4}, {0x10001, 0x6, 0x3, 0x8}, {0x6, 0x6, 0xfffffff7, 0x3}, {0x2, 0xf3e, 0x5, 0x659d6aa}, {0x80000000, 0x7, 0x8, 0xfffffff8}, {0x3bb9, 0x8, 0x3, 0x13088ab4}, {0x9, 0x5, 0xffffe27b, 0x81}, {0x9, 0x1, 0xe1, 0x3}, {0xf8, 0x3, 0x2, 0x5}, {0x80000000, 0x7, 0x8001, 0x6}, {0x0, 0x5, 0xffffff81, 0x6}, {0x1ff, 0xf, 0x9, 0x8}, {0x7, 0xb, 0x3, 0x3}, {0x6, 0x5, 0x23, 0x55a}, {0x6, 0x5, 0x800, 0x100}, {0x0, 0xfff, 0x4, 0xc}, {0x8c5, 0x6d, 0x9, 0x89e8}, {0x8, 0x5, 0x4815, 0xfff}, {0x4, 0x4, 0xa0, 0x9}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0xffff2730}, @TCA_U32_MARK={0x10, 0xa, {0xffffffff, 0x80000001}}, @TCA_U32_SEL={0x14, 0x5, {0x5, 0x4b, 0x6, 0x2, 0x0, 0x2, 0x4, 0x4}}]}}]}, 0x7ac}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): sses unique to avoid problems! [ 353.311842][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.338794][ T9446] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.397819][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.400404][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.402598][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.406971][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.409295][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.411735][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.421723][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.432989][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.434751][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.451002][ T9452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.453320][ T9452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.455982][ T9452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.458167][ T9452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.544492][ T9446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.546919][ T9446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.573318][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.575289][ T2172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.632495][ T9438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.802469][ T9763] chnl_net:caif_netlink_parms(): no params data found [ 353.840280][ T9438] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.851561][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 353.854161][ T6433] Bluetooth: hci0: command tx timeout [ 353.861903][ T9446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.865597][ T2008] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.867518][ T2008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.903702][ T2008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.913533][ T2008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.944981][ T2008] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.946791][ T2008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.995278][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.996919][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.998759][ T9763] bridge_slave_0: entered allmulticast mode [ 354.000861][ T9763] bridge_slave_0: entered promiscuous mode [ 354.009370][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.011241][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.013015][ T9763] bridge_slave_1: entered allmulticast mode [ 354.020647][ T9763] bridge_slave_1: entered promiscuous mode [ 354.042044][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.043826][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.046192][ T9759] bridge_slave_0: entered allmulticast mode [ 354.048319][ T9759] bridge_slave_0: entered promiscuous mode [ 354.063473][ T9438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.071937][ T9438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.080969][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.082767][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.085777][ T9759] bridge_slave_1: entered allmulticast mode [ 354.088364][ T9759] bridge_slave_1: entered promiscuous mode [ 354.100246][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.102135][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.115743][ T9763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.132576][ T9763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.159840][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.169249][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.193705][ T9763] team0: Port device team_slave_0 added [ 354.256644][ T9759] team0: Port device team_slave_0 added [ 354.260729][ T9763] team0: Port device team_slave_1 added [ 354.263097][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.632'. [ 354.280195][ T9759] team0: Port device team_slave_1 added [ 354.365395][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.367153][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.373566][ T9763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.384734][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.386679][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.392828][ T9763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.428197][ T9802] loop3: detected capacity change from 0 to 512 [ 354.439254][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.443540][ T9802] EXT4-fs: Mount option(s) incompatible with ext2 [ 354.447518][ T9446] veth0_vlan: entered promiscuous mode [ 354.450630][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.456851][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.462926][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.514812][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.516526][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.523834][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.535541][ T9446] veth1_vlan: entered promiscuous mode [ 354.585659][ T9763] hsr_slave_0: entered promiscuous mode [ 354.641265][ T9763] hsr_slave_1: entered promiscuous mode [ 354.702958][ T9446] veth0_macvtap: entered promiscuous mode [ 354.710960][ T9446] veth1_macvtap: entered promiscuous mode [ 354.796873][ T9759] hsr_slave_0: entered promiscuous mode [ 354.814074][ T6433] Bluetooth: hci1: command tx timeout [ 354.834472][ T9759] hsr_slave_1: entered promiscuous mode [ 354.874164][ T9759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.876010][ T9759] Cannot create hsr debugfs directory [ 355.048496][ T9438] veth0_vlan: entered promiscuous mode [ 355.058699][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.061365][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.063574][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.066620][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.068845][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.071508][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.073665][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.076855][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.081476][ T9446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.097288][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.099762][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.101932][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.106262][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.108457][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.110803][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.113298][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.117631][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.121298][ T9446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.130204][ T9438] veth1_vlan: entered promiscuous mode [ 355.151259][ T9446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.153298][ T9446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.155545][ T9446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.157874][ T9446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.287053][ T9763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.320795][ T9438] veth0_macvtap: entered promiscuous mode [ 355.349564][ T9438] veth1_macvtap: entered promiscuous mode [ 355.359924][ T2172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.362077][ T2172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.428563][ T9763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.437699][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.440112][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.442369][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.445982][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.448230][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.450556][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.452930][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.456128][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.458643][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.461108][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.465637][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.934073][ T6433] Bluetooth: hci0: command tx timeout [ 356.007994][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.010508][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.012903][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.023948][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.026359][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.029140][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.031352][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.034070][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.036282][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.038975][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.042570][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.115692][ T9763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.125220][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.127348][ T9438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.129639][ T9438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.131793][ T9438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.132614][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.144140][ T9438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.206624][ T9763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.252547][ T2008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.256419][ T2008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.290990][ T2104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.298913][ T2104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.397230][ T9816] loop1: detected capacity change from 0 to 1024 [ 356.568862][ T2033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.674827][ T9763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.696459][ T9827] loop1: detected capacity change from 0 to 512 [ 356.707271][ T9827] EXT4-fs: Mount option(s) incompatible with ext2 [ 356.807785][ T2033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.829849][ T9763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.858856][ T9763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.894118][ T6433] Bluetooth: hci1: command tx timeout [ 356.979672][ T2033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.999035][ T9763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.140799][ T9824] loop3: detected capacity change from 0 to 32768 [ 357.149241][ T2033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.172521][ T9824] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.663 (9824) [ 357.220687][ T9824] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 357.231015][ T9824] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 357.233455][ T9824] BTRFS info (device loop3): using free-space-tree [ 357.266066][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.305719][ T9831] loop1: detected capacity change from 0 to 40427 [ 357.314073][ T9831] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 357.316036][ T9831] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 357.317715][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.332810][ T9831] F2FS-fs (loop1): invalid crc value [ 357.356270][ T2172] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.358234][ T2172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.360744][ T9831] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 357.379262][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.381197][ T2172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.470557][ T9831] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 357.472315][ T9831] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 357.674282][ T9452] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 357.690713][ T2033] bridge_slave_1: left allmulticast mode [ 357.692335][ T2033] bridge_slave_1: left promiscuous mode [ 357.693741][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.755962][ T2033] bridge_slave_0: left allmulticast mode [ 357.757437][ T2033] bridge_slave_0: left promiscuous mode [ 357.758723][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.790959][ T2033] bridge_slave_1: left allmulticast mode [ 357.792359][ T2033] bridge_slave_1: left promiscuous mode [ 357.793824][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.844465][ T2033] bridge_slave_0: left allmulticast mode [ 357.845917][ T2033] bridge_slave_0: left promiscuous mode [ 357.847252][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.922606][ T9865] loop4: detected capacity change from 0 to 1024 [ 358.014007][ T6433] Bluetooth: hci0: command tx timeout [ 358.838588][ T9879] loop3: detected capacity change from 0 to 512 [ 358.841248][ T9879] EXT4-fs: Mount option(s) incompatible with ext2 [ 358.974123][ T6433] Bluetooth: hci1: command tx timeout [ 360.447993][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.498604][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.546620][ T2033] bond0 (unregistering): Released all slaves [ 361.270057][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.306777][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.358038][ T2033] bond0 (unregistering): Released all slaves [ 361.432571][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 361.470838][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.473130][ T9889] syzkaller1: entered promiscuous mode [ 361.482163][ T9889] syzkaller1: entered allmulticast mode [ 361.513428][ T9894] loop3: detected capacity change from 0 to 1024 [ 361.716127][ T9763] veth0_vlan: entered promiscuous mode [ 361.720856][ T9763] veth1_vlan: entered promiscuous mode [ 361.799537][ T9911] loop3: detected capacity change from 0 to 256 [ 361.837199][ T9911] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 362.491519][ T9763] veth0_macvtap: entered promiscuous mode [ 362.508065][ T9763] veth1_macvtap: entered promiscuous mode [ 362.601087][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.603717][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.606908][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.614212][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.620181][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.622818][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.624578][ T9923] loop3: detected capacity change from 0 to 512 [ 362.637222][ T9923] EXT4-fs: Mount option(s) incompatible with ext2 [ 362.663945][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.666467][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.674033][ T9923] overlayfs: failed to resolve './file2': -2 [ 362.694114][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.696677][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.698956][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.701320][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.755367][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.778696][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.781231][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.791296][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.793772][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.800497][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.802929][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.814187][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.816789][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.823280][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.828966][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.835392][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.837942][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.849432][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.908703][ T9943] trusted_key: syz.3.689 sent an empty control message without MSG_MORE. [ 362.962603][ T9945] loop3: detected capacity change from 0 to 1024 [ 363.081695][ T9929] can0: slcan on ttyS3. [ 363.133094][ T9763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.137838][ T9763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.142375][ T9763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.149426][ T9763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.237220][ T9934] can0 (unregistered): slcan off ttyS3. [ 363.271145][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.297288][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.480221][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.482315][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.484568][ T9759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.496068][ T9759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.508505][ T9759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.513583][ T9759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.637327][ T2172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.649799][ T2172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.749147][ T2033] hsr_slave_0: left promiscuous mode [ 363.798507][ T9961] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 363.798677][ T2033] hsr_slave_1: left promiscuous mode [ 363.856996][ T9963] loop2: detected capacity change from 0 to 512 [ 363.859578][ T9963] EXT4-fs: Mount option(s) incompatible with ext2 [ 363.876727][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.878784][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.887708][ T9963] overlayfs: failed to resolve './file2': -2 [ 363.904761][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.906729][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.972201][ T9969] loop2: detected capacity change from 0 to 256 [ 363.991033][ T2033] hsr_slave_0: left promiscuous mode [ 364.006162][ T9969] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 364.054255][ T2033] hsr_slave_1: left promiscuous mode [ 364.188389][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.195050][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.200174][ T9975] loop2: detected capacity change from 0 to 1024 [ 364.202265][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.222382][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.311228][ T2033] veth1_macvtap: left promiscuous mode [ 364.312710][ T2033] veth0_macvtap: left promiscuous mode [ 364.326122][ T2033] veth1_vlan: left promiscuous mode [ 364.335478][ T2033] veth0_vlan: left promiscuous mode [ 364.352293][ T2033] veth1_macvtap: left promiscuous mode [ 364.356077][ T2033] veth0_macvtap: left promiscuous mode [ 364.360337][ T2033] veth1_vlan: left promiscuous mode [ 364.366451][ T2033] veth0_vlan: left promiscuous mode [ 364.479286][ T9967] loop3: detected capacity change from 0 to 40427 [ 364.501708][ T9967] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 364.507863][ T9967] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 364.789180][ T9986] loop4: detected capacity change from 0 to 256 [ 364.791215][ T9986] exfat: Deprecated parameter 'utf8' [ 364.824012][ T9986] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 364.919208][ T9990] loop3: detected capacity change from 0 to 512 [ 364.922140][ T9990] EXT4-fs: Mount option(s) incompatible with ext2 [ 364.941396][ T9990] overlayfs: failed to resolve './file2': -2 [ 365.118609][ T9998] loop4: detected capacity change from 0 to 1024 [ 365.281095][T10004] netlink: 44 bytes leftover after parsing attributes in process `syz.2.713'. [ 366.836236][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 367.028262][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 371.706273][ T2343] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.707970][ T2343] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.729393][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 371.950746][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 374.694347][ T9977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.700'. [ 374.750171][ T6429] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.755309][ T6429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.759505][ T6429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.762065][ T6429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.774659][ T6429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 374.776829][ T6429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.888745][T10026] loop2: detected capacity change from 0 to 512 [ 374.903463][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.933422][T10030] loop4: detected capacity change from 0 to 1024 [ 374.953765][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.959060][T10026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.052237][ T9763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.205316][ T2008] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.207455][ T2008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.297570][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.299386][ T2172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.343875][T10014] chnl_net:caif_netlink_parms(): no params data found [ 375.426874][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.431084][T10014] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.435869][T10014] bridge_slave_0: entered allmulticast mode [ 375.438067][T10014] bridge_slave_0: entered promiscuous mode [ 375.441117][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.443161][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.445381][T10014] bridge_slave_1: entered allmulticast mode [ 375.447533][T10014] bridge_slave_1: entered promiscuous mode [ 375.473062][T10014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.480425][T10014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.528250][T10014] team0: Port device team_slave_0 added [ 375.531804][T10014] team0: Port device team_slave_1 added [ 375.574329][T10014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.576098][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.577372][T10058] netlink: 44 bytes leftover after parsing attributes in process `syz.3.726'. [ 375.600817][T10014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.605004][T10014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.607027][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.613277][T10014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.620729][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.712906][T10014] hsr_slave_0: entered promiscuous mode [ 375.735102][T10066] loop3: detected capacity change from 0 to 1024 [ 375.754830][T10014] hsr_slave_1: entered promiscuous mode [ 375.782774][T10014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.784770][T10014] Cannot create hsr debugfs directory [ 375.875473][T10065] syzkaller0: entered promiscuous mode [ 375.879279][T10065] syzkaller0: entered allmulticast mode [ 376.901697][ T6433] Bluetooth: hci3: command tx timeout [ 378.974377][ T6433] Bluetooth: hci3: command tx timeout [ 381.054202][ T6433] Bluetooth: hci3: command tx timeout [ 383.134222][ T6433] Bluetooth: hci3: command tx timeout [ 386.275453][ T6429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.282018][ T6429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.290145][ T6429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.294182][ T6429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.296760][ T6429] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.298921][ T6429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.321992][ T6429] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.326302][ T6429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.329191][ T6429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.333542][ T6429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.356542][ T6431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.357807][ T6430] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.362326][ T6430] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.362601][ T6431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.375226][ T6431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.380947][ T6430] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.383592][ T6430] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 386.389104][ T6430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.744703][ T9759] veth0_vlan: entered promiscuous mode [ 387.809870][ T9759] veth1_vlan: entered promiscuous mode [ 387.879191][ T9759] veth0_macvtap: entered promiscuous mode [ 387.935128][ T9759] veth1_macvtap: entered promiscuous mode [ 387.942634][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.946446][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.948857][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.951343][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.953798][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.957397][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.959989][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.962620][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.965695][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.968241][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.971736][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.067609][T10014] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.334780][ T6430] Bluetooth: hci2: command tx timeout [ 388.414255][ T6430] Bluetooth: hci5: command tx timeout [ 388.416721][ T6429] Bluetooth: hci4: command tx timeout [ 388.605438][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.608282][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.610856][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.613236][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.616449][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.619120][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.621654][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.625099][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.627716][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.630312][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.633864][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.858278][T10014] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.873149][ T9759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.875880][ T9759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.878093][ T9759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.880034][ T9759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.979352][T10014] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.004125][T10083] chnl_net:caif_netlink_parms(): no params data found [ 389.125641][T10014] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.132791][T10080] chnl_net:caif_netlink_parms(): no params data found [ 389.206004][T10085] chnl_net:caif_netlink_parms(): no params data found [ 389.241323][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.243217][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.245494][T10083] bridge_slave_0: entered allmulticast mode [ 389.247719][T10083] bridge_slave_0: entered promiscuous mode [ 389.251390][T10083] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.253234][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.256121][T10083] bridge_slave_1: entered allmulticast mode [ 389.258449][T10083] bridge_slave_1: entered promiscuous mode [ 389.278846][T10083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.283487][T10083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.333836][T10083] team0: Port device team_slave_0 added [ 389.336299][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.338121][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.340374][T10080] bridge_slave_0: entered allmulticast mode [ 389.342933][T10080] bridge_slave_0: entered promiscuous mode [ 389.347083][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.348965][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.350837][T10080] bridge_slave_1: entered allmulticast mode [ 389.352944][T10080] bridge_slave_1: entered promiscuous mode [ 389.366501][ T1946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.368386][ T1946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.392540][ T2033] bridge_slave_1: left allmulticast mode [ 389.394104][ T2033] bridge_slave_1: left promiscuous mode [ 389.395663][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.398808][ T2033] bridge_slave_0: left allmulticast mode [ 389.400471][ T2033] bridge_slave_0: left promiscuous mode [ 389.401944][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.406268][ T2033] bridge_slave_1: left allmulticast mode [ 389.407884][ T2033] bridge_slave_1: left promiscuous mode [ 389.409460][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.413365][ T2033] bridge_slave_0: left allmulticast mode [ 389.415359][ T2033] bridge_slave_0: left promiscuous mode [ 389.416845][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.414105][ T6429] Bluetooth: hci2: command tx timeout [ 390.494270][ T6429] Bluetooth: hci4: command tx timeout [ 390.504631][ T6429] Bluetooth: hci5: command tx timeout [ 391.916716][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.957269][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.006588][ T2033] bond0 (unregistering): Released all slaves [ 392.494157][ T6429] Bluetooth: hci2: command tx timeout [ 392.579187][ T6429] Bluetooth: hci5: command tx timeout [ 392.579294][ T6430] Bluetooth: hci4: command tx timeout [ 392.677077][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.727616][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.766564][ T2033] bond0 (unregistering): Released all slaves [ 392.784912][T10083] team0: Port device team_slave_1 added [ 392.792945][T10080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.797779][T10080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.883817][T10085] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.891349][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.893320][T10085] bridge_slave_0: entered allmulticast mode [ 392.899016][T10085] bridge_slave_0: entered promiscuous mode [ 392.902169][T10083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.904109][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.910496][T10083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.929563][ T2135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.931599][ T2135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.941602][T10080] team0: Port device team_slave_0 added [ 392.943760][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.956584][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.958616][T10085] bridge_slave_1: entered allmulticast mode [ 392.960781][T10085] bridge_slave_1: entered promiscuous mode [ 392.972885][T10083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.974833][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.981049][T10083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.111551][T10014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 393.115979][T10080] team0: Port device team_slave_1 added [ 393.117663][T10014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 393.160715][T10014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 393.164574][T10014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 393.175967][T10085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.246066][T10080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.247941][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.263667][T10080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.268399][T10080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.270261][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.283953][T10080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.288908][T10085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.434971][T10085] team0: Port device team_slave_0 added [ 393.438766][T10085] team0: Port device team_slave_1 added [ 393.476680][T10083] hsr_slave_0: entered promiscuous mode [ 393.524503][T10083] hsr_slave_1: entered promiscuous mode [ 393.564043][T10083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.566166][T10083] Cannot create hsr debugfs directory [ 393.641213][T10085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.643285][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.654610][T10085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.658914][T10085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.660842][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.667705][T10085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.716486][T10080] hsr_slave_0: entered promiscuous mode [ 393.754929][T10080] hsr_slave_1: entered promiscuous mode [ 393.794249][T10080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.796432][T10080] Cannot create hsr debugfs directory [ 394.066015][T10085] hsr_slave_0: entered promiscuous mode [ 394.104691][T10085] hsr_slave_1: entered promiscuous mode [ 394.145329][T10085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.147166][T10085] Cannot create hsr debugfs directory [ 394.221300][T10014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.264695][T10115] loop0: detected capacity change from 0 to 32768 [ 394.267050][T10115] btrfs: Deprecated parameter 'usebackuproot' [ 394.268827][T10115] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 394.271558][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.274576][T10115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.737 (10115) [ 394.292388][T10115] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.295177][T10115] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 394.297217][T10115] BTRFS info (device loop0): using free-space-tree [ 394.316656][ T1946] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 394.320487][T10115] BTRFS warning (device loop0): couldn't read tree root [ 394.324260][T10115] BTRFS warning (device loop0): try to load backup roots slot 1 [ 394.330495][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 394.354084][T10115] BTRFS warning (device loop0): couldn't read tree root [ 394.355831][T10115] BTRFS warning (device loop0): try to load backup roots slot 2 [ 394.359172][ T11] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 394.362159][T10115] BTRFS warning (device loop0): couldn't read tree root [ 394.363826][T10115] BTRFS warning (device loop0): try to load backup roots slot 3 [ 394.386359][T10115] BTRFS info (device loop0): rebuilding free space tree [ 394.420859][T10115] BTRFS info (device loop0): checking UUID tree [ 394.517784][ T9759] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.574042][ T6429] Bluetooth: hci2: command tx timeout [ 394.613819][ T2033] hsr_slave_0: left promiscuous mode [ 394.652180][ T2033] hsr_slave_1: left promiscuous mode [ 394.654098][ T6429] Bluetooth: hci4: command tx timeout [ 394.664198][ T6429] Bluetooth: hci5: command tx timeout [ 394.721273][T10138] loop0: detected capacity change from 0 to 1024 [ 394.724590][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.726518][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.743370][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.745846][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.752951][ T2033] hsr_slave_0: left promiscuous mode [ 394.814672][ T2033] hsr_slave_1: left promiscuous mode [ 394.894315][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.896438][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.904983][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.906988][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.959204][ T2033] veth1_macvtap: left promiscuous mode [ 394.960804][ T2033] veth0_macvtap: left promiscuous mode [ 394.962280][ T2033] veth1_vlan: left promiscuous mode [ 394.963701][ T2033] veth0_vlan: left promiscuous mode [ 394.969189][ T2033] veth1_macvtap: left promiscuous mode [ 394.970653][ T2033] veth0_macvtap: left promiscuous mode [ 394.972646][ T2033] veth1_vlan: left promiscuous mode [ 394.980931][ T2033] veth0_vlan: left promiscuous mode [ 396.918391][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 397.100462][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 401.550182][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 401.746352][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 404.190901][ T1946] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.192734][ T1946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.269517][T10083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.284255][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 404.465366][T10083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.472740][ T1946] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.474699][ T1946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.567059][T10083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.584298][T10014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.667419][T10083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.799973][T10014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.873479][T10014] veth0_vlan: entered promiscuous mode [ 404.880142][T10014] veth1_vlan: entered promiscuous mode [ 405.476984][T10085] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.502609][T10014] veth0_macvtap: entered promiscuous mode [ 405.506856][T10014] veth1_macvtap: entered promiscuous mode [ 405.515418][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.518654][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.521377][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.532437][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.536042][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.538863][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.541373][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.544528][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.549275][T10014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.686134][T10085] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.702084][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.706244][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.708864][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.711370][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.714070][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.717132][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.719490][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.721943][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.726333][T10014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.728663][T10165] netlink: 'syz.0.747': attribute type 26 has an invalid length. [ 405.807088][T10085] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.862085][T10014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.864765][T10014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.867011][T10014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.869366][T10014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.915976][T10085] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.998194][ T2008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.000349][ T2008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.018089][ T1946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.020309][ T1946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.256109][ T2251] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 407.470796][ T2251] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 407.481946][ T2251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.645166][ T2251] usb 1-1: config 0 descriptor?? [ 407.670063][ T2251] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 407.719130][ T2033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.767697][T10085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.772350][T10085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.782748][T10085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.860720][ T2033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.890390][T10085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.978175][ T2033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.023755][T10085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.032700][T10085] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.039496][ T1946] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.041746][ T1946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.106432][ T2033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.111673][ T1946] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.113573][ T1946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.141470][T10085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.243279][T10085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.325646][ T2033] bridge_slave_1: left allmulticast mode [ 408.327161][ T2033] bridge_slave_1: left promiscuous mode [ 408.328737][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.335395][ T2033] bridge_slave_0: left allmulticast mode [ 408.336907][ T2033] bridge_slave_0: left promiscuous mode [ 408.344884][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.359723][ T2033] bridge_slave_1: left allmulticast mode [ 408.361122][ T2033] bridge_slave_1: left promiscuous mode [ 408.362560][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.368002][ T2033] bridge_slave_0: left allmulticast mode [ 408.369454][ T2033] bridge_slave_0: left promiscuous mode [ 408.370885][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.387180][ T2033] bridge_slave_1: left allmulticast mode [ 408.388758][ T2033] bridge_slave_1: left promiscuous mode [ 408.390144][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.400000][ T2033] bridge_slave_0: left allmulticast mode [ 408.401582][ T2033] bridge_slave_0: left promiscuous mode [ 408.403137][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.431270][T10188] loop1: detected capacity change from 0 to 32768 [ 408.438584][T10188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.753 (10188) [ 408.445987][T10188] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.448317][T10188] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 408.450597][T10188] BTRFS info (device loop1): using free-space-tree [ 408.578484][T10014] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 409.524581][ T2251] gspca_stv06xx: I2C: Read error writing address: -71 [ 409.533608][ T2251] usb 1-1: USB disconnect, device number 5 [ 410.111218][T10221] loop0: detected capacity change from 0 to 512 [ 410.117356][T10221] EXT4-fs: Mount option(s) incompatible with ext2 [ 410.189736][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.758'. [ 410.780565][T10233] loop1: detected capacity change from 0 to 32768 [ 410.782981][T10233] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.761 (10233) [ 410.812903][T10233] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 410.817954][T10233] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 410.820379][T10233] BTRFS info (device loop1): using free-space-tree [ 410.981072][T10014] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 412.447998][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.494204][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.546607][ T2033] bond0 (unregistering): Released all slaves [ 413.227859][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.266789][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.306568][ T2033] bond0 (unregistering): Released all slaves [ 413.968121][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.016831][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.058588][ T2033] bond0 (unregistering): Released all slaves [ 414.248550][T10085] veth0_vlan: entered promiscuous mode [ 414.253565][T10085] veth1_vlan: entered promiscuous mode [ 414.363204][T10269] loop1: detected capacity change from 0 to 512 [ 414.387701][T10269] EXT4-fs: Mount option(s) incompatible with ext2 [ 414.422037][T10085] veth0_macvtap: entered promiscuous mode [ 414.426395][T10085] veth1_macvtap: entered promiscuous mode [ 415.197163][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.199773][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.202156][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.222163][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.244127][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.247356][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.249650][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.252184][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.267161][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.269875][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.273601][T10085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.397247][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.400195][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.402758][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.412615][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.415574][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.418484][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.421167][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.423574][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.426760][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.429603][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.441065][T10085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.601519][T10085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.603658][T10085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.609319][T10085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.611551][T10085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.658598][T10083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.688686][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.714313][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.732022][T10297] loop1: detected capacity change from 0 to 256 [ 415.733794][T10083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.739179][T10297] exfat: Unknown parameter 'S™-“fT”«é»l¢×%ŠsŸæ›-<ó ©QÄsªä“.+°æ¨‚T»æ«u\œÅ£@ûurZ·„DCLª8_Ä:HÅGàm ù ‚S±’L§' [ 415.743814][T10083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.751710][T10083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.952751][T10080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 415.959780][T10080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.027449][T10080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.052920][T10080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.270691][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.272857][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.319178][T10311] loop0: detected capacity change from 0 to 512 [ 416.335676][T10311] EXT4-fs: Mount option(s) incompatible with ext2 [ 416.365160][T10311] overlayfs: missing 'lowerdir' [ 416.740153][ T642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.768859][ T642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.364373][T10321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.736'. [ 417.446413][T10083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.529274][T10083] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.563479][T10080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.608954][ T2033] hsr_slave_0: left promiscuous mode [ 417.651745][ T2033] hsr_slave_1: left promiscuous mode [ 417.734137][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.736498][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.739309][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.741441][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.752460][ T2033] hsr_slave_0: left promiscuous mode [ 417.795159][ T2033] hsr_slave_1: left promiscuous mode [ 417.874049][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.877611][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.884086][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.893575][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.902885][ T2033] hsr_slave_0: left promiscuous mode [ 417.954217][ T2033] hsr_slave_1: left promiscuous mode [ 418.044154][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.050327][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.053781][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.056551][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.108219][ T2033] veth1_macvtap: left promiscuous mode [ 418.109970][ T2033] veth0_macvtap: left promiscuous mode [ 418.112168][ T2033] veth1_vlan: left promiscuous mode [ 418.115068][ T2033] veth0_vlan: left promiscuous mode [ 418.119876][ T2033] veth1_macvtap: left promiscuous mode [ 418.124438][ T2033] veth0_macvtap: left promiscuous mode [ 418.129735][ T2033] veth1_vlan: left promiscuous mode [ 418.132947][ T2033] veth0_vlan: left promiscuous mode [ 418.139653][ T2033] veth1_macvtap: left promiscuous mode [ 418.142976][ T2033] veth0_macvtap: left promiscuous mode [ 418.151603][ T2033] veth1_vlan: left promiscuous mode [ 418.153412][ T2033] veth0_vlan: left promiscuous mode [ 418.774300][T10338] loop1: detected capacity change from 0 to 512 [ 418.782350][T10338] EXT4-fs: Mount option(s) incompatible with ext2 [ 418.821476][T10338] overlayfs: missing 'lowerdir' [ 418.868964][T10340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.944112][T10340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.690726][T10348] netlink: 44 bytes leftover after parsing attributes in process `syz.1.785'. [ 420.981870][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 421.167693][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 425.877201][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 426.059628][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 427.780090][ T6430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.783527][ T6430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.788222][ T6430] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.791050][ T6430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.794366][ T6430] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 427.796649][ T6430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 429.787817][ T6429] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.805074][ T6429] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.808901][ T6429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.813790][ T6429] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.816491][ T6429] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 429.818620][ T6429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.854171][ T6429] Bluetooth: hci1: command tx timeout [ 430.758352][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 430.805213][ T6430] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 430.809671][ T6430] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 430.813151][ T6430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 430.823766][ T6430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 430.839584][ T6430] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 430.841582][ T6430] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 430.969453][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 431.854299][ T6430] Bluetooth: hci6: command tx timeout [ 431.933996][ T6430] Bluetooth: hci1: command tx timeout [ 432.894020][ T6430] Bluetooth: hci7: command tx timeout [ 433.145492][ T2343] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.147193][ T2343] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.588426][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.590218][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.644770][ T2008] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.646815][ T2008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.681395][T10080] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.767626][ T1946] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.769389][ T1946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.772332][ T1946] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.774435][ T1946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.852857][T10358] chnl_net:caif_netlink_parms(): no params data found [ 433.936739][ T6430] Bluetooth: hci6: command tx timeout [ 433.942378][T10080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.014162][ T6430] Bluetooth: hci1: command tx timeout [ 434.252119][T10083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.256266][T10354] chnl_net:caif_netlink_parms(): no params data found [ 434.274843][T10358] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.277630][T10358] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.279649][T10358] bridge_slave_0: entered allmulticast mode [ 434.281789][T10358] bridge_slave_0: entered promiscuous mode [ 434.293278][T10358] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.297169][T10358] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.299247][T10358] bridge_slave_1: entered allmulticast mode [ 434.301537][T10358] bridge_slave_1: entered promiscuous mode [ 434.359097][T10080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.362867][T10361] chnl_net:caif_netlink_parms(): no params data found [ 434.369024][T10358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.377709][T10083] veth0_vlan: entered promiscuous mode [ 434.382605][T10083] veth1_vlan: entered promiscuous mode [ 434.440907][T10358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.443572][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.449093][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.451148][T10354] bridge_slave_0: entered allmulticast mode [ 434.453504][T10354] bridge_slave_0: entered promiscuous mode [ 434.514137][T10354] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.516104][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.517893][T10354] bridge_slave_1: entered allmulticast mode [ 434.520152][T10354] bridge_slave_1: entered promiscuous mode [ 434.529961][T10358] team0: Port device team_slave_0 added [ 434.563091][T10358] team0: Port device team_slave_1 added [ 434.619407][T10358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.621151][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.631491][T10358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.652945][T10354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.669677][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.671383][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.673479][T10361] bridge_slave_0: entered allmulticast mode [ 434.676221][T10361] bridge_slave_0: entered promiscuous mode [ 434.679836][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.681648][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.683593][T10361] bridge_slave_1: entered allmulticast mode [ 434.686273][T10361] bridge_slave_1: entered promiscuous mode [ 434.698981][T10354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.702136][T10358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.704262][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.710529][T10358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.805854][T10358] hsr_slave_0: entered promiscuous mode [ 434.864392][T10358] hsr_slave_1: entered promiscuous mode [ 434.899893][T10080] veth0_vlan: entered promiscuous mode [ 434.921086][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.928947][T10354] team0: Port device team_slave_0 added [ 434.949144][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.958114][T10083] veth0_macvtap: entered promiscuous mode [ 434.961757][T10083] veth1_macvtap: entered promiscuous mode [ 434.964781][T10354] team0: Port device team_slave_1 added [ 434.972808][T10080] veth1_vlan: entered promiscuous mode [ 434.974267][ T6430] Bluetooth: hci7: command tx timeout [ 434.998607][T10361] team0: Port device team_slave_0 added [ 435.001884][T10361] team0: Port device team_slave_1 added [ 435.017528][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.019491][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.038221][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.057623][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.059319][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.065865][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.069558][T10354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.071386][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.078561][T10354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.107343][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.110008][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.112649][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.115861][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.118361][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.120889][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.125346][T10083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.128914][T10354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.130800][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.138127][T10354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.185076][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.187868][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.190391][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.192822][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.195790][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.198539][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.202238][T10083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.236459][T10080] veth0_macvtap: entered promiscuous mode [ 435.240017][T10080] veth1_macvtap: entered promiscuous mode [ 435.318613][T10358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.393208][T10361] hsr_slave_0: entered promiscuous mode [ 435.444574][T10361] hsr_slave_1: entered promiscuous mode [ 435.494236][T10361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.496413][T10361] Cannot create hsr debugfs directory [ 435.585764][T10354] hsr_slave_0: entered promiscuous mode [ 435.624504][T10354] hsr_slave_1: entered promiscuous mode [ 435.664296][T10354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.666337][T10354] Cannot create hsr debugfs directory [ 435.725803][T10358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.835004][T10083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.837313][T10083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.839538][T10083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.841643][T10083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.918797][T10358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.014303][ T6430] Bluetooth: hci6: command tx timeout [ 436.018117][T10358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.052555][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.055642][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.057819][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.060428][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.062928][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.066265][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.068733][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.071258][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.075149][T10080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.094080][ T6430] Bluetooth: hci1: command tx timeout [ 436.124788][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.126803][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.134571][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.137738][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.140085][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.142520][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.147377][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.150032][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.152428][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.155358][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.158944][T10080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.197691][T10080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.200062][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.201995][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.204414][T10080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.206575][T10080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.208811][T10080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.293040][T10361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.917966][T10397] loop3: detected capacity change from 0 to 512 [ 436.920794][T10397] EXT4-fs: Mount option(s) incompatible with ext2 [ 436.936263][T10397] overlayfs: missing 'lowerdir' [ 436.969746][T10361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.054986][ T6430] Bluetooth: hci7: command tx timeout [ 437.298238][ T2033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.406350][T10361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.486144][ T2033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.550128][T10361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.617720][ T2033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.625546][ T642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.627606][ T642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.659107][ T642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.661134][ T642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.752338][ T2033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.848676][T10361] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.858308][T10361] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.874538][T10361] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 437.896449][T10361] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 437.914500][T10405] netlink: 'syz.2.792': attribute type 21 has an invalid length. [ 437.916835][T10405] netlink: 156 bytes leftover after parsing attributes in process `syz.2.792'. [ 438.094406][ T6430] Bluetooth: hci6: command tx timeout [ 438.225175][ T2033] bridge_slave_1: left allmulticast mode [ 438.226753][ T2033] bridge_slave_1: left promiscuous mode [ 438.228554][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.231547][ T2033] bridge_slave_0: left allmulticast mode [ 438.233210][ T2033] bridge_slave_0: left promiscuous mode [ 438.243576][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.316422][ T2033] bridge_slave_1: left allmulticast mode [ 438.339591][ T2033] bridge_slave_1: left promiscuous mode [ 438.384904][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.521288][ T2033] bridge_slave_0: left allmulticast mode [ 438.552941][ T2033] bridge_slave_0: left promiscuous mode [ 438.598812][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.787160][ T2033] bridge_slave_1: left allmulticast mode [ 438.831457][ T2033] bridge_slave_1: left promiscuous mode [ 438.844100][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.857833][ T2033] bridge_slave_0: left allmulticast mode [ 438.859290][ T2033] bridge_slave_0: left promiscuous mode [ 438.860625][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.999125][T10433] loop2: detected capacity change from 0 to 512 [ 439.006829][T10433] EXT4-fs: Mount option(s) incompatible with ext2 [ 439.034870][T10433] overlayfs: missing 'lowerdir' [ 439.134104][ T6430] Bluetooth: hci7: command tx timeout [ 439.378344][T10436] loop2: detected capacity change from 0 to 32768 [ 439.380561][T10436] btrfs: Deprecated parameter 'usebackuproot' [ 439.381976][T10436] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 439.384964][T10436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.798 (10436) [ 439.389869][T10436] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 439.392668][T10436] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 439.396452][T10436] BTRFS info (device loop2): using free-space-tree [ 439.454185][ T2135] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 439.457995][T10436] BTRFS warning (device loop2): couldn't read tree root [ 439.462120][T10436] BTRFS warning (device loop2): try to load backup roots slot 1 [ 439.477040][ T44] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 439.487257][T10436] BTRFS warning (device loop2): couldn't read tree root [ 439.489147][T10436] BTRFS warning (device loop2): try to load backup roots slot 2 [ 439.491270][ T2135] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 439.494485][T10436] BTRFS warning (device loop2): couldn't read tree root [ 439.497444][T10436] BTRFS warning (device loop2): try to load backup roots slot 3 [ 439.519738][T10436] BTRFS info (device loop2): rebuilding free space tree [ 439.557272][T10436] BTRFS info (device loop2): checking UUID tree [ 439.655744][T10080] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 442.908183][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.946697][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.986591][ T2033] bond0 (unregistering): Released all slaves [ 443.638428][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.677130][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.726575][ T2033] bond0 (unregistering): Released all slaves [ 444.447507][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.487690][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.526303][ T2033] bond0 (unregistering): Released all slaves [ 444.608801][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.624308][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.636986][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.638716][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.652600][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.654616][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.754443][T10480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.814911][T10480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.827460][T10361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.830060][T10361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.162441][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.549345][T10358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 445.559298][T10358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 445.563369][T10361] veth0_vlan: entered promiscuous mode [ 445.569503][T10361] veth1_vlan: entered promiscuous mode [ 445.643207][T10527] loop2: detected capacity change from 0 to 512 [ 445.654488][T10527] EXT4-fs: Mount option(s) incompatible with ext2 [ 445.680599][T10527] overlayfs: missing 'lowerdir' [ 445.766683][T10358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 445.782393][T10358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 445.960950][T10361] veth0_macvtap: entered promiscuous mode [ 446.035910][T10354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 446.048407][T10361] veth1_macvtap: entered promiscuous mode [ 446.081463][T10535] loop2: detected capacity change from 0 to 32768 [ 446.092097][T10535] btrfs: Deprecated parameter 'usebackuproot' [ 446.093825][T10535] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 446.104800][T10535] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.808 (10535) [ 446.111428][T10535] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 446.114229][T10535] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 446.116390][T10535] BTRFS info (device loop2): using free-space-tree [ 446.184525][ T44] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 446.189181][T10535] BTRFS warning (device loop2): couldn't read tree root [ 446.191043][T10535] BTRFS warning (device loop2): try to load backup roots slot 1 [ 446.220664][ T44] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 446.230450][T10535] BTRFS warning (device loop2): couldn't read tree root [ 446.232370][T10535] BTRFS warning (device loop2): try to load backup roots slot 2 [ 446.234679][ T44] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 446.237509][T10535] BTRFS warning (device loop2): couldn't read tree root [ 446.239205][T10535] BTRFS warning (device loop2): try to load backup roots slot 3 [ 446.261523][T10535] BTRFS info (device loop2): rebuilding free space tree [ 446.284658][T10535] BTRFS info (device loop2): checking UUID tree [ 446.331904][T10358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.334112][T10354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 446.350072][T10354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.360860][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.363563][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.374708][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.377671][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.380097][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.390806][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.394830][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.397467][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.399877][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.419746][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.432372][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.440798][T10080] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 446.476315][T10354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.508917][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.511705][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.527001][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.529759][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.532024][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.543963][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.546538][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.549375][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.551548][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.565553][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.577882][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.604817][T10358] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.636926][T10585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.655564][T10585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.753765][T10361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.756762][T10361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.758920][T10361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.761205][T10361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.783483][ T2172] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.785351][ T2172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.869119][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.870998][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.154082][ T2033] hsr_slave_0: left promiscuous mode [ 447.194304][ T2033] hsr_slave_1: left promiscuous mode [ 447.364013][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.366014][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.368504][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.370642][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.377555][ T2033] hsr_slave_0: left promiscuous mode [ 447.414463][ T2033] hsr_slave_1: left promiscuous mode [ 447.514239][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.516629][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.519442][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.521660][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.526629][ T2033] hsr_slave_0: left promiscuous mode [ 447.590512][ T2033] hsr_slave_1: left promiscuous mode [ 447.674083][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.676194][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.678709][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.680587][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.719740][ T2033] veth1_macvtap: left promiscuous mode [ 447.721456][ T2033] veth0_macvtap: left promiscuous mode [ 447.723136][ T2033] veth1_vlan: left promiscuous mode [ 447.724864][ T2033] veth0_vlan: left promiscuous mode [ 447.727450][ T2033] veth1_macvtap: left promiscuous mode [ 447.729192][ T2033] veth0_macvtap: left promiscuous mode [ 447.730754][ T2033] veth1_vlan: left promiscuous mode [ 447.732070][ T2033] veth0_vlan: left promiscuous mode [ 447.734601][ T2033] veth1_macvtap: left promiscuous mode [ 447.736392][ T2033] veth0_macvtap: left promiscuous mode [ 447.737938][ T2033] veth1_vlan: left promiscuous mode [ 447.739497][ T2033] veth0_vlan: left promiscuous mode [ 448.213586][T10596] loop2: detected capacity change from 0 to 512 [ 448.225868][T10596] EXT4-fs: Mount option(s) incompatible with ext2 [ 448.240900][T10596] overlayfs: missing 'lowerdir' [ 449.406111][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.444203][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.520328][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 450.720835][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 451.899277][T10618] loop2: detected capacity change from 0 to 512 [ 451.902717][T10618] EXT4-fs: Mount option(s) incompatible with ext2 [ 451.927968][T10618] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 451.930327][T10618] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 455.158908][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 455.338970][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 457.249065][ T6429] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.255767][ T6429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.258775][ T6429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.262134][ T6429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.265579][ T6429] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 457.267528][ T6429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.374299][ T6429] Bluetooth: hci0: command tx timeout [ 459.973142][ T2033] team0 (unregistering): Port device team_slave_1 removed [ 460.159837][T10641] loop2: detected capacity change from 0 to 512 [ 460.163723][T10641] EXT4-fs: Mount option(s) incompatible with ext2 [ 460.171883][ T2033] team0 (unregistering): Port device team_slave_0 removed [ 460.173612][T10641] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 460.176177][T10641] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 461.454069][ T6429] Bluetooth: hci0: command tx timeout [ 462.634433][ T642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.636564][ T642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.679716][T10648] syzkaller0: entered promiscuous mode [ 462.681328][T10648] syzkaller0: entered allmulticast mode [ 462.703730][T10358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.706898][T10358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.544115][ T6429] Bluetooth: hci0: command tx timeout [ 465.614088][ T6429] Bluetooth: hci0: command tx timeout [ 470.846728][ T6430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.850993][ T6430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.854207][ T6430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.859775][ T6430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.866593][ T6430] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 470.868730][ T6430] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.894058][ T6430] Bluetooth: hci3: command tx timeout [ 474.700671][ T642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.714131][ T642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.771361][T10354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.809143][T10354] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.926069][T10654] chnl_net:caif_netlink_parms(): no params data found [ 474.943075][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.944998][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.975384][ T6430] Bluetooth: hci3: command tx timeout [ 475.053793][T10358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.088994][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.090766][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.180239][T10358] veth0_vlan: entered promiscuous mode [ 475.192187][T10358] veth1_vlan: entered promiscuous mode [ 475.211752][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.226025][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.227976][T10654] bridge_slave_0: entered allmulticast mode [ 475.229909][T10654] bridge_slave_0: entered promiscuous mode [ 475.258352][T10625] chnl_net:caif_netlink_parms(): no params data found [ 475.262817][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.270841][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.272976][T10654] bridge_slave_1: entered allmulticast mode [ 475.278215][T10654] bridge_slave_1: entered promiscuous mode [ 475.330346][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.354628][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.383783][T10358] veth0_macvtap: entered promiscuous mode [ 475.388433][T10358] veth1_macvtap: entered promiscuous mode [ 475.440629][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.443376][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.468278][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.471216][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.473786][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.479676][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.483624][T10358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.492618][T10354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.498698][T10654] team0: Port device team_slave_0 added [ 475.501935][T10654] team0: Port device team_slave_1 added [ 475.529890][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.532798][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.539393][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.545451][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.548002][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.550693][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.563137][T10358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.596585][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.598474][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.605943][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.631523][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.633550][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.638709][T10625] bridge_slave_0: entered allmulticast mode [ 475.645480][T10625] bridge_slave_0: entered promiscuous mode [ 475.666691][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.670873][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.685413][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.693518][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.698800][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.700725][T10625] bridge_slave_1: entered allmulticast mode [ 475.702791][T10625] bridge_slave_1: entered promiscuous mode [ 475.719263][T10358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.721573][T10358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.723784][T10358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.732264][T10358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.747730][T10625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.751881][T10625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.845262][T10625] team0: Port device team_slave_0 added [ 475.885664][T10654] hsr_slave_0: entered promiscuous mode [ 475.924341][T10654] hsr_slave_1: entered promiscuous mode [ 475.974179][T10654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.976198][T10654] Cannot create hsr debugfs directory [ 475.990806][T10625] team0: Port device team_slave_1 added [ 476.254650][T10625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.256493][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.265109][T10625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.287267][T10625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.289721][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.296757][T10625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.307859][T10354] veth0_vlan: entered promiscuous mode [ 476.322233][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.331423][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.349176][T10354] veth1_vlan: entered promiscuous mode [ 476.416149][T10625] hsr_slave_0: entered promiscuous mode [ 476.454426][T10625] hsr_slave_1: entered promiscuous mode [ 476.500000][T10625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.501962][T10625] Cannot create hsr debugfs directory [ 476.527109][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.529931][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.587076][T10654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.717104][T10654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.729199][T10354] veth0_macvtap: entered promiscuous mode [ 476.988693][T10693] loop4: detected capacity change from 0 to 512 [ 476.991357][T10693] EXT4-fs: Mount option(s) incompatible with ext2 [ 476.998995][T10693] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 477.001534][T10693] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 477.064180][ T6430] Bluetooth: hci3: command tx timeout [ 477.231373][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.239730][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.243249][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.245934][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.247868][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.249615][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.251539][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.253149][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.259186][T10354] veth1_macvtap: entered promiscuous mode [ 477.264243][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.266212][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.268193][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.270140][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.284580][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.288201][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.290100][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.292118][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.297104][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.299094][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.301520][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.319386][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.321579][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.323358][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.327123][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.329249][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.331092][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.332839][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.334807][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.336543][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.338480][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.339970][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.341788][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.343635][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.345678][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.347538][ T2251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.359125][ T2251] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 477.476628][T10654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.502074][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.508008][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.510564][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.512909][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.518099][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.522317][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.527686][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.530318][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.536828][T10354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.578961][T10654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.591110][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.594498][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.597209][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.599927][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.602387][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.605586][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.608859][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.611599][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.615961][T10354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.624711][T10354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.626933][T10354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.630322][T10354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.632578][T10354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.710278][ T2172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.712460][ T2172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.742975][ T1946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.746915][ T1946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.853510][ T2033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.026482][ T2033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.135751][ T2033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.178952][T10711] loop0: detected capacity change from 0 to 32768 [ 478.181853][T10711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.843 (10711) [ 478.207398][T10711] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 478.210208][T10711] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 478.212132][T10711] BTRFS info (device loop0): using free-space-tree [ 478.265874][ T2033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.349121][T10710] loop4: detected capacity change from 0 to 32768 [ 478.351697][T10710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.844 (10710) [ 478.370370][T10710] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 478.372943][T10710] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 478.383475][T10710] BTRFS info (device loop4): using free-space-tree [ 478.387014][T10354] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 478.714092][ T2033] bridge_slave_1: left allmulticast mode [ 478.715597][ T2033] bridge_slave_1: left promiscuous mode [ 478.717209][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.768007][T10755] loop1: detected capacity change from 0 to 512 [ 478.783296][T10755] EXT4-fs: Mount option(s) incompatible with ext2 [ 478.791848][ T2033] bridge_slave_0: left allmulticast mode [ 478.793668][ T2033] bridge_slave_0: left promiscuous mode [ 478.795360][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.812686][ T2033] bridge_slave_1: left allmulticast mode [ 478.820152][ T2033] bridge_slave_1: left promiscuous mode [ 478.826321][T10755] overlayfs: missing 'lowerdir' [ 478.827889][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.846863][ T2033] bridge_slave_0: left allmulticast mode [ 478.848608][ T2033] bridge_slave_0: left promiscuous mode [ 478.850188][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.134221][ T6430] Bluetooth: hci3: command tx timeout [ 479.216210][T10761] loop1: detected capacity change from 0 to 1024 [ 479.267272][T10761] hfsplus: catalog searching failed [ 479.491503][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.514744][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.571003][T10361] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 479.643747][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.694290][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.061601][T10780] loop1: detected capacity change from 0 to 512 [ 480.067939][T10780] EXT4-fs: Mount option(s) incompatible with ext2 [ 480.075680][T10780] overlayfs: missing 'lowerdir' [ 480.796067][T10788] loop4: detected capacity change from 0 to 32768 [ 480.809586][T10788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.860 (10788) [ 480.950638][T10788] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 480.957603][T10788] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 480.962377][T10788] BTRFS info (device loop4): using free-space-tree [ 481.471410][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.518166][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.744672][T10361] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 481.912219][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.944281][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.069701][T10823] loop1: detected capacity change from 0 to 1024 [ 482.071852][T10823] EXT4-fs: Ignoring removed orlov option [ 482.073312][T10823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 482.075401][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.101800][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.105269][T10823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.148328][ T2033] bond0 (unregistering): Released all slaves [ 482.649588][T10829] loop4: detected capacity change from 0 to 32768 [ 482.655317][T10829] btrfs: Deprecated parameter 'usebackuproot' [ 482.656835][T10829] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 482.662616][T10829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.867 (10829) [ 482.676905][T10829] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 482.681314][T10829] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 482.683678][T10829] BTRFS info (device loop4): using free-space-tree [ 482.737614][ T2008] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 482.745796][T10829] BTRFS warning (device loop4): couldn't read tree root [ 482.748968][T10829] BTRFS warning (device loop4): try to load backup roots slot 1 [ 482.753606][ T2008] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 482.762171][T10829] BTRFS warning (device loop4): couldn't read tree root [ 482.773949][T10829] BTRFS warning (device loop4): try to load backup roots slot 2 [ 482.777248][ T2008] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 482.780873][T10829] BTRFS warning (device loop4): couldn't read tree root [ 482.782942][T10829] BTRFS warning (device loop4): try to load backup roots slot 3 [ 482.788312][T10829] BTRFS info (device loop4): rebuilding free space tree [ 482.794442][T10829] BTRFS info (device loop4): checking UUID tree [ 482.849756][T10361] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 482.948028][ T2033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.997881][T10849] GUP no longer grows the stack in syz.4.868 (10849): 20009000-2000c000 (20006000) [ 483.000590][T10849] CPU: 1 UID: 0 PID: 10849 Comm: syz.4.868 Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 483.003256][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 483.005743][T10849] Call trace: [ 483.006574][T10849] dump_backtrace+0x1b8/0x1e4 [ 483.007865][T10849] show_stack+0x2c/0x3c [ 483.008937][T10849] dump_stack_lvl+0xe4/0x150 [ 483.010014][T10849] dump_stack+0x1c/0x28 [ 483.011169][T10849] __get_user_pages+0x9a4/0xa44 [ 483.012364][T10849] __gup_longterm_locked+0x340/0x1338 [ 483.013715][T10849] pin_user_pages+0x138/0x1e0 [ 483.014959][T10849] xdp_umem_create+0x7cc/0xdec [ 483.015953][T10849] xsk_setsockopt+0x6ac/0x944 [ 483.017171][T10849] do_sock_setsockopt+0x2a0/0x4e0 [ 483.018475][T10849] __sys_setsockopt+0x128/0x1a8 [ 483.019773][T10849] __arm64_sys_setsockopt+0xb8/0xd4 [ 483.021201][T10849] invoke_syscall+0x98/0x2b8 [ 483.022414][T10849] el0_svc_common+0x130/0x23c [ 483.023581][T10849] do_el0_svc+0x48/0x58 [ 483.024577][T10849] el0_svc+0x54/0x168 [ 483.025600][T10849] el0t_64_sync_handler+0x84/0xfc [ 483.026922][T10849] el0t_64_sync+0x190/0x194 [ 483.032079][ T2033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.047023][T10358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.082704][ T2033] bond0 (unregistering): Released all slaves [ 483.147727][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.161523][T10850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.868'. [ 483.987243][T10879] loop4: detected capacity change from 0 to 1024 [ 484.050605][T10879] hfsplus: catalog searching failed [ 484.151502][ T2135] hfsplus: b-tree write err: -5, ino 4 [ 484.420579][ T6430] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 484.423090][ T6430] Bluetooth: hci7: Injecting HCI hardware error event [ 484.427269][ T6430] Bluetooth: hci7: hardware error 0x00 [ 484.444002][ T2251] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 484.459290][T10891] loop4: detected capacity change from 0 to 32768 [ 484.461895][T10891] btrfs: Deprecated parameter 'usebackuproot' [ 484.463543][T10891] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 484.468153][T10891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.876 (10891) [ 484.515652][T10891] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 484.518218][T10891] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 484.522019][T10891] BTRFS info (device loop4): using free-space-tree [ 484.635334][ T2251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 484.638129][ T2251] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 484.646334][ T2251] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 484.648772][ T2251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.650971][ T2251] usb 1-1: Product: syz [ 484.651090][ T44] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 484.653054][ T2251] usb 1-1: Manufacturer: syz [ 484.659936][ T2251] usb 1-1: SerialNumber: syz [ 484.661441][T10891] BTRFS warning (device loop4): couldn't read tree root [ 484.664577][T10891] BTRFS warning (device loop4): try to load backup roots slot 1 [ 484.669704][ T2251] usb 1-1: config 0 descriptor?? [ 484.675445][ T44] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 484.701914][T10891] BTRFS warning (device loop4): couldn't read tree root [ 484.707324][T10625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.709056][T10891] BTRFS warning (device loop4): try to load backup roots slot 2 [ 484.718220][ T45] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 484.728381][T10891] BTRFS warning (device loop4): couldn't read tree root [ 484.730499][ T2251] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 484.736943][T10891] BTRFS warning (device loop4): try to load backup roots slot 3 [ 484.739173][ T2251] em28xx 1-1:0.0: Video interface 0 found: bulk [ 484.757942][T10891] BTRFS info (device loop4): rebuilding free space tree [ 484.780488][T10625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.784766][T10625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.788277][T10625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.801920][T10891] BTRFS info (device loop4): checking UUID tree [ 484.878756][T10361] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 484.975387][ T2251] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 485.093236][ T2033] hsr_slave_0: left promiscuous mode [ 485.121244][ T2251] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 485.127314][ T2251] em28xx 1-1:0.0: board has no eeprom [ 485.194269][ T2251] em28xx 1-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 485.208405][ T2251] em28xx 1-1:0.0: analog set to bulk mode. [ 485.210869][ T6505] em28xx 1-1:0.0: Registering V4L2 extension [ 485.227400][ T2251] usb 1-1: USB disconnect, device number 6 [ 485.240107][ T2251] em28xx 1-1:0.0: Disconnecting em28xx [ 485.295027][ T2033] hsr_slave_1: left promiscuous mode [ 485.377541][ T6505] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 485.541596][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.543542][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.549152][ T6505] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 485.549375][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.553189][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.564425][ T6505] xc2028 1-0061: creating new instance [ 485.566063][ T6505] xc2028 1-0061: type set to XCeive xc2028/xc3028 tuner [ 485.568878][ T6505] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 485.570764][ T6505] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 485.572979][ T6505] em28xx 1-1:0.0: No AC97 audio processor [ 485.592590][ T2033] hsr_slave_0: left promiscuous mode [ 485.634420][ T2033] hsr_slave_1: left promiscuous mode [ 485.714159][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.716336][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.718865][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.720974][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.825457][ T2033] veth1_macvtap: left promiscuous mode [ 485.832251][ T2033] veth0_macvtap: left promiscuous mode [ 485.838951][ T2033] veth1_macvtap: left promiscuous mode [ 485.843431][ T2033] veth0_macvtap: left promiscuous mode [ 485.850234][ T2033] veth1_vlan: left promiscuous mode [ 485.853393][ T2033] veth0_vlan: left promiscuous mode [ 485.934139][ T6505] em28xx 1-1:0.0: Registered radio device as radio2 [ 485.936187][ T6505] usb 1-1: Decoder not found [ 485.937299][ T6505] em28xx 1-1:0.0: failed to create media graph [ 485.938879][ T6505] em28xx 1-1:0.0: V4L2 device radio2 deregistered [ 485.944397][ T6505] em28xx 1-1:0.0: V4L2 device video11 deregistered [ 485.949541][ T6505] xc2028 1-0061: destroying instance [ 485.952109][ T6505] em28xx 1-1:0.0: Registering input extension [ 485.956592][ T2251] em28xx 1-1:0.0: Closing input extension [ 485.980357][ T2251] em28xx 1-1:0.0: Freeing device [ 485.992568][ T6505] usb 1-1:0.0: Direct firmware load for xc3028-v27.fw failed with error -2 [ 485.995739][ T6505] usb 1-1:0.0: Falling back to sysfs fallback for: xc3028-v27.fw [ 485.998010][ T6505] kobject: kobject_add_internal failed for firmware (error: -2 parent: 1-1:0.0) [ 486.000608][ T6505] firmware xc3028-v27.fw: fw_load_sysfs_fallback: device_register failed [ 486.003046][ T6505] ================================================================== [ 486.004963][ T6505] BUG: KASAN: slab-use-after-free in load_firmware_cb+0xbc/0x1638 [ 486.007143][ T6505] Read of size 8 at addr ffff0000ceca5318 by task kworker/0:6/6505 [ 486.009161][ T6505] [ 486.009807][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: kworker/0:6 Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 486.012403][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 486.015013][ T6505] Workqueue: events request_firmware_work_func [ 486.016584][ T6505] Call trace: [ 486.017545][ T6505] dump_backtrace+0x1b8/0x1e4 [ 486.018784][ T6505] show_stack+0x2c/0x3c [ 486.019896][ T6505] dump_stack_lvl+0xe4/0x150 [ 486.021053][ T6505] print_report+0x198/0x538 [ 486.022315][ T6505] kasan_report+0xd8/0x138 [ 486.023501][ T6505] __asan_report_load8_noabort+0x20/0x2c [ 486.024882][ T6505] load_firmware_cb+0xbc/0x1638 [ 486.026172][ T6505] request_firmware_work_func+0x150/0x214 [ 486.027776][ T6505] process_one_work+0x79c/0x15b8 [ 486.029078][ T6505] worker_thread+0x978/0xec4 [ 486.030077][ T6505] kthread+0x288/0x310 [ 486.030991][ T6505] ret_from_fork+0x10/0x20 [ 486.032269][ T6505] [ 486.032850][ T6505] Allocated by task 6505: [ 486.034007][ T6505] kasan_save_track+0x40/0x78 [ 486.035257][ T6505] kasan_save_alloc_info+0x40/0x50 [ 486.036682][ T6505] __kasan_kmalloc+0xac/0xc4 [ 486.037912][ T6505] __kmalloc_cache_noprof+0x244/0x374 [ 486.039297][ T6505] tuner_probe+0x108/0x1788 [ 486.040565][ T6505] i2c_device_probe+0x640/0x8f8 [ 486.041839][ T6505] really_probe+0x38c/0x8fc [ 486.042981][ T6505] __driver_probe_device+0x194/0x374 [ 486.044498][ T6505] driver_probe_device+0x78/0x330 [ 486.045820][ T6505] __device_attach_driver+0x2a8/0x4f4 [ 486.047228][ T6505] bus_for_each_drv+0x228/0x2bc [ 486.048543][ T6505] __device_attach+0x2b4/0x434 [ 486.049841][ T6505] device_initial_probe+0x24/0x34 [ 486.051183][ T6505] bus_probe_device+0x178/0x240 [ 486.052613][ T6505] device_add+0x728/0xa6c [ 486.053721][ T6505] device_register+0x28/0x38 [ 486.054962][ T6505] i2c_new_client_device+0x7d8/0xc3c [ 486.056242][ T6505] v4l2_i2c_new_subdev_board+0xb0/0x224 [ 486.057697][ T6505] v4l2_i2c_new_subdev+0xe4/0x150 [ 486.059004][ T6505] em28xx_v4l2_init+0x6c8/0x28d4 [ 486.060268][ T6505] em28xx_init_extension+0x10c/0x1b4 [ 486.061578][ T6505] request_module_async+0x68/0x98 [ 486.062965][ T6505] process_one_work+0x79c/0x15b8 [ 486.064291][ T6505] worker_thread+0x978/0xec4 [ 486.065522][ T6505] kthread+0x288/0x310 [ 486.066637][ T6505] ret_from_fork+0x10/0x20 [ 486.067737][ T6505] [ 486.068347][ T6505] Freed by task 6505: [ 486.069360][ T6505] kasan_save_track+0x40/0x78 [ 486.070622][ T6505] kasan_save_free_info+0x54/0x6c [ 486.071929][ T6505] poison_slab_object+0x128/0x180 [ 486.073278][ T6505] __kasan_slab_free+0x3c/0x70 [ 486.074487][ T6505] kfree+0x154/0x3e0 [ 486.075498][ T6505] tuner_remove+0x1d8/0x1f4 [ 486.076720][ T6505] i2c_device_remove+0x8c/0x1c0 [ 486.077983][ T6505] device_release_driver_internal+0x3e4/0x698 [ 486.079636][ T6505] device_release_driver+0x28/0x38 [ 486.080860][ T6505] bus_remove_device+0x314/0x3b4 [ 486.082136][ T6505] device_del+0x480/0x828 [ 486.083263][ T6505] device_unregister+0x2c/0xcc [ 486.084568][ T6505] i2c_unregister_device+0x130/0x190 [ 486.086014][ T6505] v4l2_i2c_subdev_unregister+0xa8/0xbc [ 486.087395][ T6505] v4l2_device_unregister+0x17c/0x248 [ 486.088836][ T6505] em28xx_v4l2_init+0x1300/0x28d4 [ 486.090201][ T6505] em28xx_init_extension+0x10c/0x1b4 [ 486.091591][ T6505] request_module_async+0x68/0x98 [ 486.092970][ T6505] process_one_work+0x79c/0x15b8 [ 486.094176][ T6505] worker_thread+0x978/0xec4 [ 486.095338][ T6505] kthread+0x288/0x310 [ 486.096304][ T6505] ret_from_fork+0x10/0x20 [ 486.097459][ T6505] [ 486.098016][ T6505] The buggy address belongs to the object at ffff0000ceca5000 [ 486.098016][ T6505] which belongs to the cache kmalloc-2k of size 2048 [ 486.101799][ T6505] The buggy address is located 792 bytes inside of [ 486.101799][ T6505] freed 2048-byte region [ffff0000ceca5000, ffff0000ceca5800) [ 486.105535][ T6505] [ 486.106115][ T6505] The buggy address belongs to the physical page: [ 486.107856][ T6505] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10eca0 [ 486.110235][ T6505] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 486.112517][ T6505] anon flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 486.114608][ T6505] page_type: 0xfdffffff(slab) [ 486.115879][ T6505] raw: 05ffc00000000040 ffff0000c0002000 0000000000000000 dead000000000001 [ 486.118205][ T6505] raw: 0000000000000000 0000000080080008 00000001fdffffff 0000000000000000 [ 486.120409][ T6505] head: 05ffc00000000040 ffff0000c0002000 0000000000000000 dead000000000001 [ 486.122691][ T6505] head: 0000000000000000 0000000080080008 00000001fdffffff 0000000000000000 [ 486.124910][ T6505] head: 05ffc00000000003 fffffdffc33b2801 ffffffffffffffff 0000000000000000 [ 486.127061][ T6505] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 486.129489][ T6505] page dumped because: kasan: bad access detected [ 486.131310][ T6505] [ 486.131883][ T6505] Memory state around the buggy address: [ 486.133472][ T6505] ffff0000ceca5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 486.135468][ T6505] ffff0000ceca5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 486.137494][ T6505] >ffff0000ceca5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 486.139777][ T6505] ^ [ 486.141061][ T6505] ffff0000ceca5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 486.142988][ T6505] ffff0000ceca5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 486.145087][ T6505] ================================================================== [ 486.193825][ T6505] Disabling lock debugging due to kernel taint [ 486.195773][ T6505] Unable to handle kernel paging request at virtual address dfff800000000005 [ 486.198100][ T6505] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 486.200319][ T6505] Mem abort info: [ 486.201277][ T6505] ESR = 0x0000000096000005 [ 486.202330][ T6505] EC = 0x25: DABT (current EL), IL = 32 bits [ 486.205125][ T6505] SET = 0, FnV = 0 [ 486.206276][ T6505] EA = 0, S1PTW = 0 [ 486.207492][ T6505] FSC = 0x05: level 1 translation fault [ 486.209606][ T6505] Data abort info: [ 486.210761][ T6505] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 486.212366][ T6505] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 486.216507][ T6505] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 486.218200][ T6505] [dfff800000000005] address between user and kernel address ranges [ 486.220181][ T6505] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 486.221745][ T6505] Modules linked in: [ 486.222630][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: kworker/0:6 Tainted: G B 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 486.225722][ T6505] Tainted: [B]=BAD_PAGE [ 486.226868][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 486.229444][ T6505] Workqueue: events request_firmware_work_func [ 486.230939][ T6505] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 486.232998][ T6505] pc : load_firmware_cb+0x1a8/0x1638 [ 486.234325][ T6505] lr : load_firmware_cb+0xdc/0x1638 [ 486.235823][ T6505] sp : ffff8000a35d7880 [ 486.236992][ T6505] x29: ffff8000a35d79e0 x28: 0000000000000000 x27: ffff7000146baf28 [ 486.239105][ T6505] x26: 0000000000000000 x25: 1ffff000146baf4c x24: 1fffe00019d94a63 [ 486.241007][ T6505] x23: ffff8000a35d7940 x22: dfff800000000000 x21: ffff0000e01d9660 [ 486.243101][ T6505] x20: dfff800000000000 x19: ffff0000ceca5318 x18: 1fffe000366d31ee [ 486.245200][ T6505] x17: ffff80008f56d000 x16: ffff80008b339a14 x15: 0000000000000001 [ 486.247271][ T6505] x14: 1ffff00012543a94 x13: 0000000000000000 x12: 0000000000000000 [ 486.249271][ T6505] x11: ffff700012543a95 x10: 0000000000ff0100 x9 : 0000000000000000 [ 486.251209][ T6505] x8 : 0000000000000005 x7 : 1fffe000366d31ef x6 : ffff8000802b7e24 [ 486.253370][ T6505] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000801dfd40 [ 486.255431][ T6505] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000028 [ 486.257642][ T6505] Call trace: [ 486.258204][ T6505] load_firmware_cb+0x1a8/0x1638 [ 486.259444][ T6505] request_firmware_work_func+0x150/0x214 [ 486.260878][ T6505] process_one_work+0x79c/0x15b8 [ 486.262193][ T6505] worker_thread+0x978/0xec4 [ 486.263285][ T6505] kthread+0x288/0x310 [ 486.264406][ T6505] ret_from_fork+0x10/0x20 [ 486.265431][ T6505] Code: 9100a380 d2d00016 d343fc08 f2fbfff6 (38746908) [ 486.267058][ T6505] ---[ end trace 0000000000000000 ]--- [ 486.974659][ T6505] Kernel panic - not syncing: Oops: Fatal exception [ 486.976377][ T6505] SMP: stopping secondary CPUs [ 486.977613][ T6505] Kernel Offset: disabled [ 486.978610][ T6505] CPU features: 0x10,00000207,00200128,42017203 [ 486.980274][ T6505] Memory Limit: none [ 487.690748][ T6505] Rebooting in 86400 seconds..