last executing test programs: 1m32.193709729s ago: executing program 0 (id=403): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1e, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1m28.969874996s ago: executing program 0 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002400000"], 0xa4}}, 0x0) 1m21.885526439s ago: executing program 0 (id=423): socket$inet_dccp(0x2, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 1m19.239877032s ago: executing program 0 (id=426): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100000009040100"], 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/65}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) 1m14.123835303s ago: executing program 0 (id=430): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], 0x0, 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x4280, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0xc25, &(0x7f0000000740)) dup2(r1, r2) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz0\x00'}, 0x45c) openat$kvm(0xffffff9c, &(0x7f0000001400), 0x200000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@struct={0xd, 0x5, 0x0, 0x4, 0x1, 0x6, [{0xf5, 0x2, 0xc4ea}, {0x6, 0x0, 0x7}, {0xb, 0x1, 0x2}, {0xf, 0x4, 0x2}, {0x6, 0x2, 0x4}]}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/4096, 0x63, 0x1000, 0x1, 0x5b25edac, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x563e22ec7dfea742, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x0, 0xc, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001900), 0x0, 0x10, 0x3, @void, @value}, 0x90) 51.530563024s ago: executing program 3 (id=454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x60000) fchown(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x6c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 48.163824734s ago: executing program 3 (id=458): r0 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) close_range(r0, 0xffffffffffffffff, 0x0) 47.260996457s ago: executing program 3 (id=459): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be", 0x9e, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x24c340}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048985}, 0x800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 45.232458884s ago: executing program 1 (id=460): r0 = socket$inet6(0xa, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 45.213901275s ago: executing program 3 (id=461): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f0000000300)=ANY=[], 0x8b, 0x28e, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus\x00', 0x0) 42.088816624s ago: executing program 1 (id=472): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 41.057916618s ago: executing program 3 (id=466): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x0, [@dev, @remote, @rand_addr, @local, @empty, @multicast2, @local]}, @noop, @noop, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@remote}, {}, {@loopback}, {@loopback}]}, @generic={0x0, 0x12, "191f408b9203caa52a2d9664878e990f"}, @ssrr={0x89, 0x17, 0x0, [@multicast2, @remote, @multicast1, @multicast1, @dev]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@multicast2}, {@loopback}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x656}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xda, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 41.04157561s ago: executing program 1 (id=467): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0) 35.711888271s ago: executing program 1 (id=479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) 35.697446982s ago: executing program 3 (id=470): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1e, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 33.160830256s ago: executing program 1 (id=474): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) write(r1, &(0x7f0000000000)="2e000300010000", 0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x200000d1) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x424, @private0, 0x6e}, 0x1c) 31.197873996s ago: executing program 4 (id=475): r0 = socket$inet6(0xa, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 26.477383681s ago: executing program 4 (id=476): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000996000/0x2000)=nil, 0x2000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 21.194485688s ago: executing program 4 (id=478): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="01000000000000000000030000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100", @ANYRES8=r0, @ANYBLOB='d', @ANYRES32], 0x90}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40000000000011a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x1d8, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xa5, 0x8, "f7e765c4af3aefa9d1dda07f24a9280bddb748afe464d96b37a8c2b056e7f61e319556b54e4a28f202508a5804349c35cf85a0b0534c87f6b63eb3f78a5f10ef667964695d689092fb104f392fc6dc23af06b4e0c3868202cb00eaca121237db1a666ef560e53fef92663f48ad3fedfa21460aaaf1712d1d8e158d184ec8d357eb3eff65307e8d16b8501c24e827c0c327a378faa988af90bea0789ba18f6c1bba"}, @NFTA_OBJ_USERDATA={0xb5, 0x8, "796d51a9035642d0c8b1ae22c82772ff7a1afb87876120babc52ebd0285a760b6313f156e84fa675619cfba2c5acfd50c214d74f024f6b0bf0c69444c89348310b5901832edb131fb94ed33b3da789f705e59e25df71b1d8aa79e302ca918f9c60e0003e5df4336e300bbaceec0923de5cd78b91463dab55575f0d6204b88640df4c85e2144e09ac938bee7f714e42ee37f3b3d09c5f2f7fdeb97775c7bd2311c106e47ebeeb3f9a5148dcd20e028314fc"}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "3878f3737e8140a3fe10107ba398fc5c7684fe5f891e"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000008240)={0x0, 0x0, &(0x7f0000008200)={&(0x7f0000001040)=@delchain={0x24, 0x4f, 0x1, 0x0, 0x0, {0x0, 0x25}}, 0x24}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000000140), 0x41, 0x0, 0x0) 19.328855859s ago: executing program 4 (id=484): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) accept(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050008"], 0x58}}, 0x0) 18.549313341s ago: executing program 2 (id=485): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be", 0x9e, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x24c340}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048985}, 0x800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.488777539s ago: executing program 2 (id=487): r0 = socket$inet6(0xa, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 16.437350006s ago: executing program 2 (id=488): socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) unshare(0x8020600) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) eventfd(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f0000000080)={0x3fe}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 15.492749183s ago: executing program 2 (id=489): syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c0000040000001c00018008000000", @ANYRES32=0x0, @ANYBLOB="08000ba530c427"], 0x34}}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) getgid() r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d87000000000000000081"], 0xa0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe884700127100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 14.034118227s ago: executing program 4 (id=490): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000440)={[{@dioread_nolock}, {@nojournal_checksum}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {}, {@dioread_lock}]}, 0x10, 0x4d2, &(0x7f0000002d00)="$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") ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000940)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703433372c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c666f7263652c7569643d", @ANYRES8, @ANYBLOB="2c63726561746f723da9076de42c656172726965722c6e6f626172726965722c6e6f6465636f6d706f73652c6d61736b3d5e4d41595f524541442c7063723d30303030303030303030303030303030303030302c636f6e746578743d756e636f6e66696e65645f752c7375626a5f757365723d626172727565722c61707072616973655f747970653d696d617369672c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d060a387b2640402c66736d616769633d3078303030303030303030303030303038302c66736d616769633d3078303030303030303030303030303030332c657569643d", @ANYRESDEC=0xee01, @ANYRESHEX=0x0], 0x1, 0x6da, &(0x7f0000004980)="$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") r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 14.012906429s ago: executing program 2 (id=491): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0), 0xc) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)='4', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)='5', 0x1}], 0x1}}], 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1}, {}, {0xa}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/26, 0x1a}], 0x119) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) 1.521039ms ago: executing program 1 (id=481): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x141000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x8, 0x87}}]}, 0x4c}}, 0x0) 511.149µs ago: executing program 4 (id=499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_BROADCAST={0x8, 0x4, @dev}, @IFA_LABEL={0x14}]}, 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r0, r3}) sendmmsg$inet(r4, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x28000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) close(r4) 0s ago: executing program 2 (id=500): pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) pselect6(0xffec, &(0x7f00000000c0)={0x0, 0x0, 0x800000000, 0x57}, 0x0, 0x0, 0x0, 0x0) write(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): tadv0: Removing interface: batadv_slave_1 [ 124.622346][ T3624] device bridge_slave_1 left promiscuous mode [ 124.639171][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.671987][ T3624] device bridge_slave_0 left promiscuous mode [ 124.712136][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.929521][ T3624] device veth1_macvtap left promiscuous mode [ 124.941440][ T3624] device veth0_macvtap left promiscuous mode [ 124.950473][ T3624] device veth1_vlan left promiscuous mode [ 124.962375][ T3624] device veth0_vlan left promiscuous mode [ 126.274282][ T2988] Bluetooth: hci5: command 0x041b tx timeout [ 129.101557][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 129.149224][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 129.195431][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.249531][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.274711][ T1075] Bluetooth: hci5: command 0x040f tx timeout [ 129.500537][ T3624] bond0 (unregistering): Released all slaves [ 129.654924][ T4371] device veth1_vlan entered promiscuous mode [ 129.729796][ T4703] team0: Port device team_slave_0 added [ 129.759543][ T4703] team0: Port device team_slave_1 added [ 129.784753][ T4745] loop0: detected capacity change from 0 to 32768 [ 129.839342][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.851411][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.888264][ T4703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.909901][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.919764][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.976951][ T4703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.010693][ T4745] XFS (loop0): Mounting V5 Filesystem [ 130.115701][ T4745] XFS (loop0): Ending clean mount [ 130.134526][ T4703] device hsr_slave_0 entered promiscuous mode [ 130.215418][ T4703] device hsr_slave_1 entered promiscuous mode [ 130.233464][ T4703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.253935][ T4703] Cannot create hsr debugfs directory [ 130.260536][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.269114][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.279850][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 130.279861][ T26] audit: type=1800 audit(1728502067.878:73): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name="bus" dev="loop0" ino=9287 res=0 errno=0 [ 131.297918][ T3574] XFS (loop0): Unmounting Filesystem [ 131.436463][ T4371] device veth0_macvtap entered promiscuous mode [ 131.488341][ T4371] device veth1_macvtap entered promiscuous mode [ 131.525007][ T4763] loop2: detected capacity change from 0 to 64 [ 131.921903][ T2988] Bluetooth: hci5: command 0x0419 tx timeout [ 132.699462][ T3975] attempt to access beyond end of device [ 132.699462][ T3975] loop2: rw=1, want=66, limit=64 [ 132.731103][ T3975] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 132.760804][ T3975] attempt to access beyond end of device [ 132.760804][ T3975] loop2: rw=1, want=67, limit=64 [ 132.790727][ T3975] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 132.820766][ T3975] attempt to access beyond end of device [ 132.820766][ T3975] loop2: rw=1, want=68, limit=64 [ 132.831641][ T3975] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 132.871481][ T3975] attempt to access beyond end of device [ 132.871481][ T3975] loop2: rw=1, want=69, limit=64 [ 132.900882][ T3975] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 132.930720][ T3975] attempt to access beyond end of device [ 132.930720][ T3975] loop2: rw=1, want=73, limit=64 [ 132.941613][ T3975] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 132.971889][ T3975] attempt to access beyond end of device [ 132.971889][ T3975] loop2: rw=1, want=74, limit=64 [ 133.002864][ T3975] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 133.011352][ T3975] attempt to access beyond end of device [ 133.011352][ T3975] loop2: rw=1, want=77, limit=64 [ 133.063042][ T3975] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 133.071531][ T3975] attempt to access beyond end of device [ 133.071531][ T3975] loop2: rw=1, want=78, limit=64 [ 133.102864][ T3975] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 133.111469][ T3975] attempt to access beyond end of device [ 133.111469][ T3975] loop2: rw=1, want=135, limit=64 [ 133.257425][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.263943][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.281982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.313721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.377500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.414151][ T4768] loop2: detected capacity change from 0 to 256 [ 133.424373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.491291][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.560935][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.601997][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.650981][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.691591][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.736772][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.791013][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.852545][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.894717][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.250787][ T4703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.423191][ T26] audit: type=1804 audit(1728502072.018:74): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.230" name="/newroot/56/bus/bus/bus" dev="loop2" ino=1048602 res=1 errno=0 [ 134.537728][ T26] audit: type=1804 audit(1728502072.078:75): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.230" name="/newroot/56/bus/bus/bus" dev="loop2" ino=1048602 res=1 errno=0 [ 135.270381][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.311345][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.373273][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.552877][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.593624][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.639622][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.659981][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.716469][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.765401][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.819014][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.877377][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.929454][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.970904][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.202184][ T4703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.264816][ T4371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.288223][ T4371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.361974][ T4371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.399131][ T4371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.626854][ T3675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.650975][ T3675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.727766][ T420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.746240][ T420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.280494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.331882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.457665][ T1075] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.593686][ T4796] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.632944][ T4796] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 137.671440][ T4796] bridge_slave_0: default FDB implementation only supports local addresses [ 137.753032][ T1075] usb 5-1: Using ep0 maxpacket: 16 [ 137.822297][ T4798] loop0: detected capacity change from 0 to 512 [ 137.883111][ T1075] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.920989][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.954531][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.975154][ T4798] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.999448][ T4798] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038 (0x7fffffff) [ 138.027471][ T1075] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.067929][ T1075] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.239359][ T1075] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.249293][ T1075] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 138.263837][ T1075] usb 5-1: Manufacturer: syz [ 138.284942][ T1075] usb 5-1: config 0 descriptor?? [ 138.321802][ T4703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.663034][ T1075] rc_core: IR keymap rc-hauppauge not found [ 138.668968][ T1075] Registered IR keymap rc-empty [ 138.691893][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.754334][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.804356][ T1075] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 138.853288][ T1075] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 138.917602][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 138.978303][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.024559][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.063785][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.103117][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.133688][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.162991][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.203103][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.233018][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.307715][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.389761][ T1075] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 139.468701][ T1075] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.631414][ T4828] loop3: detected capacity change from 0 to 2048 [ 141.331453][ T4828] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 141.383036][ T3608] usb 5-1: USB disconnect, device number 4 [ 141.426310][ T4703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.446701][ T4828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.869758][ T4371] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 141.921286][ T4371] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 142.559121][ T4838] loop2: detected capacity change from 0 to 512 [ 142.610701][ T4703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.949405][ T4703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.254578][ T4838] EXT4-fs (loop2): 1 orphan inode deleted [ 144.289748][ T4838] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback. [ 144.323522][ T4838] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038 (0x7fffffff) [ 144.376323][ T4703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.498345][ T4703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.884267][ T4850] EXT4-fs error (device loop2): ext4_ext_remove_space:2840: inode #18: comm syz.2.247: path[1].p_hdr == NULL [ 146.937168][ T4850] EXT4-fs (loop2): Remounting filesystem read-only [ 147.001172][ T4850] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 147.110425][ T4850] EXT4-fs error (device loop2): ext4_punch_hole:4112: inode #18: comm syz.2.247: mark_inode_dirty error [ 147.183393][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.200759][ T4837] EXT4-fs error (device loop2): ext4_ext_map_blocks:4162: inode #18: comm syz.2.247: bad extent address lblock: 0, depth: 1 pblock 0 [ 147.288215][ T4703] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.395944][ T4837] EXT4-fs error (device loop2): ext4_ext_map_blocks:4162: inode #18: comm syz.2.247: bad extent address lblock: 0, depth: 1 pblock 0 [ 147.433259][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.462183][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.546026][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.293530][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.402859][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.409945][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.422386][ T3568] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 148.553476][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.625697][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.678752][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.685887][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.748928][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.850703][ T4703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.898915][ T4703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.295312][ T4871] IPv6: NLM_F_REPLACE set, but no existing node found! [ 149.336760][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.389749][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.415150][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 149.462662][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.534863][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.615368][ T4881] loop4: detected capacity change from 0 to 2048 [ 149.643321][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.664034][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.682719][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.721005][ T4881] NILFS (loop4): invalid segment: Sequence number mismatch [ 149.728620][ T4881] NILFS (loop4): trying rollback from an earlier position [ 149.764194][ T4881] NILFS (loop4): recovery complete [ 149.981678][ T4882] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.993440][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.270569][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.290696][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.493243][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 151.673551][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 152.047538][ T4890] loop4: detected capacity change from 0 to 40427 [ 152.194399][ T4892] netlink: 104 bytes leftover after parsing attributes in process `syz.0.262'. [ 152.290819][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.330786][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.340784][ T4890] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 152.349119][ T4890] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 152.381289][ T4890] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 152.424173][ T4890] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.473730][ T4890] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 152.480913][ T4890] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.709331][ T4894] loop0: detected capacity change from 0 to 2048 [ 153.680097][ T4899] attempt to access beyond end of device [ 153.680097][ T4899] loop4: rw=2049, want=45104, limit=40427 [ 154.127768][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 154.184324][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.191829][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.260162][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.595042][ T4703] device veth0_vlan entered promiscuous mode [ 154.674594][ T4703] device veth1_vlan entered promiscuous mode [ 154.788709][ T4703] device veth0_macvtap entered promiscuous mode [ 154.815235][ T4703] device veth1_macvtap entered promiscuous mode [ 154.886180][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.931408][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.941791][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.959396][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.969894][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.988498][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.009716][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.025165][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.040516][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.053587][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.070952][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.082633][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.101882][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.112045][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.130274][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.140440][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.158795][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.170157][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.188765][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.201260][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.217765][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.230504][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.247039][ T4703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.267976][ T4703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.276730][ T4703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.283986][ T3574] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 155.285634][ T4703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.328322][ T3574] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 156.213130][ T1075] Bluetooth: hci3: command 0x0419 tx timeout [ 156.300606][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.328067][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.350048][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.362206][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.381079][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.393376][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.401653][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.418359][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.431230][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.444486][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.474394][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.501221][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.531098][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.709280][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.729988][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.753994][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.841814][ T3624] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.952871][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 157.113556][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.163155][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.397353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.455791][ T4863] chnl_net:caif_netlink_parms(): no params data found [ 157.525437][ T3624] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.604304][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.636207][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.764099][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.775307][ T4903] chnl_net:caif_netlink_parms(): no params data found [ 159.691360][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 160.213326][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 160.267945][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.275139][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.283459][ T4863] device bridge_slave_0 entered promiscuous mode [ 160.291894][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.399219][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.438960][ T4863] device bridge_slave_1 entered promiscuous mode [ 160.514735][ T3624] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.733084][ T3611] Bluetooth: hci0: command 0x040f tx timeout [ 161.913735][ T4863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.936257][ T4863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.137100][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.152511][ T1075] Bluetooth: hci2: command 0x041b tx timeout [ 163.202724][ T4903] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.231342][ T4903] device bridge_slave_0 entered promiscuous mode [ 163.284946][ T3624] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.383104][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.391033][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.450608][ T4903] device bridge_slave_1 entered promiscuous mode [ 163.488131][ T4863] team0: Port device team_slave_0 added [ 163.511945][ T4962] loop4: detected capacity change from 0 to 1024 [ 163.576643][ T4863] team0: Port device team_slave_1 added [ 163.768832][ T4903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.797444][ T4923] chnl_net:caif_netlink_parms(): no params data found [ 163.817905][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.825544][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 163.835529][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.930974][ T4863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.975374][ T4903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.014498][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.031351][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.126721][ T4863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.081051][ T4903] team0: Port device team_slave_0 added [ 165.128311][ T4903] team0: Port device team_slave_1 added [ 165.268309][ T4863] device hsr_slave_0 entered promiscuous mode [ 165.272463][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 165.280727][ T4863] device hsr_slave_1 entered promiscuous mode [ 165.371942][ T4863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.382007][ T4863] Cannot create hsr debugfs directory [ 166.667974][ T4903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.676915][ T4962] EXT4-fs: failed to create workqueue [ 166.694026][ T4962] EXT4-fs (loop4): mount failed [ 166.730323][ T4903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.823610][ T4903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.264233][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.272139][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.292766][ T4923] device bridge_slave_0 entered promiscuous mode [ 167.343092][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 168.033438][ T4903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.040409][ T4903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.079265][ T4903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.165734][ T4903] device hsr_slave_0 entered promiscuous mode [ 168.183175][ T4903] device hsr_slave_1 entered promiscuous mode [ 168.191117][ T4903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.209001][ T4903] Cannot create hsr debugfs directory [ 168.217310][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.231928][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.258216][ T4923] device bridge_slave_1 entered promiscuous mode [ 168.456300][ T4923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.499155][ T3624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.553486][ T4923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.686437][ T4923] team0: Port device team_slave_0 added [ 168.807352][ T4923] team0: Port device team_slave_1 added [ 168.880933][ T4923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.891470][ T4923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.927893][ T4923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.964997][ T4923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.988181][ T4923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.072118][ T4923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.231344][ T4923] device hsr_slave_0 entered promiscuous mode [ 169.250817][ T4923] device hsr_slave_1 entered promiscuous mode [ 169.290665][ T4923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.418091][ T4923] Cannot create hsr debugfs directory [ 170.335314][ T3624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.410866][ T3624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.565304][ T3624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.268327][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 174.015675][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.295'. [ 174.055583][ T5059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.295'. [ 174.095968][ T5059] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 174.195454][ T5059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.964560][ T5075] vivid-002: disconnect [ 175.252859][ T5069] vivid-002: reconnect [ 180.044818][ T5105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.082765][ T5105] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 180.793420][ T5120] netlink: 136 bytes leftover after parsing attributes in process `syz.4.305'. [ 180.886131][ T5120] netlink: 136 bytes leftover after parsing attributes in process `syz.4.305'. [ 183.099371][ T5138] loop4: detected capacity change from 0 to 64 [ 186.444789][ T5173] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 187.282420][ T4923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.479691][ T4923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.633514][ T4923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.367757][ T4923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.672035][ T5206] xt_hashlimit: overflow, rate too high: 0 [ 189.342508][ T4923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.359828][ T4923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.404184][ T4923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.514191][ T4923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.701847][ T4923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.768386][ T4923] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.254612][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.262554][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.367122][ T4863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.423071][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.431719][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.493463][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.500551][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.607946][ T5249] loop4: detected capacity change from 0 to 16 [ 191.615296][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.648157][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.703172][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.710283][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.738923][ T5249] erofs: (device loop4): mounted with root inode @ nid 36. [ 191.818403][ T5249] attempt to access beyond end of device [ 191.818403][ T5249] loop4: rw=0, want=40, limit=16 [ 191.843949][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.896573][ T4903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.935281][ T5253] erofs: (device loop4): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 191.959885][ T4863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.016391][ T4863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.106502][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.120969][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.177770][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.239799][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.271688][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.295572][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.367231][ T4903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.439818][ T3624] device hsr_slave_0 left promiscuous mode [ 192.464089][ T3624] device hsr_slave_1 left promiscuous mode [ 192.481972][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.501561][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.532693][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.563076][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.595631][ T3624] device hsr_slave_0 left promiscuous mode [ 192.610366][ T3624] device hsr_slave_1 left promiscuous mode [ 192.641797][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.671031][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.694027][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.711765][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.738103][ T3624] device bridge_slave_1 left promiscuous mode [ 192.758891][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.793291][ T3624] device bridge_slave_0 left promiscuous mode [ 192.799503][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.859070][ T3624] device veth1_macvtap left promiscuous mode [ 192.888165][ T3624] device veth0_macvtap left promiscuous mode [ 192.899972][ T3624] device veth1_vlan left promiscuous mode [ 192.910849][ T3624] device veth0_vlan left promiscuous mode [ 192.930149][ T3624] device veth1_macvtap left promiscuous mode [ 192.943120][ T3624] device veth0_macvtap left promiscuous mode [ 192.949292][ T3624] device veth1_vlan left promiscuous mode [ 192.967316][ T3624] device veth0_vlan left promiscuous mode [ 193.581211][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 193.610783][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 193.641678][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.662094][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.811496][ T3624] bond0 (unregistering): Released all slaves [ 194.026791][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 194.051912][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 194.081614][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.112517][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.143317][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.149626][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.268038][ T3624] bond0 (unregistering): Released all slaves [ 196.289778][ T4863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.308861][ T4923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.320539][ T4923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.487101][ T4923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.595138][ T4923] device veth0_vlan entered promiscuous mode [ 196.629818][ T4923] device veth1_vlan entered promiscuous mode [ 196.682028][ T4923] device veth0_macvtap entered promiscuous mode [ 196.716819][ T4923] device veth1_macvtap entered promiscuous mode [ 196.754989][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.774187][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.795834][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.814729][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.833024][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.852984][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.874663][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.892971][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.914801][ T4923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.934664][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.956076][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.974304][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.993022][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.012270][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.032975][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.052852][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.072843][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.085567][ T4923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.106276][ T4923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.125115][ T4923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.142144][ T4923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.154909][ T4923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.264274][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.272121][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.282105][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.291011][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.300967][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.319576][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.332045][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.360986][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.373659][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.393753][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.402576][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.420945][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.439727][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.457556][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.472921][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.481673][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.501579][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.520666][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.532530][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.548663][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.562417][ T4903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.943522][ T4863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.033470][ T4863] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.169335][ T4863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.203276][ T4863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.258220][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.307845][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.315950][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.324603][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.333170][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.341135][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.349753][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.359144][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.367986][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.375159][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.427434][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.473801][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.512825][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.519941][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.558086][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.591923][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.625481][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.654821][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.694213][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.721647][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.743838][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.770729][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.791950][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.820278][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.853174][ T4903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.891908][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.901312][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.959551][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.966699][ T5287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.974122][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.981193][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.057432][ T5287] device bridge0 entered promiscuous mode [ 199.291379][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.107787][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.511120][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.464166][ T4863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.479651][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.493669][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.501172][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.529522][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.290168][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.370528][ T4903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.482992][ T4903] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.652216][ T4903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.711915][ T4903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.961945][ T4903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.086709][ T4903] device veth0_vlan entered promiscuous mode [ 204.132280][ T4903] device veth1_vlan entered promiscuous mode [ 204.231817][ T4903] device veth0_macvtap entered promiscuous mode [ 204.310320][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.320021][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.349762][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.368790][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.389187][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.407174][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.424390][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.445612][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.468952][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.476116][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.544574][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.578085][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.610201][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.617342][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.670598][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.671470][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.676434][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.693841][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.694537][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.695239][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.695871][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.696364][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.697053][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.697577][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.698061][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.698186][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.698294][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.698844][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.701984][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.702496][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.704716][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.705243][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.711320][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.711909][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.755487][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.756127][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.756701][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.757276][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.757899][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.768380][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.768948][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.792519][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.806193][ T4903] device veth1_macvtap entered promiscuous mode [ 204.853690][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.853713][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.853723][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.853735][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.853746][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.853758][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.853767][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.853779][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.853798][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.853810][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.864264][ T4903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.876707][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.876728][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.876738][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.876751][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.876761][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.876773][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.876782][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.876794][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.876811][ T4903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.876823][ T4903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.877933][ T4903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.880943][ T4903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.880975][ T4903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.881001][ T4903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.881027][ T4903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.142924][ T3853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.142988][ T3853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.263638][ T3853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.263700][ T3853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.286385][ T3673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.286445][ T3673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.341721][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.342335][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.342975][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.343482][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.344064][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.344535][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.345030][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.738250][ T23] Bluetooth: hci6: command 0x0409 tx timeout [ 209.256430][ T3559] Bluetooth: hci3: command 0x0409 tx timeout [ 209.273265][ T5068] Bluetooth: hci6: command 0x041b tx timeout [ 210.978131][ T5392] binder: 5391:5392 ioctl c018620b 20000380 returned -14 [ 212.283094][ T23] Bluetooth: hci6: command 0x040f tx timeout [ 212.623057][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 213.257452][ T2988] Bluetooth: hci1: command 0x0406 tx timeout [ 214.706760][ T5068] Bluetooth: hci3: command 0x040f tx timeout [ 215.427065][ T5068] Bluetooth: hci6: command 0x0419 tx timeout [ 216.313925][ T5438] netlink: 128 bytes leftover after parsing attributes in process `syz.1.344'. [ 218.275354][ T3559] Bluetooth: hci3: command 0x0419 tx timeout [ 220.521380][ T5450] loop2: detected capacity change from 0 to 4096 [ 220.561622][ T5450] ntfs3: Bad value for 'fmask' [ 222.359737][ T5457] loop2: detected capacity change from 0 to 764 [ 223.995688][ T5376] chnl_net:caif_netlink_parms(): no params data found [ 224.278411][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 224.671767][ T5463] loop0: detected capacity change from 0 to 128 [ 224.788699][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.802868][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.821372][ T5358] device bridge_slave_0 entered promiscuous mode [ 224.852434][ T5376] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.872013][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.901798][ T5376] device bridge_slave_0 entered promiscuous mode [ 224.914157][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.921238][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.951317][ T5358] device bridge_slave_1 entered promiscuous mode [ 224.989473][ T5376] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.003526][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.017095][ T5376] device bridge_slave_1 entered promiscuous mode [ 225.185789][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.227979][ T5376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.255306][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.285808][ T5376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.277415][ T5463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.288132][ T5463] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038 (0x7fffffff) [ 226.345188][ T26] audit: type=1326 audit(1728502163.938:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.2.351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb421e1aff9 code=0x0 [ 226.446893][ T5478] dccp_close: ABORT with 1 bytes unread [ 226.501342][ T5358] team0: Port device team_slave_0 added [ 226.593304][ T5376] team0: Port device team_slave_0 added [ 226.636216][ T5358] team0: Port device team_slave_1 added [ 226.690545][ T5376] team0: Port device team_slave_1 added [ 226.922543][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.937447][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.077523][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.153427][ T5376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.160388][ T5376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.348016][ T5376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.409595][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.428420][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.599295][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.657034][ T5376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.670426][ T5376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.763800][ T5376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.513133][ T5358] device hsr_slave_0 entered promiscuous mode [ 228.556930][ T5358] device hsr_slave_1 entered promiscuous mode [ 228.573325][ T5358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.280985][ T5358] Cannot create hsr debugfs directory [ 229.323984][ T5376] device hsr_slave_0 entered promiscuous mode [ 229.413877][ T5376] device hsr_slave_1 entered promiscuous mode [ 229.435036][ T5376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.442696][ T5376] Cannot create hsr debugfs directory [ 230.333892][ T5497] 9pnet: bogus RREAD count (149 > 40) [ 230.659913][ T5500] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 232.122018][ T5358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.370838][ T5358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.874947][ T5358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.287711][ T5358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.269786][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 243.335944][ T5358] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.395524][ T5358] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.478921][ T5358] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.586179][ T5358] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.650656][ T5376] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.829197][ T5570] loop2: detected capacity change from 0 to 1764 [ 243.853026][ T5376] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.932880][ T5376] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.982890][ T5376] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.474041][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.469984][ T5358] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.494974][ T5376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.539459][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.558274][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.632633][ T5376] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.701916][ T5590] loop2: detected capacity change from 0 to 256 [ 246.802929][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 246.814844][ T5590] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 246.844919][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.864881][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.882676][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.889816][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.912666][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.927918][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.941915][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.949065][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.055541][ T5592] loop0: detected capacity change from 0 to 128 [ 247.063374][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.109181][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.155982][ T5592] FAT-fs (loop0): Unrecognized mount option "sXowexec" or missing value [ 247.369913][ T5358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.426097][ T3610] Bluetooth: hci5: command 0x0406 tx timeout [ 247.432635][ T5358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.476288][ T5376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.486847][ T5376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.809749][ T5600] xt_TCPMSS: Only works on TCP SYN packets [ 247.833128][ T7] usb 2-1: config index 0 descriptor too short (expected 58733, got 36) [ 247.853713][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 247.865521][ T7] usb 2-1: config 39 has too many interfaces: 126, using maximum allowed: 32 [ 247.876767][ T5376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.893470][ T7] usb 2-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 247.926095][ T7] usb 2-1: config 39 has 0 interfaces, different from the descriptor's value: 126 [ 247.974333][ T5376] device veth0_vlan entered promiscuous mode [ 247.999558][ T5376] device veth1_vlan entered promiscuous mode [ 248.055485][ T5376] device veth0_macvtap entered promiscuous mode [ 248.069375][ T7] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 248.087643][ T5376] device veth1_macvtap entered promiscuous mode [ 248.094678][ T7] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 248.113795][ T7] usb 2-1: Product: syz [ 248.170497][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.189456][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.212033][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.240611][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.254572][ T7] usb 2-1: USB disconnect, device number 4 [ 248.325569][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.359351][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.398096][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.420080][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.434451][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.453194][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.475239][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.495553][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.516391][ T5376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.539466][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.560112][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.574025][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.598053][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.615313][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.639228][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.653285][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.672981][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.692857][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.714168][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.734987][ T5376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.755702][ T5376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.788116][ T5376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.810129][ T5376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.827003][ T5376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.841918][ T5376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.856164][ T5376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.994150][ T3853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.019820][ T3853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.053418][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.063866][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.295135][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.307855][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.329271][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.344457][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.367454][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.386375][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.404408][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.423347][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.433487][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.442198][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.461908][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.473440][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.482305][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.501974][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.509110][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.528429][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.542275][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.557773][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.564944][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.578953][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.592570][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.609566][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.627527][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.643876][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.666514][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.684360][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.702998][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.724044][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.743146][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.761311][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.771789][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.786547][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.802376][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.817417][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.841079][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.860653][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.873194][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.881646][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.901394][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.919441][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.935564][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.986075][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.033553][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.060531][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.075772][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.093890][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.172155][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.233694][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.297354][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.515228][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.397598][ T5619] x_tables: duplicate underflow at hook 1 [ 251.404452][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.436551][ T5619] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20004 [ 251.467321][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.509177][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.543618][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.628525][ T5610] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 251.740005][ T3624] device hsr_slave_0 left promiscuous mode [ 251.779725][ T3624] device hsr_slave_1 left promiscuous mode [ 251.827144][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.893548][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.917234][ T3624] device bridge_slave_1 left promiscuous mode [ 251.965072][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.690708][ T3624] device bridge_slave_0 left promiscuous mode [ 252.722377][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.958013][ T3624] device hsr_slave_0 left promiscuous mode [ 252.983311][ T3624] device hsr_slave_1 left promiscuous mode [ 253.016800][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.071484][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.109641][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.133108][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.152989][ T2988] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.220813][ T3624] device bridge_slave_1 left promiscuous mode [ 253.232928][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.256775][ T3624] device bridge_slave_0 left promiscuous mode [ 253.271040][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.302326][ T3624] device veth1_macvtap left promiscuous mode [ 253.313416][ T3624] device veth0_macvtap left promiscuous mode [ 253.319770][ T3624] device veth1_vlan left promiscuous mode [ 253.334251][ T3624] device veth0_vlan left promiscuous mode [ 253.543324][ T2988] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.570023][ T2988] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 253.649744][ T2988] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.697664][ T2988] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 253.762395][ T2988] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 253.953276][ T2988] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.975685][ T2988] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.007323][ T2988] usb 1-1: Product: syz [ 254.024464][ T2988] usb 1-1: Manufacturer: syz [ 254.103991][ T2988] cdc_wdm 1-1:1.0: skipping garbage [ 254.119512][ T2988] cdc_wdm 1-1:1.0: skipping garbage [ 254.196819][ T2988] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 254.210775][ T2988] cdc_wdm 1-1:1.0: Unknown control protocol [ 254.312262][ T2988] usb 1-1: USB disconnect, device number 4 [ 254.609096][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 254.642928][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 254.668598][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.705900][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.911503][ T3624] bond0 (unregistering): Released all slaves [ 255.022986][ T2988] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 255.258134][ T3559] Bluetooth: hci3: command 0x0405 tx timeout [ 255.445624][ T2988] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.466894][ T2988] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.498283][ T2988] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.528706][ T2988] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 255.564263][ T2988] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 255.576806][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.583138][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.666030][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 255.704787][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 255.753262][ T2988] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.772740][ T2988] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.781298][ T2988] usb 1-1: Product: syz [ 255.794963][ T2988] usb 1-1: Manufacturer: syz [ 255.833241][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.883384][ T2988] usb 1-1: can't set config #1, error -71 [ 255.894429][ T2988] usb 1-1: USB disconnect, device number 5 [ 255.985170][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.345226][ T3624] bond0 (unregistering): Released all slaves [ 259.266599][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.493618][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.501170][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.663672][ T3611] Bluetooth: hci7: command 0x0409 tx timeout [ 263.808674][ T5693] loop0: detected capacity change from 0 to 1024 [ 264.334455][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 264.402905][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 264.616257][ T5666] chnl_net:caif_netlink_parms(): no params data found [ 264.702951][ T7] Bluetooth: hci7: command 0x041b tx timeout [ 266.278519][ T2988] Bluetooth: hci6: command 0x0409 tx timeout [ 266.824205][ T3611] Bluetooth: hci7: command 0x040f tx timeout [ 267.728423][ T26] audit: type=1326 audit(1728502205.328:77): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.1.415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc026ff9 code=0x0 [ 268.758194][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.770120][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.812483][ T5666] device bridge_slave_0 entered promiscuous mode [ 268.921827][ T5697] chnl_net:caif_netlink_parms(): no params data found [ 269.003361][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.018442][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.068316][ T5666] device bridge_slave_1 entered promiscuous mode [ 269.268255][ T7] Bluetooth: hci6: command 0x041b tx timeout [ 269.292278][ T7] Bluetooth: hci7: command 0x0419 tx timeout [ 272.254487][ T3611] Bluetooth: hci6: command 0x040f tx timeout [ 272.353588][ T5758] xt_time: unknown flags 0xc [ 272.905661][ T5666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.986585][ T5766] netlink: 7 bytes leftover after parsing attributes in process `syz.3.427'. [ 273.035059][ T5666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.205152][ T5068] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 273.443410][ T5068] usb 1-1: Using ep0 maxpacket: 32 [ 273.563566][ T5068] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 273.575445][ T5068] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 273.625357][ T5068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.676222][ T5068] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 273.737094][ T5068] usb 1-1: config 1 has no interface number 0 [ 273.766754][ T5068] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 273.798324][ T5068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.886803][ T5068] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 273.969464][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.292395][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.255214][ T2988] Bluetooth: hci6: command 0x0419 tx timeout [ 275.302429][ T5697] device bridge_slave_0 entered promiscuous mode [ 275.319146][ T5666] team0: Port device team_slave_0 added [ 277.271109][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.282863][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.291049][ T5697] device bridge_slave_1 entered promiscuous mode [ 278.273534][ T5068] snd_usb_pod 1-1:1.1: set_interface failed [ 278.279775][ T5068] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 278.310356][ T5068] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 278.355698][ T5068] usb 1-1: USB disconnect, device number 6 [ 280.268694][ T5787] input: syz0 as /devices/virtual/input/input12 [ 281.300026][ T5666] team0: Port device team_slave_1 added [ 281.449247][ T5792] loop3: detected capacity change from 0 to 256 [ 281.613370][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.624805][ T5792] exfat: Bad value for 'uid' [ 281.661568][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.258574][ T5792] loop3: detected capacity change from 0 to 512 [ 282.268390][ T5666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.290418][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.317628][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.413504][ T5666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.546187][ T5697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.628747][ T5697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.638253][ T26] audit: type=1326 audit(1728502220.228:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.1.433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8dc026ff9 code=0x0 [ 282.737024][ T5666] device hsr_slave_0 entered promiscuous mode [ 282.793254][ T5666] device hsr_slave_1 entered promiscuous mode [ 282.887676][ T5697] team0: Port device team_slave_0 added [ 282.953651][ T5697] team0: Port device team_slave_1 added [ 283.071875][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.102930][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.214319][ T5697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.286846][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.305871][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.343252][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 283.442533][ T5697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.896028][ T5697] device hsr_slave_0 entered promiscuous mode [ 284.006496][ T5697] device hsr_slave_1 entered promiscuous mode [ 284.033847][ T5697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.041434][ T5697] Cannot create hsr debugfs directory [ 284.898002][ T5666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.104281][ T5815] netlink: 'syz.3.437': attribute type 11 has an invalid length. [ 285.284111][ T5666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.838706][ T5666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.081239][ T5666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.316086][ T5835] loop3: detected capacity change from 0 to 512 [ 288.413514][ T5835] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.484801][ T5666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.509781][ T5835] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 288.544774][ T5666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.578193][ T5666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.593837][ T5835] EXT4-fs (loop3): 1 truncate cleaned up [ 288.610094][ T5835] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.637363][ T5666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.034001][ T5666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.114239][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.136564][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.197338][ T5666] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.383406][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.396747][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.444215][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.451301][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.504945][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.537094][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.606312][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.613433][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.667170][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.686576][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.715510][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.736149][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.801234][ T5666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.848056][ T5666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.945164][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.958751][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.984575][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.038979][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.058305][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.083678][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.103666][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.123824][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.177337][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.892942][ T5073] Bluetooth: hci0: command 0x0409 tx timeout [ 293.916133][ T5869] loop3: detected capacity change from 0 to 1024 [ 293.961096][ T5869] hfsplus: unable to parse mount options [ 294.276169][ T5073] Bluetooth: hci0: command 0x041b tx timeout [ 295.246617][ T5666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.568547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.580852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.619520][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 295.770010][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.792013][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.107669][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.130990][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.269744][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.281391][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.326592][ T5666] device veth0_vlan entered promiscuous mode [ 296.377417][ T5666] device veth1_vlan entered promiscuous mode [ 296.389530][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.404710][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.423539][ T5840] device bridge_slave_0 entered promiscuous mode [ 296.452603][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.469972][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.488222][ T5840] device bridge_slave_1 entered promiscuous mode [ 296.533385][ T5073] Bluetooth: hci0: command 0x040f tx timeout [ 296.556479][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.568474][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.587285][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.620398][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.677610][ T5666] device veth0_macvtap entered promiscuous mode [ 296.690647][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.718362][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.747408][ T5666] device veth1_macvtap entered promiscuous mode [ 296.769447][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.940080][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.966666][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.000322][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.040379][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.065917][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.088826][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.111583][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.138342][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.180609][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.208945][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.232199][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.256601][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.289063][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.500650][ T5840] team0: Port device team_slave_0 added [ 299.533318][ T5884] xt_time: unknown flags 0xc [ 300.005490][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.205183][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.265245][ T5068] Bluetooth: hci0: command 0x0419 tx timeout [ 301.316523][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.339058][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.380090][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.402938][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.441658][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.495102][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.538910][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.601894][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.648654][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.701156][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.756189][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.803863][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.881807][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.925013][ T5666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.959326][ T5666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.019778][ T5666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.083080][ T5666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.295910][ T5840] team0: Port device team_slave_1 added [ 302.433456][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.452700][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.665997][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.682802][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.804200][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.861791][ T458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.886421][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.899647][ T458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.922719][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.961461][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.098580][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'. [ 303.151228][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.236795][ T5840] device hsr_slave_0 entered promiscuous mode [ 303.281424][ T5840] device hsr_slave_1 entered promiscuous mode [ 303.313309][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.320892][ T5840] Cannot create hsr debugfs directory [ 303.440427][ T4165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.479224][ T4165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.608226][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.742510][ T5697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.859302][ T5697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.871491][ T5906] loop2: detected capacity change from 0 to 512 [ 303.904209][ T5697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.975197][ T5697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.027924][ T5840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.288381][ T5697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.334200][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.352566][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.392717][ T5697] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.430541][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.444540][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.463437][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.470516][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.334134][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.352644][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.398230][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.417108][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.424233][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.459589][ T5906] EXT4-fs (loop2): 1 orphan inode deleted [ 305.472987][ T5906] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,noquota,barrier=0x0000000000000006,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 305.507936][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.539375][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.563848][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.582170][ T5906] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 305.633155][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.729514][ T5840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.972085][ T5697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.765100][ T5697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.429559][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.439100][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.468600][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.024551][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.035490][ T5926] loop3: detected capacity change from 0 to 64 [ 308.054476][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.096655][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.114044][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.133451][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.645002][ T5929] hfs: request for non-existent node 1280 in B*Tree [ 308.651997][ T5929] hfs: request for non-existent node 1280 in B*Tree [ 309.348807][ T5840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.420596][ T5840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.523535][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.531624][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.342815][ T5951] gfs2: not a GFS2 filesystem [ 312.395674][ T5697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.469290][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'. [ 312.800237][ T5697] device veth0_vlan entered promiscuous mode [ 312.822641][ T5697] device veth1_vlan entered promiscuous mode [ 312.875601][ T5697] device veth0_macvtap entered promiscuous mode [ 312.897313][ T5697] device veth1_macvtap entered promiscuous mode [ 312.935265][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.956323][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.973840][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.994836][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.015021][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.032991][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.053900][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.072969][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.094517][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.117142][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.134276][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.152964][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.172792][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.196758][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.216669][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.236053][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.256755][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.268077][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.278767][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.288817][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.453407][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.492786][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.535049][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.563113][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.607585][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.633038][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.665594][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.708913][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.750177][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.785696][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.280759][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.290365][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.313807][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.332634][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.342208][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.358847][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 314.372174][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.386981][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.402332][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.414582][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.434955][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.451937][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.467717][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.495913][ T5697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.532792][ T5697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.541513][ T5697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.578755][ T5697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.751770][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.943286][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.002113][ T4165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.011313][ T4165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.286199][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.337868][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.373961][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.406709][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.439733][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.690919][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.985096][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.273058][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.294463][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.080246][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.282847][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.273280][ T5074] Bluetooth: hci3: command 0x0406 tx timeout [ 332.329965][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.478'. [ 334.002271][ T6033] netlink: 'syz.4.484': attribute type 11 has an invalid length. [ 334.271748][ T3609] Bluetooth: hci2: command 0x0409 tx timeout [ 334.277959][ T3609] Bluetooth: hci5: command 0x0409 tx timeout [ 336.293307][ T3609] Bluetooth: hci5: command 0x041b tx timeout [ 336.587329][ T6024] chnl_net:caif_netlink_parms(): no params data found [ 336.763925][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.779165][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.794326][ T6024] device bridge_slave_0 entered promiscuous mode [ 336.812618][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.824449][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.842236][ T6024] device bridge_slave_1 entered promiscuous mode [ 336.930661][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.970281][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.120898][ T6024] team0: Port device team_slave_0 added [ 337.154292][ T6024] team0: Port device team_slave_1 added [ 337.263560][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.277294][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.318180][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.353322][ T6054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.489'. [ 338.363261][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.370217][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.544754][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.563803][ T26] audit: type=1326 audit(1728502276.168:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.2.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa99feedff9 code=0x0 [ 338.791839][ T3624] device hsr_slave_0 left promiscuous mode [ 338.973334][ T5074] Bluetooth: hci2: command 0x041b tx timeout [ 338.990849][ T3624] device hsr_slave_1 left promiscuous mode [ 339.020263][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.383388][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.391269][ T3624] device bridge_slave_1 left promiscuous mode [ 340.397614][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.406545][ T3624] device bridge_slave_0 left promiscuous mode [ 340.412820][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.425676][ T3624] device hsr_slave_0 left promiscuous mode [ 340.432123][ T3624] device hsr_slave_1 left promiscuous mode [ 340.439653][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.459066][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.467839][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.475510][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.483461][ T3624] device bridge_slave_1 left promiscuous mode [ 340.489650][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.500610][ T3624] device bridge_slave_0 left promiscuous mode [ 340.507142][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.523920][ T3624] device veth1_macvtap left promiscuous mode [ 340.529979][ T3624] device veth0_macvtap left promiscuous mode [ 340.562887][ T3624] device veth1_vlan left promiscuous mode [ 340.568724][ T3624] device veth0_vlan left promiscuous mode [ 341.173642][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 341.202050][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 341.232413][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.266519][ T3609] Bluetooth: hci5: command 0x040f tx timeout [ 341.274935][ T3609] Bluetooth: hci2: command 0x040f tx timeout [ 341.302117][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.545054][ T3624] bond0 (unregistering): Released all slaves [ 341.861620][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 341.902566][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 341.938092][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.976321][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.225097][ T3624] bond0 (unregistering): Released all slaves [ 342.331377][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.366496][ T6024] device hsr_slave_0 entered promiscuous mode [ 342.404006][ T6024] device hsr_slave_1 entered promiscuous mode [ 342.423055][ T6024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.430639][ T6024] Cannot create hsr debugfs directory [ 342.654907][ T6024] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.730365][ T6024] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.861354][ T6024] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.010297][ T6024] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.248297][ T6024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.269587][ T6024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.283027][ T3609] Bluetooth: hci2: command 0x0419 tx timeout [ 344.291597][ T3609] Bluetooth: hci5: command 0x0419 tx timeout [ 344.351321][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.367677][ T6024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.407122][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.416394][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.475734][ T6024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.524777][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.554315][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.563311][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.570385][ T4165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.627636][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.639043][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.660454][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.675458][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.682556][ T4165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.700234][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.716568][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.769751][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.792939][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.813440][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.857609][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.873621][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.893352][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.950699][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.975023][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.988903][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.008293][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 345.027163][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.283748][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.300049][ T6022] chnl_net:caif_netlink_parms(): no params data found [ 347.334405][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.351894][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.360848][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.425372][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.433941][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.441514][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.483032][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.501870][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.519855][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.526993][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.550109][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.565126][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.583627][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.590702][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.693330][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.706743][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.767277][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.785746][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.813822][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.851978][ T6024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.877354][ T6024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.935883][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.946451][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.963942][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.983429][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.003336][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.039519][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.057517][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.077446][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.095799][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.173345][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.254715][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.271850][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.290245][ T5840] device veth0_vlan entered promiscuous mode [ 348.339652][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.353864][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.362198][ T6022] device bridge_slave_0 entered promiscuous mode [ 348.372399][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.412990][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.428892][ T6022] device bridge_slave_1 entered promiscuous mode [ 348.491096][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.519322][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.584452][ T6022] team0: Port device team_slave_0 added [ 348.592593][ T6022] team0: Port device team_slave_1 added [ 348.646197][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.662764][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.701818][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.738591][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.752909][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.798996][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.878156][ T6022] device hsr_slave_0 entered promiscuous mode [ 348.893886][ T6022] device hsr_slave_1 entered promiscuous mode [ 348.913579][ T6022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.921177][ T6022] Cannot create hsr debugfs directory [ 349.141762][ T6022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.287144][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.295494][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.554254][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.684027][ T6024] device veth0_vlan entered promiscuous mode [ 349.736276][ T6024] device veth1_vlan entered promiscuous mode [ 349.817425][ T6024] device veth0_macvtap entered promiscuous mode [ 349.876316][ T6024] device veth1_macvtap entered promiscuous mode [ 349.920725][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.943203][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.958784][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.978683][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.997435][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.017919][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.035288][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.052895][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.077442][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.095826][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.114742][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.136920][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.155293][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.177110][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.197153][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.216910][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.251576][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.265855][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.276743][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.286908][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.312556][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.328611][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.348727][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.368505][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.388222][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.404425][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.422925][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.445487][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.467532][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.488341][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.295939][ T5840] device veth1_vlan entered promiscuous mode [ 351.375259][ T6022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.423653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.431241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.456773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.503584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.535935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.553786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.573509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.593214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.613574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.633366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.653373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.672840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.683719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.705258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.723574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.766600][ T6024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.793062][ T6024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.806419][ T6024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.825061][ T6024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.868984][ T6022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.908530][ T3611] Bluetooth: hci3: command 0x0409 tx timeout [ 351.993324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.003680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.024736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.212673][ T4165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.221501][ T4165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.324581][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.341889][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.375500][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.393234][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.425665][ T6022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.565745][ T6092] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 352.650964][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 352.864709][ T27] INFO: task syz.4.321:5249 blocked for more than 145 seconds. [ 352.872294][ T27] Not tainted 5.15.167-syzkaller #0 [ 352.913910][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.929284][ T27] task:syz.4.321 state:D stack:23888 pid: 5249 ppid: 3581 flags:0x00004004 [ 352.950662][ T27] Call Trace: [ 352.961101][ T27] [ 352.964468][ T27] __schedule+0x12c4/0x45b0 [ 352.969019][ T27] ? release_firmware_map_entry+0x190/0x190 [ 352.988780][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 353.003800][ T27] ? print_irqtrace_events+0x210/0x210 [ 353.009304][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 353.032959][ T27] schedule+0x11b/0x1f0 [ 353.037164][ T27] io_schedule+0x88/0x100 [ 353.041520][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 353.067604][ T27] ? wait_on_page_bit+0x50/0x50 [ 353.072512][ T27] ? rcu_lock_release+0x20/0x20 [ 353.086799][ T27] ? rcu_lock_release+0x5/0x20 [ 353.091614][ T27] do_read_cache_page+0x9c1/0x1040 [ 353.114839][ T27] erofs_namei+0x15e/0x1700 [ 353.119413][ T27] erofs_lookup+0x1c0/0x460 [ 353.133350][ T27] ? erofs_namei+0x1700/0x1700 [ 353.138165][ T27] ? d_hash_and_lookup+0x1b0/0x1b0 [ 353.167798][ T27] ? __init_waitqueue_head+0xaa/0x140 [ 353.182778][ T27] __lookup_slow+0x275/0x3d0 [ 353.187427][ T27] ? lookup_one_len+0x2d0/0x2d0 [ 353.192299][ T27] ? down_read+0x1b3/0x2e0 [ 353.212324][ T27] lookup_slow+0x53/0x70 [ 353.221897][ T27] walk_component+0x48c/0x610 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 353.235753][ T27] ? nd_alloc_stack+0xf0/0xf0 [ 353.240474][ T27] ? generic_permission+0x21c/0x4f0 [ 353.418627][ T27] ? inode_permission+0xf7/0x450 [ 353.432090][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 353.453455][ T27] ? bpf_lsm_inode_permission+0x5/0x10 [ 353.458959][ T27] ? security_inode_permission+0xad/0xf0 [ 353.472859][ T27] link_path_walk+0x642/0xd90 [ 353.477583][ T27] ? handle_lookup_down+0x130/0x130 [ 353.493779][ T27] path_lookupat+0xa9/0x450 [ 353.498338][ T27] filename_lookup+0x230/0x5c0 [ 353.513979][ T27] ? hashlen_string+0x110/0x110 [ 353.518892][ T27] ? getname_flags+0x1ec/0x4e0 [ 353.533229][ T27] user_path_at_empty+0x40/0x180 [ 353.538218][ T27] path_setxattr+0xae/0x2a0 [ 353.558494][ T27] ? simple_xattr_list_add+0xf0/0xf0 [ 353.572309][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 353.583233][ T27] __x64_sys_setxattr+0xb7/0xd0 [ 353.588121][ T27] do_syscall_64+0x3b/0xb0 [ 353.592546][ T27] ? clear_bhb_loop+0x15/0x70 [ 353.613282][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.619226][ T27] RIP: 0033:0x7fda4bffcff9 [ 353.633318][ T27] RSP: 002b:00007fda4a475038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 353.641786][ T27] RAX: ffffffffffffffda RBX: 00007fda4c1b4f80 RCX: 00007fda4bffcff9 [ 353.667134][ T27] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000020000180 [ 353.683500][ T27] RBP: 00007fda4c06f296 R08: 0000000000000000 R09: 0000000000000000 [ 353.691515][ T27] R10: 0000000000000386 R11: 0000000000000246 R12: 0000000000000000 [ 353.716409][ T27] R13: 0000000000000000 R14: 00007fda4c1b4f80 R15: 00007ffc0913dee8 [ 353.734046][ T27] [ 353.743547][ T27] INFO: task syz.4.321:5253 blocked for more than 146 seconds. [ 353.764606][ T27] Not tainted 5.15.167-syzkaller #0 [ 353.770358][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.793496][ T27] task:syz.4.321 state:D stack:26880 pid: 5253 ppid: 3581 flags:0x00004004 [ 353.813219][ T27] Call Trace: [ 353.816532][ T27] [ 353.819468][ T27] __schedule+0x12c4/0x45b0 [ 353.833205][ T27] ? blk_flush_plug_list+0x452/0x490 [ 353.838539][ T27] ? release_firmware_map_entry+0x190/0x190 [ 353.861189][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 353.872534][ T27] ? blk_check_plugged+0x250/0x250 [ 353.893285][ T27] ? print_irqtrace_events+0x210/0x210 [ 353.898787][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 353.913278][ T27] schedule+0x11b/0x1f0 [ 353.917479][ T27] io_schedule+0x88/0x100 [ 353.921821][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 353.941063][ T27] ? wait_on_page_bit+0x50/0x50 [ 353.950869][ T27] ? rcu_lock_release+0x20/0x20 [ 353.971284][ T27] ? bio_add_page+0x2ba/0x450 [ 353.976965][ T27] z_erofs_runqueue+0x788/0x1a80 [ 353.981927][ T27] ? tick_nohz_tick_stopped+0x77/0xb0 [ 354.001879][ T27] ? z_erofs_do_read_page+0x2600/0x2600 [ 354.013303][ T27] ? __bpf_trace_erofs_destroy_inode+0x20/0x20 [ 354.019518][ T27] z_erofs_readahead+0xc9a/0x1280 [ 354.038440][ T27] ? z_erofs_readpage+0x840/0x840 [ 354.054053][ T27] read_pages+0x159/0x8e0 [ 354.058435][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 354.073161][ T27] ? add_to_page_cache_locked+0x40/0x40 [ 354.078756][ T27] ? down_read+0x1b3/0x2e0 [ 354.096757][ T27] page_cache_ra_unbounded+0x7b0/0x930 [ 354.102278][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 354.123429][ T27] force_page_cache_ra+0x378/0x3e0 [ 354.128601][ T27] generic_fadvise+0x5ba/0x8b0 [ 354.143163][ T27] ? dump_task+0x5f0/0x5f0 [ 354.147632][ T27] ? __fdget+0x191/0x220 [ 354.151886][ T27] __x64_sys_fadvise64+0x138/0x180 [ 354.172571][ T27] do_syscall_64+0x3b/0xb0 [ 354.181775][ T27] ? clear_bhb_loop+0x15/0x70 [ 354.193277][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 354.199217][ T27] RIP: 0033:0x7fda4bffcff9 [ 354.217674][ T27] RSP: 002b:00007fda4a454038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 354.240669][ T27] RAX: ffffffffffffffda RBX: 00007fda4c1b5058 RCX: 00007fda4bffcff9 [ 354.253318][ T27] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 354.273371][ T27] RBP: 00007fda4c06f296 R08: 0000000000000000 R09: 0000000000000000 [ 354.281376][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 354.307400][ T27] R13: 0000000000000001 R14: 00007fda4c1b5058 R15: 00007ffc0913dee8 [ 354.323229][ T27] [ 354.333747][ T27] [ 354.333747][ T27] Showing all locks held in the system: [ 354.341483][ T27] 3 locks held by kworker/u4:0/9: [ 354.360064][ T27] #0: ffff888017079138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 354.384864][ T27] #1: ffffc90000ce7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 354.410718][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 354.433200][ T27] 2 locks held by kworker/0:1/13: [ 354.438257][ T27] 1 lock held by khungtaskd/27: [ 354.453869][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 354.473192][ T27] 2 locks held by kworker/u4:4/458: [ 354.478471][ T27] 2 locks held by getty/3344: [ 354.493147][ T27] #0: ffff88802a114098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 354.519085][ T27] #1: ffffc9000208e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 354.543432][ T27] 3 locks held by kworker/1:4/3608: [ 354.548666][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 354.573415][ T27] #1: ffffc90003017d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 354.598843][ T27] #2: ffff8880236cd240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 354.623199][ T27] 3 locks held by kworker/1:5/3609: [ 354.628433][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 354.653274][ T27] #1: ffffc90003027d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 354.680239][ T27] #2: ffff888077ec7240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 354.703573][ T27] 3 locks held by kworker/0:5/3611: [ 354.708800][ T27] #0: ffff88802924c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 354.733019][ T27] #1: ffffc90003047d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 354.758900][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 354.778520][ T27] 5 locks held by kworker/u4:5/3624: [ 354.784639][ T27] #0: ffff8880171d5938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 354.809057][ T27] #1: ffffc900030e7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 354.834010][ T27] #2: ffffffff8da261d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 354.853249][ T27] #3: ffff88806536d3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x10c/0x2f0 [ 354.872025][ T27] #4: ffffffff8c924130 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 354.896982][ T27] 3 locks held by syz.1.206/4674: [ 354.902041][ T27] 3 locks held by kworker/1:8/5068: [ 354.922582][ T27] #0: ffff88802924c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 354.943837][ T27] #1: ffffc90003287d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 354.971274][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 354.993407][ T27] 3 locks held by kworker/1:10/5074: [ 354.998731][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 355.030144][ T27] #1: ffffc900032c7d20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 355.053780][ T27] #2: ffff88806129c400 (&nsim_dev->port_list_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x56/0xab0 [ 355.076839][ T27] 1 lock held by syz.4.321/5249: [ 355.092568][ T27] #0: ffff888044cf4180 (&type->i_mutex_dir_key#22){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 [ 355.113374][ T27] 1 lock held by syz.4.321/5253: [ 355.118340][ T27] #0: ffff888044cf4320 (mapping.invalidate_lock#5){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 355.147158][ T27] 1 lock held by syz-executor/5697: [ 355.152389][ T27] #0: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 355.174199][ T27] 1 lock held by syz-executor/5840: [ 355.193249][ T27] #0: ffffffff8c924130 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 355.213204][ T27] 7 locks held by syz-executor/6022: [ 355.218518][ T27] #0: ffff88802a2e2460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 355.241546][ T27] #1: ffff8880291b9088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 355.263292][ T27] #2: ffff8880236a8a00 (kn->active#232){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 355.275618][ T3610] Bluetooth: hci3: command 0x041b tx timeout [ 355.293372][ T27] #3: ffffffff8d373888 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf1/0x470 [ 355.313694][ T27] #4: ffff88806129b178 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xc2/0x7f0 [ 355.343188][ T27] #5: ffff88806129c400 (&nsim_dev->port_list_lock){+.+.}-{3:3}, at: nsim_dev_reload_destroy+0x118/0x240 [ 355.363192][ T27] #6: ffffffff8c924130 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 355.382966][ T27] 1 lock held by syz-executor/6083: [ 355.403279][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 355.433306][ T27] [ 355.435661][ T27] ============================================= [ 355.435661][ T27] [ 355.453174][ T27] NMI backtrace for cpu 1 [ 355.457537][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 355.465516][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.475572][ T27] Call Trace: [ 355.478852][ T27] [ 355.481779][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 355.486461][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 355.492097][ T27] ? panic+0x860/0x860 [ 355.496184][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 355.501308][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 355.506248][ T27] ? __wake_up_klogd+0xd5/0x100 [ 355.511110][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 355.517268][ T27] ? _printk+0xd1/0x120 [ 355.521439][ T27] ? panic+0x860/0x860 [ 355.525512][ T27] ? __wake_up_klogd+0xcc/0x100 [ 355.530363][ T27] ? panic+0x860/0x860 [ 355.534441][ T27] ? __rcu_read_unlock+0x92/0x100 [ 355.539472][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 355.545541][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 355.551529][ T27] watchdog+0xe72/0xeb0 [ 355.555696][ T27] kthread+0x3f6/0x4f0 [ 355.559762][ T27] ? hungtask_pm_notify+0x50/0x50 [ 355.564787][ T27] ? kthread_blkcg+0xd0/0xd0 [ 355.569381][ T27] ret_from_fork+0x1f/0x30 [ 355.573810][ T27] [ 355.578056][ T27] Sending NMI from CPU 1 to CPUs 0: [ 355.583835][ C0] NMI backtrace for cpu 0 [ 355.583847][ C0] CPU: 0 PID: 4674 Comm: syz.1.206 Not tainted 5.15.167-syzkaller #0 [ 355.583862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.583870][ C0] RIP: 0010:mem_cgroup_css_rstat_flush+0x3ab/0x7a0 [ 355.583892][ C0] Code: 4d 2b b4 1c d8 05 00 00 48 b8 00 00 00 00 00 fc ff df 80 7c 05 00 00 74 08 4c 89 ff e8 8e e4 fa ff 48 8b 44 24 08 4c 89 2c 18 <4d> 85 f6 0f 84 db fe ff ff 48 8b 04 24 48 8d bc 18 10 08 00 00 48 [ 355.583903][ C0] RSP: 0018:ffffc900035768d0 EFLAGS: 00000046 [ 355.583917][ C0] RAX: ffff8880b9041f00 RBX: 0000000000000140 RCX: dffffc0000000000 [ 355.583927][ C0] RDX: ffffc90010325000 RSI: 0000000000000000 RDI: ffff8880b9041bb8 [ 355.583937][ C0] RBP: 1ffff11017208408 R08: ffffffff8179dc70 R09: fffffbfff20e2419 [ 355.583948][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b9041928 [ 355.583958][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b9042040 [ 355.583967][ C0] FS: 00007f78bf99a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 355.583980][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.583990][ C0] CR2: 00000000200bd038 CR3: 000000006588d000 CR4: 00000000003506f0 [ 355.584003][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.584011][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.584020][ C0] Call Trace: [ 355.584024][ C0] [ 355.584029][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 355.584044][ C0] ? read_lock_is_recursive+0x10/0x10 [ 355.584060][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 355.584075][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 355.584096][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 355.584110][ C0] ? nmi_handle+0xf7/0x370 [ 355.584124][ C0] ? mem_cgroup_css_rstat_flush+0x3ab/0x7a0 [ 355.584139][ C0] ? default_do_nmi+0x62/0x150 [ 355.584154][ C0] ? exc_nmi+0xa8/0x100 [ 355.584167][ C0] ? end_repeat_nmi+0x16/0x31 [ 355.584182][ C0] ? cgroup_rstat_flush_locked+0x940/0xd20 [ 355.584201][ C0] ? mem_cgroup_css_rstat_flush+0x3ab/0x7a0 [ 355.584215][ C0] ? mem_cgroup_css_rstat_flush+0x3ab/0x7a0 [ 355.584231][ C0] ? mem_cgroup_css_rstat_flush+0x3ab/0x7a0 [ 355.584246][ C0] [ 355.584250][ C0] [ 355.584260][ C0] cgroup_rstat_flush_locked+0xa26/0xd20 [ 355.584282][ C0] cgroup_rstat_flush_irqsafe+0x24/0x40 [ 355.584298][ C0] __mem_cgroup_flush_stats+0x139/0x210 [ 355.584312][ C0] ? mem_cgroup_flush_stats+0x80/0x80 [ 355.584328][ C0] ? _raw_spin_unlock+0x24/0x40 [ 355.584342][ C0] ? vmpressure+0x1d7/0x2f0 [ 355.584358][ C0] shrink_node+0x415/0x26d0 [ 355.584394][ C0] do_try_to_free_pages+0x697/0x17b0 [ 355.584417][ C0] ? try_to_free_pages+0xfd0/0xfd0 [ 355.584430][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 355.584446][ C0] try_to_free_mem_cgroup_pages+0x44c/0xa60 [ 355.584459][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 355.584475][ C0] ? shrink_lruvec+0x2b90/0x2b90 [ 355.584491][ C0] ? psi_task_switch+0x810/0x810 [ 355.584508][ C0] ? cgroup_file_notify+0x10d/0x190 [ 355.584522][ C0] try_charge_memcg+0x4f4/0x1530 [ 355.584552][ C0] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 355.584574][ C0] ? rcu_lock_acquire+0x30/0x30 [ 355.584588][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 355.584602][ C0] charge_memcg+0x10b/0x340 [ 355.584616][ C0] ? __mem_cgroup_charge+0x80/0x80 [ 355.584635][ C0] __mem_cgroup_charge+0x23/0x80 [ 355.584648][ C0] __add_to_page_cache_locked+0xbdb/0x11a0 [ 355.584666][ C0] ? __rmqueue_pcplist+0x2030/0x2030 [ 355.584681][ C0] ? put_page+0x1e0/0x1e0 [ 355.584695][ C0] ? workingset_activation+0x750/0x750 [ 355.584709][ C0] ? alloc_pages+0x458/0x570 [ 355.584728][ C0] add_to_page_cache_lru+0x1b3/0x560 [ 355.584744][ C0] ? add_to_page_cache_locked+0x40/0x40 [ 355.584758][ C0] ? xas_load+0x128/0x140 [ 355.584773][ C0] pagecache_get_page+0xbe0/0x1010 [ 355.584790][ C0] ? page_cache_prev_miss+0x500/0x500 [ 355.584808][ C0] ? unlock_page+0x188/0x200 [ 355.584823][ C0] __getblk_gfp+0x22a/0xaf0 [ 355.584843][ C0] __bread_gfp+0x2a/0x390 [ 355.584858][ C0] bfs_find_entry+0x1c3/0x3f0 [ 355.584877][ C0] bfs_lookup+0x147/0x270 [ 355.584892][ C0] ? bfs_readdir+0x440/0x440 [ 355.584907][ C0] ? inode_permission+0xf7/0x450 [ 355.584921][ C0] ? bpf_lsm_inode_create+0x5/0x10 [ 355.584935][ C0] ? security_inode_create+0xb4/0x100 [ 355.584950][ C0] ? bfs_readdir+0x440/0x440 [ 355.584963][ C0] path_openat+0x111d/0x2f20 [ 355.584988][ C0] ? do_filp_open+0x460/0x460 [ 355.585011][ C0] do_filp_open+0x21c/0x460 [ 355.585027][ C0] ? vfs_tmpfile+0x2e0/0x2e0 [ 355.585050][ C0] ? _raw_spin_unlock+0x24/0x40 [ 355.585063][ C0] ? alloc_fd+0x598/0x630 [ 355.585081][ C0] do_sys_openat2+0x13b/0x4f0 [ 355.585097][ C0] ? do_sys_open+0x220/0x220 [ 355.585115][ C0] __x64_sys_open+0x221/0x270 [ 355.585129][ C0] ? do_sys_openat2+0x4f0/0x4f0 [ 355.585144][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 355.585159][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 355.585173][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 355.585190][ C0] do_syscall_64+0x3b/0xb0 [ 355.585201][ C0] ? clear_bhb_loop+0x15/0x70 [ 355.585213][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.585228][ C0] RIP: 0033:0x7f78c1563ff9 [ 355.585241][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.585252][ C0] RSP: 002b:00007f78bf99a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 355.585266][ C0] RAX: ffffffffffffffda RBX: 00007f78c171c130 RCX: 00007f78c1563ff9 [ 355.585276][ C0] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000000020000180 [ 355.585284][ C0] RBP: 00007f78c15d6296 R08: 0000000000000000 R09: 0000000000000000 [ 355.585293][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.585302][ C0] R13: 0000000000000000 R14: 00007f78c171c130 R15: 00007ffe22663838 [ 355.585318][ C0] [ 355.635351][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 356.184037][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 356.192015][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.202070][ T27] Call Trace: [ 356.205347][ T27] [ 356.208281][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 356.212962][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 356.218594][ T27] ? panic+0x860/0x860 [ 356.222671][ T27] panic+0x318/0x860 [ 356.226558][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 356.232187][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 356.238347][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 356.243552][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 356.249620][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 356.255769][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 356.261928][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 356.268081][ T27] watchdog+0xeb0/0xeb0 [ 356.272244][ T27] kthread+0x3f6/0x4f0 [ 356.276314][ T27] ? hungtask_pm_notify+0x50/0x50 [ 356.281338][ T27] ? kthread_blkcg+0xd0/0xd0 [ 356.285928][ T27] ret_from_fork+0x1f/0x30 [ 356.290355][ T27] [ 356.293574][ T27] Kernel Offset: disabled [ 356.297895][ T27] Rebooting in 86400 seconds..