last executing test programs: 14.393571788s ago: executing program 0 (id=1322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000003680)={0x450, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{}, {}, {}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x450}}, 0x0) 13.192074386s ago: executing program 0 (id=1329): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) 13.078678016s ago: executing program 0 (id=1331): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) 12.162061811s ago: executing program 0 (id=1340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000001700000004000000140005000003000000f1ffffff00000000000900080002000500000014000600ff0100"], 0x4c}}, 0x0) 12.083674738s ago: executing program 0 (id=1341): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) 11.974369727s ago: executing program 0 (id=1344): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x29, 0x2, 0x0) 7.002377855s ago: executing program 2 (id=1391): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}}, &(0x7f0000000200)=0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=','], 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'team_slave_0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x32004, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x7d, &(0x7f0000000280)={r7}, 0x8) 3.774003671s ago: executing program 2 (id=1412): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x40}}, 0x0) 3.766257601s ago: executing program 4 (id=1413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.65540165s ago: executing program 4 (id=1415): r0 = io_uring_setup(0x2c49, &(0x7f0000002240)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 3.482891224s ago: executing program 2 (id=1417): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) 3.474062005s ago: executing program 4 (id=1418): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 3.345665795s ago: executing program 2 (id=1419): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0xefa}, 0x28) 3.29355948s ago: executing program 2 (id=1421): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvfrom$inet6(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.733598966s ago: executing program 4 (id=1424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.31495279s ago: executing program 2 (id=1426): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x40}}, 0x0) 2.31177105s ago: executing program 4 (id=1427): r0 = io_uring_setup(0x2c49, &(0x7f0000002240)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 2.084209499s ago: executing program 4 (id=1429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@remote, @remote, @multicast, @dev, @remote, @multicast, @dev]}) 1.753685246s ago: executing program 3 (id=1434): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xdd) 1.482679898s ago: executing program 1 (id=1435): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x32, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x100}]) 1.34431107s ago: executing program 1 (id=1436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.305756613s ago: executing program 1 (id=1437): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204080, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=maccyrillic,iocharset=cp737,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=000000000003,\x00'/36], 0x3e, 0x299, &(0x7f0000000b80)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000880), 0x1, 0x53b, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x43451) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000140)=0xfffffbff) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x2008000, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c6e6f6164696e6963622c6e6f6164696e6963622c73686f727461642c7569643d666f726765742c6769643d666f726765742c6769643d69676e6f72652c6e6f6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c00508d5c6fd14a140518c2f8949ec502a29ec1c3795fd47c03a3a72c97984a3502b51d8bfa33ab6090f2e4dc00fe8ed0b41f905b98973a0ca9e4c5eea9e8f394f5f12b6f8f8f86dda2c5d5dd18d0075da59034af306372c1b6cf04e02375a1f7ce9a910a4fc47c7e3a34fd"], 0x2, 0xc40, &(0x7f0000002740)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000300), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) 609.55863ms ago: executing program 3 (id=1438): r0 = io_uring_setup(0x2c49, &(0x7f0000002240)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 550.242555ms ago: executing program 3 (id=1439): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)}) 500.770269ms ago: executing program 3 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefa}, 0x50) 397.570587ms ago: executing program 3 (id=1441): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x1}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x0) 396.331028ms ago: executing program 1 (id=1442): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x12}}, 0x10) 308.973755ms ago: executing program 1 (id=1443): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)) 215.620263ms ago: executing program 1 (id=1444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) sched_setscheduler(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) 0s ago: executing program 3 (id=1445): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x10012, r0, 0x0) futex_waitv(&(0x7f0000002300)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): mode [ 42.144140][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.151097][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.153667][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.156386][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.186362][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.196187][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.199407][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.202198][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.204988][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.208014][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.212022][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.214721][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.227241][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.235233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.238157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.240609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.243303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.251243][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.254081][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.257870][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.260757][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.263253][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.266068][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.272256][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.281046][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.283315][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.288167][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.290844][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.295028][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.297536][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.305235][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.308702][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.313687][ T4305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.316077][ T4305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.320407][ T4305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.322790][ T4305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.342458][ T4306] device veth0_macvtap entered promiscuous mode [ 42.385311][ T4306] device veth1_macvtap entered promiscuous mode [ 42.389815][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.392608][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.395275][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.398916][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.479716][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.482630][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.485296][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.511689][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.514390][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.531895][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.541242][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.544056][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.561482][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.580130][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.583055][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.594609][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.604402][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.609349][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.616403][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.624728][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.636686][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.639809][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.652439][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.655313][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.663826][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.666626][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.677988][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.683730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.686517][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.695930][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.702338][ T4306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.704429][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.704739][ T4306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.726583][ T4390] raw_sendmsg: syz.2.7 forgot to set AF_INET. Fix it! [ 42.741021][ T4306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.743364][ T4306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.768537][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.875230][ T4396] tmpfs: Bad value for 'mpol' [ 42.948376][ T1603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.950583][ T1603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.953780][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.000994][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.003312][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.033379][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.103872][ T4406] loop0: detected capacity change from 0 to 128 [ 43.136294][ T4406] ======================================================= [ 43.136294][ T4406] WARNING: The mand mount option has been deprecated and [ 43.136294][ T4406] and is ignored by this kernel. Remove the mand [ 43.136294][ T4406] option from the mount to silence this warning. [ 43.136294][ T4406] ======================================================= [ 43.447354][ T4417] Cannot find set identified by id 0 to match [ 43.906985][ T4311] Bluetooth: hci4: command tx timeout [ 43.909721][ T4311] Bluetooth: hci2: command tx timeout [ 43.912182][ T4311] Bluetooth: hci3: command tx timeout [ 43.914534][ T4311] Bluetooth: hci0: command tx timeout [ 43.916789][ T4311] Bluetooth: hci1: command tx timeout [ 44.272017][ T4428] tmpfs: Bad value for 'mpol' [ 44.713180][ T4406] loop0: detected capacity change from 0 to 32768 [ 44.774524][ T4422] loop4: detected capacity change from 0 to 32768 [ 44.787492][ T4406] XFS (loop0): Mounting V5 Filesystem [ 44.791377][ T4422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.19 (4422) [ 44.813288][ T4422] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.816671][ T4422] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 44.822541][ T4422] BTRFS info (device loop4): using free space tree [ 44.948156][ T4406] XFS (loop0): Starting recovery (logdev: internal) [ 44.951071][ T4480] tmpfs: Bad value for 'mpol' [ 44.970137][ T4406] XFS (loop0): Ending recovery (logdev: internal) [ 45.151636][ T4422] BTRFS info (device loop4): enabling ssd optimizations [ 45.197042][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 45.239416][ T4306] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.596624][ T4298] XFS (loop0): Unmounting Filesystem [ 45.947318][ T4303] Bluetooth: hci1: command tx timeout [ 45.948891][ T4303] Bluetooth: hci0: command tx timeout [ 45.950391][ T4303] Bluetooth: hci3: command tx timeout [ 45.951930][ T4303] Bluetooth: hci2: command tx timeout [ 45.953523][ T4303] Bluetooth: hci4: command tx timeout [ 45.955246][ T4511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'. [ 45.982883][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 45.985347][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 46.134160][ T4522] loop2: detected capacity change from 0 to 64 [ 47.531930][ T4527] loop0: detected capacity change from 0 to 32768 [ 47.548512][ T4527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.47 (4527) [ 47.585333][ T4527] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 47.589663][ T4527] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 47.591909][ T4527] BTRFS info (device loop0): using free space tree [ 47.679354][ T4569] loop3: detected capacity change from 0 to 64 [ 47.996495][ T4527] BTRFS info (device loop0): enabling ssd optimizations [ 48.153054][ T4298] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.228104][ T27] audit: type=1800 audit(48.180:2): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.67" name="/" dev="sockfs" ino=30183 res=0 errno=0 [ 49.147437][ T4610] capability: warning: `syz.2.70' uses 32-bit capabilities (legacy support in use) [ 49.416220][ T4630] wlan0 speed is unknown, defaulting to 1000 [ 49.432084][ T4630] wlan0 speed is unknown, defaulting to 1000 [ 49.460311][ T4630] wlan0 speed is unknown, defaulting to 1000 [ 49.504022][ T4635] loop2: detected capacity change from 0 to 512 [ 49.537954][ T4635] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.541625][ T4635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.760767][ T22] wlan0 speed is unknown, defaulting to 1000 [ 49.768969][ T4630] infiniband syz2: set active [ 49.770493][ T4630] infiniband syz2: added wlan0 [ 49.773867][ T4635] EXT4-fs (loop2): 1 truncate cleaned up [ 49.775504][ T4635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.555739][ T27] audit: type=1800 audit(50.510:3): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.80" name="/" dev="sockfs" ino=29248 res=0 errno=0 [ 50.650802][ T4630] RDS/IB: syz2: added [ 50.652511][ T4630] smc: adding ib device syz2 with port count 1 [ 50.676980][ T4630] smc: ib device syz2 port 1 has pnetid [ 50.684872][ T4286] wlan0 speed is unknown, defaulting to 1000 [ 50.692883][ T4630] wlan0 speed is unknown, defaulting to 1000 [ 50.818573][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 50.899640][ T4630] wlan0 speed is unknown, defaulting to 1000 [ 50.976713][ T4630] wlan0 speed is unknown, defaulting to 1000 [ 51.086195][ T4630] wlan0 speed is unknown, defaulting to 1000 [ 51.205949][ T4630] wlan0 speed is unknown, defaulting to 1000 [ 51.213565][ T4698] netlink: 392 bytes leftover after parsing attributes in process `syz.0.101'. [ 51.246937][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 51.358077][ T4704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.105'. [ 51.387031][ T4704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.105'. [ 51.438664][ T4709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.463641][ T4709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.681649][ T4680] loop1: detected capacity change from 0 to 40427 [ 51.684482][ T4709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.687597][ T4709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.709558][ T4680] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 51.711776][ T4680] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 51.745316][ T4730] loop3: detected capacity change from 0 to 64 [ 51.928928][ T4680] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.100216][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 52.116508][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 52.757979][ T4680] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 52.760218][ T4680] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 52.798958][ T4743] rdma_rxe: rxe_register_device failed with error -23 [ 52.801147][ T4743] rdma_rxe: failed to add wlan0 [ 53.426113][ T4780] loop0: detected capacity change from 0 to 512 [ 53.429866][ T4774] rdma_rxe: rxe_register_device failed with error -23 [ 53.431804][ T4774] rdma_rxe: failed to add wlan0 [ 53.457578][ T4780] EXT4-fs: Ignoring removed oldalloc option [ 53.627442][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 53.651676][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 54.233534][ T4780] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.128: Parent and EA inode have the same ino 15 [ 54.315837][ T4780] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.320580][ T4780] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.128: Parent and EA inode have the same ino 15 [ 54.328040][ T4780] EXT4-fs (loop0): 1 orphan inode deleted [ 54.329705][ T4780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 54.886447][ T4811] loop1: detected capacity change from 0 to 64 [ 55.180497][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 56.073554][ T4854] loop0: detected capacity change from 0 to 512 [ 56.109059][ T4854] EXT4-fs: Ignoring removed oldalloc option [ 56.180034][ T4854] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.155: Parent and EA inode have the same ino 15 [ 56.186692][ T4854] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.155: Parent and EA inode have the same ino 15 [ 56.216681][ T4831] loop4: detected capacity change from 0 to 32768 [ 56.219030][ T4831] XFS: ikeep mount option is deprecated. [ 56.220581][ T4831] XFS: noikeep mount option is deprecated. [ 56.234148][ T4854] EXT4-fs (loop0): 1 orphan inode deleted [ 56.245320][ T4854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 56.246393][ T4825] loop2: detected capacity change from 0 to 32768 [ 56.297497][ T4831] XFS (loop4): Mounting V5 Filesystem [ 56.329219][ T4879] loop1: detected capacity change from 0 to 64 [ 56.401485][ T4825] XFS (loop2): Mounting V5 Filesystem [ 57.583127][ T4825] XFS (loop2): Ending clean mount [ 57.590225][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 57.593443][ T4831] XFS (loop4): Ending clean mount [ 57.608538][ T4831] XFS (loop4): Quotacheck needed: Please wait. [ 57.642505][ T4831] XFS (loop4): Quotacheck: Done. [ 57.737153][ T4296] XFS (loop2): Unmounting Filesystem [ 57.761224][ T4306] XFS (loop4): Unmounting Filesystem [ 58.109795][ T4911] loop3: detected capacity change from 0 to 256 [ 58.131818][ T4911] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.142901][ T4911] Process accounting resumed [ 58.484212][ T4920] loop0: detected capacity change from 0 to 64 [ 58.542229][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.544795][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.554791][ T4922] loop1: detected capacity change from 0 to 512 [ 58.557655][ T4922] EXT4-fs: Ignoring removed oldalloc option [ 58.664864][ T4922] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.177: Parent and EA inode have the same ino 15 [ 58.669395][ T4922] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.177: Parent and EA inode have the same ino 15 [ 58.680863][ T4922] EXT4-fs (loop1): 1 orphan inode deleted [ 58.682601][ T4922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 58.717738][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.726493][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.751205][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 60.980083][ T4927] loop3: detected capacity change from 0 to 32768 [ 61.058986][ T4927] XFS (loop3): Mounting V5 Filesystem [ 61.214957][ T4927] XFS (loop3): Ending clean mount [ 61.235121][ T4966] loop2: detected capacity change from 0 to 256 [ 61.439634][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 61.467445][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 62.083622][ T4966] FAT-fs (loop2): Directory bread(block 64) failed [ 62.085586][ T4966] FAT-fs (loop2): Directory bread(block 65) failed [ 62.098121][ T4966] FAT-fs (loop2): Directory bread(block 66) failed [ 62.099919][ T4966] FAT-fs (loop2): Directory bread(block 67) failed [ 62.116961][ T4966] FAT-fs (loop2): Directory bread(block 68) failed [ 62.118825][ T4966] FAT-fs (loop2): Directory bread(block 69) failed [ 62.120671][ T4966] FAT-fs (loop2): Directory bread(block 70) failed [ 62.151348][ T4966] FAT-fs (loop2): Directory bread(block 71) failed [ 62.224318][ T4966] FAT-fs (loop2): Directory bread(block 72) failed [ 62.229364][ T4305] XFS (loop3): Unmounting Filesystem [ 62.234596][ T4966] FAT-fs (loop2): Directory bread(block 73) failed [ 62.319186][ T4978] loop4: detected capacity change from 0 to 512 [ 62.321471][ T4978] EXT4-fs: Ignoring removed oldalloc option [ 62.371970][ T4787] kworker/u4:13: attempt to access beyond end of device [ 62.371970][ T4787] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 62.411472][ T4979] loop1: detected capacity change from 0 to 256 [ 62.414320][ T4978] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.192: Parent and EA inode have the same ino 15 [ 62.419468][ T4978] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.192: Parent and EA inode have the same ino 15 [ 62.432193][ T4978] EXT4-fs (loop4): 1 orphan inode deleted [ 62.433778][ T4978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.181878][ T4989] loop2: detected capacity change from 0 to 64 [ 63.224291][ T4979] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.444162][ T4979] Process accounting resumed [ 63.476925][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 64.509103][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.511197][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.513888][ T5007] [U] [ 64.514752][ T5007] [U] [ 64.515549][ T5007] [U] [ 64.516247][ T5007] [U] [ 64.535619][ T5007] [U] [ 64.536444][ T5007] [U] [ 64.537183][ T5007] [U] [ 64.537897][ T5007] [U] [ 64.538853][ T5007] [U] [ 64.539584][ T5007] [U] [ 64.540397][ T5007] [U] [ 64.710428][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 64.738914][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 65.424457][ T5003] [U] [ 65.540388][ T5025] loop4: detected capacity change from 0 to 512 [ 65.542632][ T5025] EXT4-fs: Ignoring removed oldalloc option [ 65.581380][ T5025] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.208: Parent and EA inode have the same ino 15 [ 65.590792][ T5025] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.208: Parent and EA inode have the same ino 15 [ 65.603835][ T5025] EXT4-fs (loop4): 1 orphan inode deleted [ 65.605402][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 66.562313][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 66.652280][ T5041] sctp: [Deprecated]: syz.3.212 (pid 5041) Use of int in max_burst socket option deprecated. [ 66.652280][ T5041] Use struct sctp_assoc_value instead [ 66.678403][ T5014] loop0: detected capacity change from 0 to 32768 [ 66.779433][ T5014] XFS (loop0): Mounting V5 Filesystem [ 66.875520][ T5014] XFS (loop0): Ending clean mount [ 66.956571][ T4298] XFS (loop0): Unmounting Filesystem [ 67.472951][ T5095] loop4: detected capacity change from 0 to 256 [ 67.497686][ T5095] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.578605][ T5095] Process accounting resumed [ 68.454303][ T5108] loop3: detected capacity change from 0 to 512 [ 68.456499][ T5108] EXT4-fs: Ignoring removed nobh option [ 68.479584][ T5108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.549589][ T5108] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.633553][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 68.716602][ T5089] loop1: detected capacity change from 0 to 32768 [ 68.721427][ T5118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 68.827072][ T4303] Bluetooth: hci3: command tx timeout [ 70.115088][ T14] cfg80211: failed to load regulatory.db [ 70.276717][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 70.589955][ T5170] loop0: detected capacity change from 0 to 4096 [ 70.635988][ T5177] loop2: detected capacity change from 0 to 512 [ 70.763276][ T5182] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.772518][ T5177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.816589][ T5178] sp0: Synchronizing with TNC [ 70.863628][ T5186] loop1: detected capacity change from 0 to 256 [ 70.918731][ T5186] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.934606][ T5186] Process accounting resumed [ 71.018180][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 71.152546][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 71.346857][ T5208] loop3: detected capacity change from 0 to 64 [ 71.427903][ T5208] hfs: request for non-existent node 16777216 in B*Tree [ 71.436118][ T5208] hfs: request for non-existent node 16777216 in B*Tree [ 71.864213][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 72.097325][ T5237] sp0: Synchronizing with TNC [ 72.134031][ T5241] loop4: detected capacity change from 0 to 256 [ 72.152209][ T5240] loop3: detected capacity change from 0 to 256 [ 72.371129][ T27] audit: type=1326 audit(72.330:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.289" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3343628 code=0x0 [ 73.749095][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 73.992730][ T5281] loop3: detected capacity change from 0 to 256 [ 74.000663][ T5284] sp0: Synchronizing with TNC [ 74.158553][ T5290] loop0: detected capacity change from 0 to 256 [ 74.536897][ T27] audit: type=1326 audit(74.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.0.307" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d43628 code=0x0 [ 75.224827][ T5305] loop3: detected capacity change from 0 to 64 [ 75.442211][ T5311] loop0: detected capacity change from 0 to 4096 [ 75.575493][ T5321] loop2: detected capacity change from 0 to 256 [ 75.588404][ T5324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.681328][ T5328] random: crng reseeded on system resumption [ 76.394974][ T5321] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.413703][ T5321] Process accounting resumed [ 76.502460][ T5333] loop0: detected capacity change from 0 to 512 [ 76.514390][ T5333] EXT4-fs: Ignoring removed oldalloc option [ 76.534592][ T5338] loop3: detected capacity change from 0 to 256 [ 76.545138][ T5333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.322: Parent and EA inode have the same ino 15 [ 76.555043][ T5333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.322: Parent and EA inode have the same ino 15 [ 76.579695][ T5333] EXT4-fs (loop0): 1 orphan inode deleted [ 76.581611][ T5333] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 77.990604][ T5352] loop1: detected capacity change from 0 to 256 [ 78.315003][ T27] audit: type=1326 audit(78.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.1.326" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff93d43628 code=0x0 [ 78.329344][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 78.617708][ T5366] loop0: detected capacity change from 0 to 4096 [ 78.664338][ T5367] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.106045][ T5362] loop4: detected capacity change from 0 to 32768 [ 79.184434][ T5393] loop0: detected capacity change from 0 to 512 [ 79.186682][ T5393] EXT4-fs: Ignoring removed oldalloc option [ 79.224676][ T5393] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.338: Parent and EA inode have the same ino 15 [ 79.238066][ T5393] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.338: Parent and EA inode have the same ino 15 [ 79.242449][ T5393] EXT4-fs (loop0): 1 orphan inode deleted [ 79.244004][ T5393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.388411][ T4311] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 79.390937][ T4311] Bluetooth: hci3: Injecting HCI hardware error event [ 79.394237][ T4311] Bluetooth: hci3: hardware error 0x00 [ 80.046661][ T5404] loop4: detected capacity change from 0 to 256 [ 80.369697][ T5409] random: crng reseeded on system resumption [ 81.840771][ T4311] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 82.498634][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 82.712992][ T5421] loop4: detected capacity change from 0 to 4096 [ 82.771988][ T5428] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.826419][ T5430] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 82.914741][ T5435] loop0: detected capacity change from 0 to 64 [ 83.092529][ T5435] bpf_jit: unknown opcode 06 [ 83.104039][ T5443] loop1: detected capacity change from 0 to 256 [ 83.183991][ T5445] loop2: detected capacity change from 0 to 256 [ 83.210862][ T5445] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.283322][ T5445] Process accounting resumed [ 84.336065][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 84.574338][ T5461] loop3: detected capacity change from 0 to 4096 [ 84.614932][ T5472] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.713463][ T5479] loop1: detected capacity change from 0 to 256 [ 85.701301][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 86.252488][ T5523] loop0: detected capacity change from 0 to 256 [ 86.292743][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 86.296068][ T5528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.390'. [ 86.352021][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 87.195589][ T5542] loop3: detected capacity change from 0 to 256 [ 87.422683][ T5551] Zero length message leads to an empty skb [ 87.533781][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 87.537642][ T5557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.401'. [ 87.554939][ T5555] loop1: detected capacity change from 0 to 4096 [ 87.574170][ T5555] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 87.651400][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 87.815321][ T5572] loop2: detected capacity change from 0 to 256 [ 87.851584][ T5573] loop1: detected capacity change from 0 to 256 [ 88.776149][ T4303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.782342][ T4303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.785102][ T4303] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.788919][ T4303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.791471][ T4303] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.793649][ T4303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.983856][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 88.999316][ T5590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.414'. [ 89.142627][ T5597] loop2: detected capacity change from 0 to 2048 [ 89.203592][ T5597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.248035][ T5608] loop0: detected capacity change from 0 to 1024 [ 89.251167][ T5608] EXT4-fs: Ignoring removed nobh option [ 89.263036][ T5608] EXT4-fs: Ignoring removed orlov option [ 89.269892][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 89.285946][ T5608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.328769][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 89.454123][ T5624] loop1: detected capacity change from 0 to 256 [ 89.470791][ T4739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.496242][ T5576] wlan0 speed is unknown, defaulting to 1000 [ 89.500274][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 89.600662][ T4739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.601248][ T5631] netlink: 'syz.0.430': attribute type 3 has an invalid length. [ 89.657742][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.660250][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.709908][ T4739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.746370][ T5637] sp0: Synchronizing with TNC [ 89.895305][ T4739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.959403][ T5649] loop0: detected capacity change from 0 to 256 [ 90.098154][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 90.198316][ T5576] chnl_net:caif_netlink_parms(): no params data found [ 90.451010][ T5679] loop3: detected capacity change from 0 to 512 [ 90.453192][ T5679] EXT4-fs: Ignoring removed oldalloc option [ 90.508259][ T5667] Bluetooth: MGMT ver 1.22 [ 90.521075][ T5679] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.449: Parent and EA inode have the same ino 15 [ 90.544984][ T5679] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.449: Parent and EA inode have the same ino 15 [ 90.554416][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.556442][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.560221][ T5576] device bridge_slave_0 entered promiscuous mode [ 90.591018][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.602278][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.605946][ T5679] EXT4-fs (loop3): 1 orphan inode deleted [ 90.607656][ T5679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.689832][ T5576] device bridge_slave_1 entered promiscuous mode [ 90.834456][ T4312] Bluetooth: hci5: command tx timeout [ 91.585524][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 91.635581][ T5697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.451'. [ 91.718787][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.736006][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.909329][ T5576] team0: Port device team_slave_0 added [ 91.932420][ T5576] team0: Port device team_slave_1 added [ 92.083917][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.085864][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.116900][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.121648][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.123573][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.131158][ T4344] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.169753][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.423337][ T5576] device hsr_slave_0 entered promiscuous mode [ 92.447794][ T5576] device hsr_slave_1 entered promiscuous mode [ 92.517488][ T5576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.519507][ T5576] Cannot create hsr debugfs directory [ 92.647190][ T4344] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 92.649941][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.652261][ T4344] usb 1-1: Product: syz [ 92.653359][ T4344] usb 1-1: Manufacturer: syz [ 92.654522][ T4344] usb 1-1: SerialNumber: syz [ 92.685836][ T4344] usb 1-1: config 0 descriptor?? [ 92.749402][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 92.907016][ T4311] Bluetooth: hci5: command tx timeout [ 92.930488][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 92.948977][ T4361] usb 1-1: USB disconnect, device number 2 [ 93.212254][ T5782] loop3: detected capacity change from 0 to 256 [ 93.252673][ T5782] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.288034][ T5782] Process accounting resumed [ 93.461842][ T5789] loop1: detected capacity change from 0 to 256 [ 94.236843][ T110] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 94.290063][ T4739] infiniband syz2: set down [ 94.518320][ T4548] smc: removing ib device syz2 [ 94.637134][ T110] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 94.640137][ T110] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.643157][ T110] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 94.656573][ T110] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 94.712796][ T4344] wlan0 speed is unknown, defaulting to 1000 [ 94.740957][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.747305][ T110] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.761986][ T110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.764370][ T110] usb 1-1: SerialNumber: syz [ 94.767498][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.807155][ T5802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.986996][ T4312] Bluetooth: hci5: command tx timeout [ 95.031431][ T5802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.040349][ T5576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.081561][ T5576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.119004][ T5576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.159995][ T5576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.290104][ T110] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 95.300913][ T110] usb 1-1: USB disconnect, device number 3 [ 96.183128][ T5837] loop3: detected capacity change from 0 to 256 [ 96.232000][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.496105][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.657647][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.670456][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.676601][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.679798][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.682716][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.684762][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.779996][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.788947][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.794934][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.806919][ T5862] loop2: detected capacity change from 0 to 256 [ 96.810131][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.813141][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.821004][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.834552][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.852350][ T5862] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.903708][ T5862] Process accounting resumed [ 97.066952][ T4311] Bluetooth: hci5: command tx timeout [ 97.120651][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.147501][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.180899][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.200050][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.202940][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.213901][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.221427][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.233466][ T5576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.241316][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.303175][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.306001][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.406216][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.427083][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.561880][ T4739] device hsr_slave_0 left promiscuous mode [ 98.354948][ T4739] device hsr_slave_1 left promiscuous mode [ 98.458068][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.460236][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.464235][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.466336][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.470568][ T4739] device bridge_slave_1 left promiscuous mode [ 98.473372][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.558956][ T4739] device bridge_slave_0 left promiscuous mode [ 98.560764][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.564903][ T5902] loop3: detected capacity change from 0 to 256 [ 98.626842][ T4346] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.818558][ T4739] device veth1_macvtap left promiscuous mode [ 98.820613][ T4739] device veth0_macvtap left promiscuous mode [ 98.822359][ T4739] device veth1_vlan left promiscuous mode [ 98.824033][ T4739] device veth0_vlan left promiscuous mode [ 98.990849][ T4346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.993674][ T4346] usb 1-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice= 6.60 [ 98.996183][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.099847][ T4346] usb 1-1: config 0 descriptor?? [ 99.140220][ T4346] keyspan 1-1:0.0: Keyspan - (without firmware) converter detected [ 99.196280][ T5921] loop1: detected capacity change from 0 to 1024 [ 99.288829][ T5921] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 99.291970][ T5921] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 99.407469][ T5921] EXT4-fs (loop1): mount failed [ 100.346471][ T5948] loop3: detected capacity change from 0 to 256 [ 101.644087][ T5961] loop3: detected capacity change from 0 to 1024 [ 101.793821][ T5961] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 101.796674][ T5961] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 101.805280][ T5961] EXT4-fs (loop3): mount failed [ 102.161658][ T5974] loop1: detected capacity change from 0 to 256 [ 102.226649][ T5974] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.316294][ T5974] Process accounting resumed [ 102.598146][ T5984] loop3: detected capacity change from 0 to 256 [ 103.375949][ T4739] team0 (unregistering): Port device team_slave_1 removed [ 103.488072][ T6009] loop1: detected capacity change from 0 to 256 [ 103.561649][ T4739] team0 (unregistering): Port device team_slave_0 removed [ 103.848191][ T4739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.960529][ T6019] loop1: detected capacity change from 0 to 256 [ 104.009076][ T6019] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.014932][ T6019] Process accounting resumed [ 104.077584][ T4739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.883371][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 105.873944][ T6033] loop1: detected capacity change from 0 to 256 [ 106.058896][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.061336][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.645001][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.556'. [ 106.678981][ T4739] bond0 (unregistering): Released all slaves [ 107.599136][ T5994] IPv6: sit1: Disabled Multicast RS [ 107.602725][ T6049] netlink: 156 bytes leftover after parsing attributes in process `syz.1.557'. [ 107.715944][ T4311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.723036][ T4311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.729175][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.746126][ T4311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.753230][ T4311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.755395][ T4311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.795210][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.820819][ T6058] loop2: detected capacity change from 0 to 256 [ 107.845340][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.848116][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.963608][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 109.234601][ T4346] usb 1-1: USB disconnect, device number 4 [ 109.253143][ T6086] netlink: 156 bytes leftover after parsing attributes in process `syz.1.567'. [ 109.279684][ T4346] keyspan 1-1:0.0: device disconnected [ 109.798226][ T4311] Bluetooth: hci3: command tx timeout [ 109.965614][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.969177][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.982859][ T6093] loop1: detected capacity change from 0 to 256 [ 109.987461][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.990159][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.992878][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.995354][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.001796][ T5576] device veth0_vlan entered promiscuous mode [ 110.020653][ T5576] device veth1_vlan entered promiscuous mode [ 110.071690][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.074336][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.077063][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.079847][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.086304][ T5576] device veth0_macvtap entered promiscuous mode [ 110.104004][ T6052] chnl_net:caif_netlink_parms(): no params data found [ 110.155420][ T5576] device veth1_macvtap entered promiscuous mode [ 110.215882][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.219646][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.224769][ T6108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'. [ 111.047762][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.050279][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.103021][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.105865][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.114776][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.118058][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.120788][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.123632][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.126301][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.136819][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.142185][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.153831][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.156658][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.167474][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.169502][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.172026][ T6052] device bridge_slave_0 entered promiscuous mode [ 111.175252][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.177826][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.180408][ T6052] device bridge_slave_1 entered promiscuous mode [ 111.195751][ T6116] device pim6reg1 entered promiscuous mode [ 111.210513][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.213352][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.215979][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.234313][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.239796][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.242619][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.260104][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.263025][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.278177][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.296469][ T6052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.390883][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.393801][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.406661][ T6052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.420104][ T5576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.422801][ T5576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.445680][ T5576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.455787][ T5576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.481461][ T6052] team0: Port device team_slave_0 added [ 111.497322][ T6052] team0: Port device team_slave_1 added [ 111.534747][ T6126] loop3: detected capacity change from 0 to 64 [ 111.580318][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.582154][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.597748][ T6052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.621975][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.624111][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.651233][ T6052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.696579][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.700684][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.714014][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.739277][ T4547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.743230][ T4547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.773695][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.887167][ T4311] Bluetooth: hci3: command tx timeout [ 112.478171][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.586'. [ 112.524906][ T6052] device hsr_slave_0 entered promiscuous mode [ 112.567347][ T6052] device hsr_slave_1 entered promiscuous mode [ 112.611897][ T6052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.613974][ T6052] Cannot create hsr debugfs directory [ 112.840171][ T6155] loop3: detected capacity change from 0 to 64 [ 112.939604][ T6160] loop4: detected capacity change from 0 to 256 [ 112.942252][ T6161] loop2: detected capacity change from 0 to 64 [ 113.946969][ T4311] Bluetooth: hci3: command tx timeout [ 113.970315][ T6052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.077736][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.598'. [ 114.115169][ T6052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.290038][ T6052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.330187][ T6192] loop4: detected capacity change from 0 to 256 [ 114.470410][ T6052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.555432][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.578841][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.614046][ T6209] loop3: detected capacity change from 0 to 256 [ 114.633987][ T6209] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.678080][ T6209] Process accounting resumed [ 115.029168][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.613'. [ 115.565750][ T6223] loop1: detected capacity change from 0 to 512 [ 115.572631][ T6223] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.616682][ T6052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.651922][ T6223] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 115.714376][ T6223] EXT4-fs (loop1): 1 truncate cleaned up [ 115.716028][ T6223] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.729173][ T6052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.773549][ T6237] loop2: detected capacity change from 0 to 256 [ 115.798918][ T6052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.818458][ T6223] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.621: corrupted xattr block 19 [ 115.829622][ T6052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.914431][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 116.015940][ T6248] loop2: detected capacity change from 0 to 128 [ 116.027007][ T4312] Bluetooth: hci3: command tx timeout [ 116.098893][ T6251] loop3: detected capacity change from 0 to 256 [ 116.147439][ T6251] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.189780][ T6251] Process accounting resumed [ 116.433946][ T6248] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 116.787255][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.806423][ T6248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.853856][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.856292][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.876445][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.953835][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.967045][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.970212][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.973073][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.975655][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.977666][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.984033][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.085430][ T6254] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 117.141027][ T6264] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.632'. [ 117.263207][ T6270] ip6t_REJECT: ECHOREPLY is not supported [ 117.378061][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.380804][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.383479][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.385546][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.388922][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.391704][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.394574][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.398287][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.401055][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.403787][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.406545][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.409743][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.412261][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.414900][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.460765][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.464155][ T6279] loop1: detected capacity change from 0 to 256 [ 117.481799][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.733935][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 118.478742][ T6290] loop1: detected capacity change from 0 to 256 [ 118.572107][ T6052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.688867][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.691414][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.700217][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.702653][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.704825][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.715538][ T6310] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.649'. [ 118.720084][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.838908][ T6304] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 118.855403][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.858249][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.861498][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.868351][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.902754][ T6315] loop2: detected capacity change from 0 to 256 [ 118.957552][ T6052] device veth0_vlan entered promiscuous mode [ 118.969411][ T6052] device veth1_vlan entered promiscuous mode [ 118.995665][ T4311] Bluetooth: hci0: command 0x080f tx timeout [ 119.142181][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 119.337064][ T4311] Bluetooth: hci3: command tx timeout [ 119.629741][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.635044][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.864008][ T6326] loop3: detected capacity change from 0 to 256 [ 119.903918][ T5656] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.934410][ T6052] device veth0_macvtap entered promiscuous mode [ 119.942331][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.950911][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.996567][ T6339] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.660'. [ 120.062887][ T6052] device veth1_macvtap entered promiscuous mode [ 120.076493][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.079400][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.103305][ T6345] loop2: detected capacity change from 0 to 256 [ 120.216120][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.225508][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.232846][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.235691][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.247117][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.256016][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.271668][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.274185][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.276347][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.290896][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.293698][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.296467][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.327669][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.331069][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.333856][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.349448][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.352418][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.355091][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.362240][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.364895][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.376932][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.379642][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.382395][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.384992][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.401635][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.405903][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.455298][ T6368] loop1: detected capacity change from 0 to 256 [ 120.520568][ T5656] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.743917][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.747392][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.752029][ T6052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.754459][ T6052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.757611][ T6052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.759839][ T6052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.840163][ T6374] loop1: detected capacity change from 0 to 256 [ 121.066936][ T4312] Bluetooth: hci0: command 0x080f tx timeout [ 121.215449][ T6330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.243864][ T6330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.256124][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.267073][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.320053][ T4739] device hsr_slave_0 left promiscuous mode [ 121.339136][ T6397] loop4: detected capacity change from 0 to 256 [ 121.352904][ T6399] loop1: detected capacity change from 0 to 256 [ 121.380492][ T4739] device hsr_slave_1 left promiscuous mode [ 121.459017][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.462595][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.471283][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.475135][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.482407][ T4739] device bridge_slave_1 left promiscuous mode [ 121.487781][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.528279][ T4739] device bridge_slave_0 left promiscuous mode [ 121.530378][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.603337][ T6408] process 'syz.1.691' launched './file0' with NULL argv: empty string added [ 121.677070][ T4739] device veth1_macvtap left promiscuous mode [ 121.678995][ T4739] device veth0_macvtap left promiscuous mode [ 121.680679][ T4739] device veth1_vlan left promiscuous mode [ 121.682250][ T4739] device veth0_vlan left promiscuous mode [ 122.751748][ T6414] loop3: detected capacity change from 0 to 256 [ 122.757239][ T6414] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.768195][ T6414] Process accounting resumed [ 123.842233][ T4739] team0 (unregistering): Port device team_slave_1 removed [ 124.018140][ T4739] team0 (unregistering): Port device team_slave_0 removed [ 124.218324][ T4739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.456061][ T4739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.465973][ T6427] loop3: detected capacity change from 0 to 256 [ 125.948663][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.950458][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.090368][ T4739] bond0 (unregistering): Released all slaves [ 127.333502][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.348218][ T4548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.350528][ T4548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.355328][ T6437] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.702'. [ 127.358579][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.473277][ T6448] netlink: 96 bytes leftover after parsing attributes in process `syz.3.706'. [ 127.573457][ T6455] loop3: detected capacity change from 0 to 256 [ 128.534966][ T6471] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.715'. [ 128.559819][ T6473] loop4: detected capacity change from 0 to 256 [ 128.605451][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.615873][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.621905][ T4289] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.635181][ T6480] netlink: 96 bytes leftover after parsing attributes in process `syz.3.719'. [ 128.788193][ T6491] loop0: detected capacity change from 0 to 64 [ 130.469755][ T6517] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.731'. [ 130.476552][ T6515] netlink: 96 bytes leftover after parsing attributes in process `syz.3.733'. [ 131.376591][ T6563] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.749'. [ 131.866305][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 131.877563][ T6579] netlink: 156 bytes leftover after parsing attributes in process `syz.2.758'. [ 132.084180][ T6591] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.761'. [ 132.363121][ T6609] __nla_validate_parse: 2 callbacks suppressed [ 132.363138][ T6609] netlink: 264 bytes leftover after parsing attributes in process `syz.2.770'. [ 132.386412][ T6609] tipc: Started in network mode [ 132.389125][ T6609] tipc: Node identity fe8, cluster identity 4711 [ 132.390951][ T6609] tipc: Enabling of bearer rejected, failed to enable media [ 132.447833][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 132.577603][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.580205][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.600020][ T6613] device syzkaller0 entered promiscuous mode [ 132.821323][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.823773][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.839024][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.846546][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.162125][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.182239][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.214844][ T6628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.227960][ T6628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.253940][ T6629] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.779'. [ 133.295167][ T6631] netlink: 156 bytes leftover after parsing attributes in process `syz.4.781'. [ 133.560575][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 134.554227][ T6654] loop1: detected capacity change from 0 to 4096 [ 134.585284][ T6654] ntfs: (device loop1): ntfs_read_inode_mount(): Incorrect mft record size 0 in superblock, should be 4096. [ 134.605500][ T6654] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 134.720034][ T6656] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.792'. [ 134.755149][ T6640] loop3: detected capacity change from 0 to 32768 [ 134.786546][ T6640] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.785 (6640) [ 134.796610][ T6640] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.814931][ T6640] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 134.824859][ T6640] BTRFS info (device loop3): using free space tree [ 134.835057][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 135.096650][ T6686] netlink: 156 bytes leftover after parsing attributes in process `syz.1.794'. [ 135.114542][ T6640] BTRFS info (device loop3): enabling ssd optimizations [ 135.246078][ T6640] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.467089][ T6702] loop2: detected capacity change from 0 to 128 [ 135.471828][ T4305] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.482392][ T6702] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 135.508828][ T6702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.958705][ T6714] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.807'. [ 136.390568][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 136.554425][ T6710] loop2: detected capacity change from 0 to 32768 [ 136.556665][ T6710] XFS: ikeep mount option is deprecated. [ 136.575415][ T6710] XFS: noikeep mount option is deprecated. [ 136.603290][ T6728] loop3: detected capacity change from 0 to 512 [ 136.611729][ T6710] XFS (loop2): Mounting V5 Filesystem [ 136.639995][ T6728] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.653892][ T6728] EXT4-fs error (device loop3): ext4_find_extent:936: inode #4: comm syz.3.813: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 136.693941][ T6728] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 136.697004][ T6728] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 136.711319][ T6728] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 136.713227][ T6728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.715366][ T6710] XFS (loop2): Ending clean mount [ 136.738366][ T6737] IPv6: sit1: Disabled Multicast RS [ 136.745802][ T6710] XFS (loop2): Quotacheck needed: Please wait. [ 136.783778][ T6710] XFS (loop2): Quotacheck: Done. [ 136.863334][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 136.878578][ T4296] XFS (loop2): Unmounting Filesystem [ 137.052177][ T6745] loop0: detected capacity change from 0 to 128 [ 137.055026][ T6745] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 137.063164][ T6745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.921212][ T6777] netlink: 156 bytes leftover after parsing attributes in process `syz.0.826'. [ 138.347606][ T6792] loop2: detected capacity change from 0 to 512 [ 138.352204][ T6792] EXT4-fs: Ignoring removed bh option [ 138.390335][ T6792] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 138.453436][ T6792] EXT4-fs (loop2): 1 truncate cleaned up [ 138.475299][ T6792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.512373][ T6797] loop3: detected capacity change from 0 to 512 [ 138.572022][ T6797] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 138.644221][ T6797] loop3: detected capacity change from 0 to 512 [ 138.691136][ T6797] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.710076][ T6797] EXT4-fs (loop3): 1 truncate cleaned up [ 138.710106][ T6797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.735242][ T6797] netlink: 'syz.3.838': attribute type 9 has an invalid length. [ 138.806295][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 138.834022][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 139.808783][ T6837] loop3: detected capacity change from 0 to 512 [ 139.814692][ T6837] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 139.871825][ T6827] loop2: detected capacity change from 0 to 32768 [ 139.874045][ T6827] XFS: ikeep mount option is deprecated. [ 139.875593][ T6827] XFS: noikeep mount option is deprecated. [ 139.883857][ T6837] loop3: detected capacity change from 0 to 512 [ 139.901082][ T6837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.908497][ T6837] EXT4-fs (loop3): 1 truncate cleaned up [ 139.910113][ T6837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.930470][ T6837] netlink: 'syz.3.855': attribute type 9 has an invalid length. [ 139.942446][ T6827] XFS (loop2): Mounting V5 Filesystem [ 140.065410][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 140.144790][ T6827] XFS (loop2): Ending clean mount [ 140.148201][ T6827] XFS (loop2): Quotacheck needed: Please wait. [ 140.221938][ T6827] XFS (loop2): Quotacheck: Done. [ 140.271986][ T6868] netlink: 96 bytes leftover after parsing attributes in process `syz.3.863'. [ 140.414754][ T6869] ªªªªªª: renamed from vlan0 [ 140.422533][ T4296] XFS (loop2): Unmounting Filesystem [ 140.449024][ T6872] netlink: 156 bytes leftover after parsing attributes in process `syz.1.862'. [ 141.194435][ T6895] loop0: detected capacity change from 0 to 512 [ 141.209441][ T6895] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 141.212003][ T6897] netlink: 96 bytes leftover after parsing attributes in process `syz.2.876'. [ 141.327157][ T6895] loop0: detected capacity change from 0 to 512 [ 141.345007][ T6895] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.371639][ T6895] EXT4-fs (loop0): 1 truncate cleaned up [ 141.373375][ T6895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.382334][ T6895] netlink: 'syz.0.875': attribute type 9 has an invalid length. [ 141.557367][ T6052] EXT4-fs (loop0): unmounting filesystem. [ 142.027896][ T6899] loop3: detected capacity change from 0 to 32768 [ 142.030165][ T6899] XFS: ikeep mount option is deprecated. [ 142.031737][ T6899] XFS: noikeep mount option is deprecated. [ 142.106666][ T6929] netlink: 96 bytes leftover after parsing attributes in process `syz.2.890'. [ 142.201673][ T6899] XFS (loop3): Mounting V5 Filesystem [ 142.317391][ T6899] XFS (loop3): Ending clean mount [ 142.321521][ T6899] XFS (loop3): Quotacheck needed: Please wait. [ 142.470621][ T6899] XFS (loop3): Quotacheck: Done. [ 142.563388][ T6957] netlink: 156 bytes leftover after parsing attributes in process `syz.2.897'. [ 142.683412][ T4305] XFS (loop3): Unmounting Filesystem [ 143.828039][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 144.476206][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.935'. [ 144.811290][ T7058] netlink: 156 bytes leftover after parsing attributes in process `syz.0.940'. [ 145.282286][ T7047] loop3: detected capacity change from 0 to 40427 [ 145.356459][ T7047] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.388374][ T7047] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.473305][ T4305] syz-executor: attempt to access beyond end of device [ 145.473305][ T4305] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.625403][ T7060] loop1: detected capacity change from 0 to 32768 [ 145.664043][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.949'. [ 145.690025][ T7060] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 145.695884][ T7060] XFS (loop1): Mounting V5 Filesystem [ 145.823583][ T7060] XFS (loop1): Ending clean mount [ 145.826580][ T7060] XFS (loop1): Quotacheck needed: Please wait. [ 145.865029][ T7060] XFS (loop1): Quotacheck: Done. [ 145.975585][ T4295] XFS (loop1): Unmounting Filesystem [ 146.044776][ T7097] netlink: 96 bytes leftover after parsing attributes in process `syz.3.947'. [ 146.117899][ T7100] loop3: detected capacity change from 0 to 1024 [ 146.123837][ T7100] EXT4-fs: Invalid commit interval 2147483647, must be smaller than 21474836 [ 146.636257][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.961'. [ 146.646452][ T7102] loop3: detected capacity change from 0 to 32768 [ 146.663362][ T7102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.957 (7102) [ 146.695434][ T7102] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.699538][ T7102] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 146.701810][ T7102] BTRFS info (device loop3): using free space tree [ 146.849445][ T7134] netlink: 96 bytes leftover after parsing attributes in process `syz.1.966'. [ 147.138323][ T7102] BTRFS info (device loop3): enabling ssd optimizations [ 147.237639][ T7150] loop4: detected capacity change from 0 to 512 [ 147.510639][ T7150] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 147.518855][ T7150] EXT4-fs (loop4): 1 truncate cleaned up [ 147.520599][ T7150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.618382][ T7150] syz.4.965 (pid 7150) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 147.897236][ T7154] netlink: 156 bytes leftover after parsing attributes in process `syz.1.968'. [ 147.908965][ T5576] EXT4-fs (loop4): unmounting filesystem. [ 148.035666][ T4305] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.063033][ T4312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.068763][ T4312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.072178][ T4312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.074822][ T4312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.077762][ T4312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.080327][ T4312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.304654][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.973'. [ 148.476975][ T7178] netlink: 96 bytes leftover after parsing attributes in process `syz.2.978'. [ 152.379888][ T7193] loop0: detected capacity change from 0 to 512 [ 152.393618][ T4312] Bluetooth: hci2: command tx timeout [ 152.429884][ T7193] EXT4-fs: failed to create workqueue [ 152.429899][ T7193] EXT4-fs (loop0): mount failed [ 152.915783][ T646] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.054365][ T646] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.062955][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 153.134851][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 153.156034][ T7211] netlink: 96 bytes leftover after parsing attributes in process `syz.0.988'. [ 153.260528][ T646] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.282699][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.284718][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.297206][ T7160] device bridge_slave_0 entered promiscuous mode [ 153.303304][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.305282][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.308213][ T7160] device bridge_slave_1 entered promiscuous mode [ 153.325717][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.344620][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.374296][ T7160] team0: Port device team_slave_0 added [ 153.381904][ T7160] team0: Port device team_slave_1 added [ 153.411450][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.413647][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.423472][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.433827][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.436024][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.445852][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.614012][ T7228] loop0: detected capacity change from 0 to 256 [ 153.737049][ T7228] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.103038][ T646] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.339866][ T7160] device hsr_slave_0 entered promiscuous mode [ 154.393671][ T7160] device hsr_slave_1 entered promiscuous mode [ 154.423284][ T7239] netlink: 96 bytes leftover after parsing attributes in process `syz.1.999'. [ 154.437686][ T4312] Bluetooth: hci2: command tx timeout [ 154.539968][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 154.716950][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 154.756959][ T7252] loop2: detected capacity change from 0 to 2048 [ 154.771591][ T7252] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.793616][ T7252] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 154.795851][ T7252] System zones: 0-19 [ 154.834014][ T7252] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.892464][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 155.257469][ T7274] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1001'. [ 155.421250][ T7278] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1010'. [ 155.664139][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'. [ 156.294018][ T7297] loop0: detected capacity change from 0 to 256 [ 156.517327][ T4312] Bluetooth: hci2: command tx timeout [ 156.725830][ T7297] FAT-fs (loop0): Directory bread(block 64) failed [ 156.727652][ T7297] FAT-fs (loop0): Directory bread(block 65) failed [ 156.729344][ T7297] FAT-fs (loop0): Directory bread(block 66) failed [ 156.730975][ T7297] FAT-fs (loop0): Directory bread(block 67) failed [ 156.732655][ T7297] FAT-fs (loop0): Directory bread(block 68) failed [ 156.734343][ T7297] FAT-fs (loop0): Directory bread(block 69) failed [ 156.736170][ T7297] FAT-fs (loop0): Directory bread(block 70) failed [ 156.737917][ T7297] FAT-fs (loop0): Directory bread(block 71) failed [ 156.739581][ T7297] FAT-fs (loop0): Directory bread(block 72) failed [ 156.741244][ T7297] FAT-fs (loop0): Directory bread(block 73) failed [ 157.131281][ T7160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.275237][ T7160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.301053][ T7160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.339703][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1024'. [ 157.429637][ T7160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.847707][ T7333] loop0: detected capacity change from 0 to 512 [ 158.588511][ T4311] Bluetooth: hci2: command tx timeout [ 158.645142][ T7333] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 158.648016][ T7333] EXT4-fs (loop0): 1 truncate cleaned up [ 158.649596][ T7333] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.703202][ T4311] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.708932][ T4311] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.712251][ T4311] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.721379][ T4311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.729611][ T4311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.732051][ T4311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.848534][ T6052] EXT4-fs (loop0): unmounting filesystem. [ 158.956280][ T7331] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1021'. [ 159.084240][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.208751][ T7343] loop0: detected capacity change from 0 to 32768 [ 159.228739][ T7343] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1029 (7343) [ 159.242255][ T7343] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.244918][ T7343] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 159.263826][ T7343] BTRFS info (device loop0): using free space tree [ 159.367548][ T7343] BTRFS info (device loop0): enabling ssd optimizations [ 159.449106][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.511641][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1034'. [ 159.514321][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.523775][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.526283][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.533564][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.536208][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.538299][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.551962][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.555608][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.563710][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.565635][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.568988][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.573251][ T4418] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 159.649083][ T6052] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.679030][ T7382] loop2: detected capacity change from 0 to 256 [ 159.689772][ T646] device hsr_slave_0 left promiscuous mode [ 159.711258][ T646] device hsr_slave_1 left promiscuous mode [ 159.797380][ T646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.799350][ T646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.802065][ T646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.805257][ T646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.813229][ T646] device bridge_slave_1 left promiscuous mode [ 159.818024][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.878073][ T646] device bridge_slave_0 left promiscuous mode [ 159.879920][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.017119][ T646] device veth1_macvtap left promiscuous mode [ 160.018823][ T646] device veth0_macvtap left promiscuous mode [ 160.020552][ T646] device veth1_vlan left promiscuous mode [ 160.022177][ T646] device veth0_vlan left promiscuous mode [ 160.757840][ T4311] Bluetooth: hci5: command tx timeout [ 162.401320][ T646] team0 (unregistering): Port device team_slave_1 removed [ 162.589535][ T646] team0 (unregistering): Port device team_slave_0 removed [ 162.767797][ T646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.836990][ T4297] Bluetooth: hci5: command tx timeout [ 163.027728][ T646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.866899][ T4297] Bluetooth: hci0: command 0x080f tx timeout [ 163.867840][ T4301] Bluetooth: hci4: command 0x0406 tx timeout [ 163.868630][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 164.916924][ T4310] Bluetooth: hci5: command tx timeout [ 165.611987][ T646] bond0 (unregistering): Released all slaves [ 165.853379][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.868961][ T7393] IPv6: sit1: Disabled Multicast RS [ 165.894343][ T7395] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1038'. [ 165.897700][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.900593][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.903786][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.906671][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.976018][ T7160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.990193][ T7160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.039969][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.043058][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.045697][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.049367][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.052191][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.071348][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.083646][ T7401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 166.097037][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.184663][ T7340] chnl_net:caif_netlink_parms(): no params data found [ 166.282158][ T7419] loop1: detected capacity change from 0 to 256 [ 166.373333][ T7340] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.375290][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.404925][ T7340] device bridge_slave_0 entered promiscuous mode [ 166.409407][ T7340] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.411414][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.413996][ T7340] device bridge_slave_1 entered promiscuous mode [ 166.493685][ T7340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.535557][ T7340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.633107][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.635231][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.647332][ T7340] team0: Port device team_slave_0 added [ 166.654323][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.670150][ T7340] team0: Port device team_slave_1 added [ 166.723264][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.725297][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.756850][ T7340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.761575][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.763421][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.782165][ T7340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.856021][ T7409] loop0: detected capacity change from 0 to 32768 [ 166.860744][ T7409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1048 (7409) [ 166.865698][ T7409] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.886932][ T7409] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 166.898956][ T7340] device hsr_slave_0 entered promiscuous mode [ 166.899962][ T7409] BTRFS info (device loop0): using free space tree [ 166.988287][ T4310] Bluetooth: hci5: command tx timeout [ 166.990725][ T7340] device hsr_slave_1 entered promiscuous mode [ 167.007396][ T7340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.009423][ T7340] Cannot create hsr debugfs directory [ 167.032453][ T7409] BTRFS info (device loop0): enabling ssd optimizations [ 167.128019][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1057'. [ 167.178411][ T39] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 167.189513][ T7458] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1054'. [ 167.286058][ T6052] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.508421][ T7469] loop2: detected capacity change from 0 to 256 [ 167.522266][ T7340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.644383][ T7340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.697699][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.700914][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.850772][ T7340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.861747][ T7160] device veth0_vlan entered promiscuous mode [ 167.868158][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.871984][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.874858][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.883867][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.888350][ T7160] device veth1_vlan entered promiscuous mode [ 167.979745][ T7340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.004357][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.007571][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.010033][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.012672][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.019332][ T7160] device veth0_macvtap entered promiscuous mode [ 168.023809][ T7160] device veth1_macvtap entered promiscuous mode [ 168.077840][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.080785][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.083306][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.108314][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.111102][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.113888][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.116406][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.147945][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.162103][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.169113][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.171843][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.184388][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.198521][ T7491] loop2: detected capacity change from 0 to 256 [ 168.208865][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.211494][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.217686][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.220569][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.223437][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.237503][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.240276][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.255226][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.264188][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.269343][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.283035][ T7160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.285423][ T7160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.305872][ T7160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.310152][ T7160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.461081][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.463508][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.481628][ T1515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.506521][ T7340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.542024][ T7340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.575145][ T7340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.575189][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.579316][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.639799][ T7340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.669764][ T1515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.891524][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.924257][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.926942][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.939408][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.946979][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.949674][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.952147][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.953974][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.956135][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.010831][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.013511][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.015409][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.026735][ T7516] loop0: detected capacity change from 0 to 256 [ 169.061205][ T7340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.072632][ T7340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.093973][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.096510][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.104639][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.120352][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.126321][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.137419][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.156243][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.159982][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.175634][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.184454][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.197222][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.213356][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.223962][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.603844][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.605972][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.613111][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.674180][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.677611][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.680824][ T7546] loop0: detected capacity change from 0 to 256 [ 169.730302][ T7340] device veth0_vlan entered promiscuous mode [ 169.736317][ T7340] device veth1_vlan entered promiscuous mode [ 169.779603][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.782260][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.784905][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.859386][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.861893][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.864265][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.868379][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.870985][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.922875][ T7340] device veth0_macvtap entered promiscuous mode [ 169.964013][ T7340] device veth1_macvtap entered promiscuous mode [ 170.013999][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.016729][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.037733][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.040527][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.043076][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.073808][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.076456][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.089791][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.103587][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.106456][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.154372][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.157662][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.160113][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.162601][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.165189][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.180411][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.227998][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.241886][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.244703][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.271099][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.273912][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.283893][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.294409][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.301146][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.303846][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.318351][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.333412][ T7570] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1089'. [ 170.336722][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.339615][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.365585][ T7340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.376642][ T7340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.382589][ T7576] loop4: detected capacity change from 0 to 256 [ 170.390625][ T7340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.393031][ T7340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.890185][ T646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.892515][ T646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.954877][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.064877][ T646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.070120][ T646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.156633][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.377375][ T7588] loop0: detected capacity change from 0 to 32768 [ 171.382526][ T7606] loop1: detected capacity change from 0 to 256 [ 171.404227][ T7588] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1108 (7588) [ 171.445928][ T7588] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.461059][ T7588] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 171.463366][ T7588] BTRFS info (device loop0): using free space tree [ 171.769236][ T7588] BTRFS info (device loop0): enabling ssd optimizations [ 171.923654][ T646] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 171.963342][ T6052] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.299630][ T7659] loop2: detected capacity change from 0 to 256 [ 173.088219][ T7672] loop0: detected capacity change from 0 to 32768 [ 173.114967][ T7672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1134 (7672) [ 173.148432][ T7672] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.151116][ T7672] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 173.153329][ T7672] BTRFS info (device loop0): using free space tree [ 173.240335][ T7703] loop1: detected capacity change from 0 to 256 [ 173.392482][ T7672] BTRFS info (device loop0): enabling ssd optimizations [ 173.432757][ T7708] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1136'. [ 173.535699][ T4418] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 173.603529][ T6052] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.628321][ T39] device hsr_slave_0 left promiscuous mode [ 173.709043][ T39] device hsr_slave_1 left promiscuous mode [ 173.789898][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.791958][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.804909][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.808021][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.828666][ T39] device bridge_slave_1 left promiscuous mode [ 173.830429][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.859437][ T39] device bridge_slave_0 left promiscuous mode [ 173.861289][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.008752][ T39] device veth1_macvtap left promiscuous mode [ 174.010559][ T39] device veth0_macvtap left promiscuous mode [ 174.012247][ T39] device veth1_vlan left promiscuous mode [ 174.013785][ T39] device veth0_vlan left promiscuous mode [ 174.315685][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 174.593575][ T7753] loop2: detected capacity change from 0 to 256 [ 176.262594][ T7793] loop4: detected capacity change from 0 to 256 [ 176.403470][ T7799] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 176.684979][ T7809] loop2: detected capacity change from 0 to 64 [ 176.698398][ T7810] loop4: detected capacity change from 0 to 256 [ 176.729660][ T7810] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.735260][ T7810] Process accounting resumed [ 177.615061][ T39] team0 (unregistering): Port device team_slave_1 removed [ 177.718058][ T7822] loop2: detected capacity change from 0 to 256 [ 177.772886][ T39] team0 (unregistering): Port device team_slave_0 removed [ 177.897882][ T7828] loop2: detected capacity change from 0 to 64 [ 178.125369][ T7826] loop4: detected capacity change from 0 to 32768 [ 178.127608][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.751546][ T7826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1185 (7826) [ 178.785088][ T7826] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.796178][ T7826] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 178.805216][ T7826] BTRFS info (device loop4): using free space tree [ 178.922729][ T7826] BTRFS info (device loop4): enabling ssd optimizations [ 178.985107][ T55] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 179.035314][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.053674][ T7160] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.060209][ T7859] loop2: detected capacity change from 0 to 64 [ 179.991691][ T7870] loop2: detected capacity change from 0 to 256 [ 181.891525][ T39] bond0 (unregistering): Released all slaves [ 182.113912][ T7785] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1168'. [ 182.167515][ T7868] IPv6: sit1: Disabled Multicast RS [ 182.328435][ T7894] loop4: detected capacity change from 0 to 64 [ 182.377175][ T7896] loop3: detected capacity change from 0 to 256 [ 183.034501][ T7884] loop0: detected capacity change from 0 to 32768 [ 183.043566][ T7884] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1200 (7884) [ 183.066433][ T7884] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.079523][ T7884] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 183.088428][ T7884] BTRFS info (device loop0): using free space tree [ 183.402004][ T7884] BTRFS info (device loop0): enabling ssd optimizations [ 183.480742][ T7953] loop2: detected capacity change from 0 to 256 [ 183.543277][ T6052] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.544829][ T4418] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 183.734692][ T7929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop0 scanned by udevd (7929) [ 183.916898][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 184.499390][ T7992] loop3: detected capacity change from 0 to 256 [ 184.949371][ T8012] sp0: Synchronizing with TNC [ 184.952216][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1250'. [ 185.212802][ T7979] loop4: detected capacity change from 0 to 32768 [ 185.238687][ T7979] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 185.527460][ T8028] loop0: detected capacity change from 0 to 2048 [ 186.280741][ T8045] loop3: detected capacity change from 0 to 256 [ 186.299878][ T8045] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.299923][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1263'. [ 186.308954][ T8045] Process accounting resumed [ 186.404485][ T8058] sp0: Synchronizing with TNC [ 186.573746][ T8064] loop4: detected capacity change from 0 to 64 [ 187.388414][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.390150][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.584334][ T1515] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 187.801680][ T8096] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1280'. [ 187.837876][ T1515] usb 1-1: Using ep0 maxpacket: 32 [ 187.987452][ T1515] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 188.007359][ T1515] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 188.119646][ T1515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.304615][ T1515] usb 1-1: config 0 descriptor?? [ 188.317143][ T8080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.348966][ T1515] hub 1-1:0.0: bad descriptor, ignoring hub [ 188.350579][ T1515] hub: probe of 1-1:0.0 failed with error -5 [ 188.398470][ T1515] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 188.469105][ T8101] sp0: Synchronizing with TNC [ 188.573658][ T8076] loop1: detected capacity change from 0 to 32768 [ 188.647167][ T8076] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 188.778117][ T8112] loop2: detected capacity change from 0 to 256 [ 188.782550][ T8112] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.792814][ T8112] Process accounting resumed [ 189.013422][ T8122] loop1: detected capacity change from 0 to 64 [ 189.927819][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.936691][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.077373][ T8144] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1294'. [ 190.350864][ T4347] usb 1-1: USB disconnect, device number 5 [ 190.460964][ T8151] sp0: Synchronizing with TNC [ 190.497649][ T8153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1303'. [ 190.790318][ T8162] loop1: detected capacity change from 0 to 64 [ 191.031127][ T8167] IPv6: sit1: Disabled Multicast RS [ 191.615799][ T8180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1314'. [ 192.043744][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.046283][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.275079][ T8207] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1324'. [ 192.513102][ T8211] loop4: detected capacity change from 0 to 64 [ 193.125518][ T8217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1327'. [ 193.679515][ T8234] loop4: detected capacity change from 0 to 256 [ 193.684683][ T8234] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.691003][ T8234] Process accounting resumed [ 193.733406][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.745635][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.198534][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 194.319904][ T8253] loop2: detected capacity change from 0 to 64 [ 195.356947][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 195.527094][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1357'. [ 195.647767][ T4310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.660508][ T8290] loop4: detected capacity change from 0 to 256 [ 195.664489][ T4310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.665539][ T8290] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.671514][ T4311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.675455][ T8290] Process accounting resumed [ 195.681834][ T4310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.685642][ T4310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 195.689329][ T4310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.848869][ T8289] chnl_net:caif_netlink_parms(): no params data found [ 195.886247][ T8303] loop3: detected capacity change from 0 to 64 [ 196.094982][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.097112][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.099557][ T8289] device bridge_slave_0 entered promiscuous mode [ 196.103471][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.105722][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.109346][ T8289] device bridge_slave_1 entered promiscuous mode [ 196.410147][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.423528][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.549158][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 196.602698][ T8321] loop2: detected capacity change from 0 to 512 [ 196.611129][ T8321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.634116][ T8321] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.1367: corrupted inode contents [ 196.640792][ T8321] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz.2.1367: mark_inode_dirty error [ 196.644860][ T8321] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.1367: corrupted inode contents [ 196.655758][ T8321] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1367: mark_inode_dirty error [ 196.894014][ T4787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.560442][ T8289] team0: Port device team_slave_0 added [ 197.563671][ T8289] team0: Port device team_slave_1 added [ 197.598777][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 197.707112][ T4310] Bluetooth: hci4: command tx timeout [ 197.819842][ T4787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.843639][ T8340] IPv6: sit1: Disabled Multicast RS [ 197.854661][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.856519][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.887977][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.950859][ T8356] loop4: detected capacity change from 0 to 64 [ 197.983549][ T4787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.025492][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1381'. [ 198.157105][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.159425][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.183572][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.662393][ T4787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.676931][ T8366] sp0: Synchronizing with TNC [ 198.738775][ T8289] device hsr_slave_0 entered promiscuous mode [ 198.767952][ T8289] device hsr_slave_1 entered promiscuous mode [ 198.846901][ T8289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.849083][ T8289] Cannot create hsr debugfs directory [ 198.979235][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.428336][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.443920][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.457081][ T8402] fuse: Unknown parameter 'fd0x0000000000000003' [ 199.786910][ T4310] Bluetooth: hci4: command tx timeout [ 199.836221][ T8417] loop3: detected capacity change from 0 to 64 [ 201.026212][ T8289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.132650][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 201.162562][ T8289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.218780][ T8289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.364596][ T8289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.723399][ T8464] loop1: detected capacity change from 0 to 64 [ 201.899748][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.917477][ T4297] Bluetooth: hci4: command tx timeout [ 201.936290][ T8460] sp0: Synchronizing with TNC [ 202.788583][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.791468][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.800063][ T8289] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.814824][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.818168][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.820827][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.822695][ T7466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.824864][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.831761][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.834192][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.836145][ T7466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.960530][ T4787] device hsr_slave_0 left promiscuous mode [ 203.016172][ T4787] device hsr_slave_1 left promiscuous mode [ 203.106941][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.109174][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.111927][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.115816][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.127183][ T4787] device bridge_slave_1 left promiscuous mode [ 203.131982][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.188412][ T4787] device bridge_slave_0 left promiscuous mode [ 203.190117][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.298406][ T8505] loop1: detected capacity change from 0 to 64 [ 203.347078][ T4787] device veth1_macvtap left promiscuous mode [ 203.348873][ T4787] device veth0_macvtap left promiscuous mode [ 203.350535][ T4787] device veth1_vlan left promiscuous mode [ 203.946919][ T4310] Bluetooth: hci4: command tx timeout [ 204.392942][ T8515] loop3: detected capacity change from 0 to 32768 [ 204.406852][ T8515] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 204.435942][ T7396] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 205.031077][ T8542] loop1: detected capacity change from 0 to 64 [ 206.107686][ T8555] loop3: detected capacity change from 0 to 32768 [ 206.115191][ T8555] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 206.174772][ T7991] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.342393][ T4787] team0 (unregistering): Port device team_slave_1 removed [ 206.350639][ T8564] ------------[ cut here ]------------ [ 206.352470][ T8564] kernel BUG at mm/memory.c:2230! [ 206.354004][ T8564] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 206.356068][ T8564] Modules linked in: [ 206.357105][ T8564] CPU: 1 PID: 8564 Comm: syz.3.1445 Not tainted 6.1.101-syzkaller #0 [ 206.359195][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 206.361977][ T8564] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 206.364152][ T8564] pc : vmf_insert_pfn+0x1a0/0x1ac [ 206.365555][ T8564] lr : vmf_insert_pfn+0x1a0/0x1ac [ 206.366968][ T8564] sp : ffff80001e317560 [ 206.368079][ T8564] x29: ffff80001e317560 x28: ffff0000cf9a0000 x27: ffff0000ce068000 [ 206.370292][ T8564] x26: 0000000010000400 x25: 0000000004040471 x24: dfff800000000000 [ 206.372434][ T8564] x23: 0000000000000420 x22: 0060000000000fc3 x21: 000000000010e091 [ 206.374563][ T8564] x20: ffff0000d82986c0 x19: 0000000020002000 x18: ffff80001e3170e0 [ 206.376739][ T8564] x17: ffff800018a96000 x16: ffff80000825fc6c x15: 0000000000000002 [ 206.378895][ T8564] x14: 0000000010000400 x13: ffff0000cf9a0000 x12: 0000000000040000 [ 206.381062][ T8564] x11: 0000000000000b93 x10: ffff800027244000 x9 : ffff80000885849c [ 206.383158][ T8564] x8 : 0000000000000b94 x7 : 0000000000000000 x6 : 0000000000000000 [ 206.385394][ T8564] x5 : ffff800018dc5fd0 x4 : 0000000000000002 x3 : ffff8000082fb82c [ 206.387611][ T8564] x2 : 000000000010e091 x1 : 0000000000000420 x0 : 0000000000000420 [ 206.389769][ T8564] Call trace: [ 206.390630][ T8564] vmf_insert_pfn+0x1a0/0x1ac [ 206.391941][ T8564] drm_gem_shmem_fault+0x1ac/0x21c [ 206.393360][ T8564] __do_fault+0x11c/0x3d8 [ 206.394539][ T8564] handle_mm_fault+0x1f90/0x3ef0 [ 206.395964][ T8564] do_page_fault+0x330/0x890 [ 206.397152][ T8564] do_translation_fault+0x94/0xc8 [ 206.398486][ T8564] do_mem_abort+0x74/0x200 [ 206.399856][ T8564] el1_abort+0x3c/0x5c [ 206.401001][ T8564] el1h_64_sync_handler+0x60/0xac [ 206.402509][ T8564] el1h_64_sync+0x64/0x68 [ 206.403695][ T8564] __arch_copy_from_user+0xa4/0x230 [ 206.405128][ T8564] invoke_syscall+0x98/0x2c0 [ 206.406354][ T8564] el0_svc_common+0x138/0x258 [ 206.407640][ T8564] do_el0_svc+0x64/0x218 [ 206.408778][ T8564] el0_svc+0x58/0x168 [ 206.409876][ T8564] el0t_64_sync_handler+0x84/0xf0 [ 206.411239][ T8564] el0t_64_sync+0x18c/0x190 [ 206.412530][ T8564] Code: d4210000 97f287cf d4210000 97f287cd (d4210000) [ 206.414487][ T8564] ---[ end trace 0000000000000000 ]--- [ 207.032618][ T8564] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 207.034557][ T8564] SMP: stopping secondary CPUs [ 207.035863][ T8564] Kernel Offset: disabled [ 207.037020][ T8564] CPU features: 0x00000,02070084,26017203 [ 207.038542][ T8564] Memory Limit: none [ 207.585651][ T8564] Rebooting in 86400 seconds..