last executing test programs: 1m31.018092852s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 1m12.25691617s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 56.111802552s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 41.518427485s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 26.681130604s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 10.748505094s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 8.464122078s ago: executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.314915891s ago: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000480)={0x1000, 0x108000}) close(r0) 8.125327121s ago: executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x0, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000400)=""/190, 0xbe) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 6.980876328s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x9) 6.83791549s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) mlockall(0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mlockall(0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3a}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x2}}, 0xe8) 6.477667156s ago: executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x10001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000400)='./bus\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) syz_open_dev$ttys(0xc, 0x2, 0x1) 5.395022694s ago: executing program 3: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000100)=')\x00', 0xc0, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7fffffffffffffff}) memfd_create(&(0x7f00000002c0)='\b\x9d\x1a\xdeUL\x10\xceR>H\x02', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x5450, 0x0) close(0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x5451) ioctl$AUTOFS_IOC_FAIL(r0, 0x5451, 0x0) 5.371079028s ago: executing program 4: r0 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = io_uring_setup(0x177b, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5.218111621s ago: executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) close(0x4) 5.10193654s ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) r2 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r3) socket$inet6_icmp(0xa, 0x2, 0x3a) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 5.094200681s ago: executing program 4: mlockall(0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 2.564637093s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.51850435s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.393500509s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000014000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.373094012s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x860, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioperm(0x0, 0x7, 0x7) bpf$BPF_LINK_CREATE(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit={@prog_id}}, 0x40) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x1000882, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYBLOB="1cbb2cdd171d492deb19cb4b50f57fe03514acd1d4c838e2c6f896f71319f9927bb900ea7fd140c59552b18fd7fa112f3255fd02c04423cea65c50f3f1131a9644733abcb0218bbfab259417ec021df71f9bd9568e390396358819c94ed2351551a96eeff9b964e5f961027ae3a3a71b49c7364d5ebe1d6525c6437993d4082972d57be58928184da45cbf987f0a13f648dc9a6621c8392b2f1fedc71c85812425a68ba4edb0552df5b8e74af9249846923776c821deddd2f02d473b436ba514df04522dddad1cb5e75766d125d5eafcc652fbd3deaac0bf7eaf7ed8a586d36bffdb2f61bced8a3fd75f66c8eca0de326c41a8993c3ef39131"], 0x10, 0xc34, &(0x7f0000001080)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x7fff, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x27fffff, 0x10, r4, 0x0) ftruncate(r3, 0x1f) write$FUSE_ATTR(r2, &(0x7f0000000600)={0x78}, 0x78) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) creat(&(0x7f0000000240)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000240)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc2d, &(0x7f0000001900)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000000)='./file0\x00', r6, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x15) 2.300037973s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x10}, 0x48) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140), 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_type(r3, 0x0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000359, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0x30}}, 0x0) socket(0x1, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2.289885485s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="f3a3709219cd856bc1fa4747aeca5d52e1f550b5610171a2f73fdd9a3430f221b94aff72ebed0bc63121445fff75bc613d62f3dffd01c8d199cd252c41dee0e132cf46a1586c5a3dd8e498a668985408b8e3fc509396a24c54441e13b1a19dfdb666489ee9a256b812db943375c261a364776ae389621c7c1492989b733a020aebd0ccf1c8", 0x85}], 0x1, &(0x7f0000000680)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xbe}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xd8}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001b00)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x0, 0x59, "48258c93b3f5b3fe8fd8f38b78939a9f4daea357006c84bddade90eb7a0ab833fc17d9c858e89ef547da7d7825b72e00cfa05de379c7c381241c7f66bf97a1"}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=[@txtime={{0x18, 0x1, 0x3d, 0xf9}}], 0x18}}], 0x4, 0x40040d0) ppoll(&(0x7f0000000280)=[{r3, 0x9004}], 0x10, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) dup(r0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r5}, 0x10) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r4, 0x5501) 2.236649544s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.186748256s ago: executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001d00)='net/unix\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0xa, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002480)={'bridge0\x00'}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9) ioctl$TUNSETLINK(r4, 0x400454cd, 0x306) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000002400)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x3002080, 0x0) 1.156339521s ago: executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000480)={0x1000, 0x108000}) close(r0) 1.069399615s ago: executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) close(0x4) 399.476618ms ago: executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) futex(&(0x7f0000000300)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x2}) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) poll(0x0, 0x0, 0x66) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) capget(0x0, 0x0) 33.265035ms ago: executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000000007000000000000008000040000"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xffffffffffffff01, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="000826bd700063eb005d62f7c2aaddc7bb3b93a7c04d06801bb8c9cdcf6248aa837a7b1b914500"/53], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80100", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0), 0x4) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) capset(0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x800, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) sendto$packet(r5, &(0x7f0000000040)="bb53a945842851722bb479853e60", 0xe, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000)=0x10001, 0x4) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2022) write$UHID_CREATE2(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000020000000000000000000000000000000003f6561544bb8f0bb8f3e0d32bd4a3e9bba"], 0x12a) 0s ago: executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x10001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r5}, 0x38) syz_open_dev$ttys(0xc, 0x2, 0x1) kernel console output (not intermixed with test programs): d=0 ses=4294967295 subj=unconfined pid=8319 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 479.433161][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.442253][ T26] audit: type=1326 audit(1718749178.825:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 479.478162][ T4066] device veth1_macvtap left promiscuous mode [ 479.494610][ T4066] device veth0_macvtap left promiscuous mode [ 479.500782][ T4066] device veth1_vlan left promiscuous mode [ 479.531484][ T4066] device veth0_vlan left promiscuous mode [ 479.538181][ T26] audit: type=1326 audit(1718749178.825:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 481.052762][ T4066] team0 (unregistering): Port device team_slave_1 removed [ 481.101997][ T4066] team0 (unregistering): Port device team_slave_0 removed [ 481.183232][ T4066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.237887][ T4066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.550453][ T4066] bond0 (unregistering): Released all slaves [ 481.659343][ T8336] loop4: detected capacity change from 0 to 40427 [ 481.681224][ T8336] F2FS-fs (loop4): Found nat_bits in checkpoint [ 481.849549][ T8336] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 481.869136][ T26] audit: type=1326 audit(1718749182.685:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 482.072796][ T7910] syz-executor.4: attempt to access beyond end of device [ 482.072796][ T7910] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 484.635522][ T8383] loop2: detected capacity change from 0 to 1024 [ 484.687278][ T3588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.701012][ T3588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.709358][ T3588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.718776][ T3588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.734651][ T3588] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.742191][ T3588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.969674][ T8369] loop0: detected capacity change from 0 to 32768 [ 485.035638][ T8369] XFS (loop0): Mounting V5 Filesystem [ 485.218309][ T8369] XFS (loop0): Ending clean mount [ 485.246735][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 485.271047][ T8369] XFS (loop0): Quotacheck needed: Please wait. [ 485.394353][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 485.394371][ T26] audit: type=1326 audit(1718749186.215:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 485.410653][ T8369] XFS (loop0): Quotacheck: Done. [ 485.423841][ T26] audit: type=1326 audit(1718749186.215:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 485.506133][ T26] audit: type=1326 audit(1718749186.285:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 485.551173][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.564185][ T26] audit: type=1326 audit(1718749186.285:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 485.603778][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.624428][ T8384] device bridge_slave_0 entered promiscuous mode [ 485.652693][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.675394][ T26] audit: type=1326 audit(1718749186.285:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 485.713162][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.742508][ T8384] device bridge_slave_1 entered promiscuous mode [ 485.790639][ T26] audit: type=1326 audit(1718749186.285:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 485.899696][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.920529][ T26] audit: type=1326 audit(1718749186.285:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 486.002896][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.015914][ T6601] XFS (loop0): Unmounting Filesystem [ 486.092577][ T26] audit: type=1326 audit(1718749186.285:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 486.254505][ T26] audit: type=1326 audit(1718749186.285:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 486.302231][ T8384] team0: Port device team_slave_0 added [ 486.354212][ T26] audit: type=1326 audit(1718749186.285:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175747cf29 code=0x7ffc0000 [ 486.389813][ T8384] team0: Port device team_slave_1 added [ 486.546520][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.564480][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.694145][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.704587][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 486.741570][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.763982][ T47] Bluetooth: hci1: command tx timeout [ 486.780865][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.814052][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.938931][ T8384] device hsr_slave_0 entered promiscuous mode [ 486.982672][ T8384] device hsr_slave_1 entered promiscuous mode [ 487.008238][ T8384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.023051][ T8384] Cannot create hsr debugfs directory [ 487.462135][ T8384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.633362][ T8384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.798988][ T8384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.938313][ T8384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.278002][ T8384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.320621][ T8384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.361891][ T8384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.424076][ T8384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.770989][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.852955][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.860596][ T47] Bluetooth: hci1: command tx timeout [ 488.875432][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.907707][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.959647][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.988952][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.019285][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.026506][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.124734][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 489.142469][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 489.194147][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.202749][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.209923][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.282953][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 489.322222][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 489.445582][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 489.495275][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 489.534998][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 489.572174][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 489.611630][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 489.658957][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 489.691467][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 489.721593][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.766114][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.794112][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.511008][ T8453] trusted_key: encrypted_key: insufficient parameters specified [ 490.525460][ T6894] hid-generic 0000:0020:0000.0031: unknown main item tag 0x0 [ 490.539778][ T6894] hid-generic 0000:0020:0000.0031: item fetching failed at offset 7/18 [ 490.558447][ T6894] hid-generic: probe of 0000:0020:0000.0031 failed with error -22 [ 490.714978][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.750190][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.790061][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.917909][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.926411][ T47] Bluetooth: hci1: command tx timeout [ 490.949072][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.041858][ T8384] device veth0_vlan entered promiscuous mode [ 491.074777][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.083362][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.188305][ T8384] device veth1_vlan entered promiscuous mode [ 491.225580][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.254211][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.262179][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 491.442229][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 491.459008][ T8384] device veth0_macvtap entered promiscuous mode [ 491.525681][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 491.547670][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.601455][ T8384] device veth1_macvtap entered promiscuous mode [ 491.628389][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 491.646681][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.742202][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.778336][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.829688][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.883140][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.920995][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.971160][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.003654][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.065932][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.103788][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.131413][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.232501][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.261494][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 492.298517][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.347090][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.392784][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.424392][ T8465] input: syz1 as /devices/virtual/input/input36 [ 492.429854][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.480549][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.522987][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.580515][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.633769][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.670040][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.713775][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.750163][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.795690][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.922875][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.950085][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.965176][ T8477] loop2: detected capacity change from 0 to 1024 [ 492.994265][ T8384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.003020][ T8384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.013833][ T47] Bluetooth: hci1: command tx timeout [ 493.080327][ T8384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.123588][ T8384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.212125][ T4066] device hsr_slave_0 left promiscuous mode [ 493.226916][ T4066] device hsr_slave_1 left promiscuous mode [ 493.258595][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.274189][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.299639][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.317702][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.352816][ T4066] device bridge_slave_1 left promiscuous mode [ 493.364069][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.382933][ T4066] device bridge_slave_0 left promiscuous mode [ 493.422004][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.475113][ T4066] device veth1_macvtap left promiscuous mode [ 493.494296][ T4066] device veth0_macvtap left promiscuous mode [ 493.520686][ T4066] device veth1_vlan left promiscuous mode [ 493.539260][ T4066] device veth0_vlan left promiscuous mode [ 494.214577][ T4066] team0 (unregistering): Port device team_slave_1 removed [ 494.260094][ T4066] team0 (unregistering): Port device team_slave_0 removed [ 494.288198][ T4066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.351227][ T4066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.538533][ T4066] bond0 (unregistering): Released all slaves [ 494.861951][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.883760][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.954755][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.007367][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.029894][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.077663][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 497.570383][ T8497] trusted_key: encrypted_key: insufficient parameters specified [ 497.591217][ T3622] hid-generic 0000:0020:0000.0032: unknown main item tag 0x0 [ 497.612633][ T3622] hid-generic 0000:0020:0000.0032: item fetching failed at offset 7/18 [ 497.644117][ T3622] hid-generic: probe of 0000:0020:0000.0032 failed with error -22 [ 498.617224][ T8503] loop3: detected capacity change from 0 to 32768 [ 498.726760][ T8503] XFS (loop3): Mounting V5 Filesystem [ 498.763760][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.774498][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.782876][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.792719][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.803669][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 498.810986][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.910426][ T8503] XFS (loop3): Ending clean mount [ 498.921374][ T8503] XFS (loop3): Quotacheck needed: Please wait. [ 499.053879][ T8503] XFS (loop3): Quotacheck: Done. [ 499.280206][ T3579] XFS (loop3): Unmounting Filesystem [ 499.562448][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 499.901509][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.925418][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.970989][ T8512] device bridge_slave_0 entered promiscuous mode [ 500.001986][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.032118][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.065023][ T8512] device bridge_slave_1 entered promiscuous mode [ 500.096575][ T8542] loop2: detected capacity change from 0 to 1024 [ 500.649036][ T4066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.850434][ T47] Bluetooth: hci1: command tx timeout [ 500.882246][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.916705][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.007858][ T4066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.128313][ T4066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.172651][ T8512] team0: Port device team_slave_0 added [ 501.202051][ T8512] team0: Port device team_slave_1 added [ 501.240176][ T4066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.325303][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.331652][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.372928][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.390333][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.481091][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.512223][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.537906][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.636309][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.738756][ T8512] device hsr_slave_0 entered promiscuous mode [ 501.754436][ T8512] device hsr_slave_1 entered promiscuous mode [ 501.761459][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.786721][ T8512] Cannot create hsr debugfs directory [ 501.835360][ T8574] binder: 8573:8574 ioctl 4018620d 0 returned -22 [ 502.151304][ T8576] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 502.923766][ T47] Bluetooth: hci1: command tx timeout [ 503.178824][ T8596] loop4: detected capacity change from 0 to 512 [ 503.193053][ T8596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 503.211301][ T8596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz-executor.4: invalid indirect mapped block 83886080 (level 1) [ 503.234856][ T8596] EXT4-fs (loop4): Remounting filesystem read-only [ 503.243191][ T8596] EXT4-fs (loop4): 1 orphan inode deleted [ 503.271209][ T8596] EXT4-fs (loop4): 1 truncate cleaned up [ 503.282761][ T8596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 503.370541][ T8512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.411438][ T8512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 503.429952][ T8512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 503.443198][ T8512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 503.454399][ T8606] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 503.487630][ T8606] EXT4-fs (loop4): Remounting filesystem read-only [ 503.572190][ T8608] binder: 8607:8608 ioctl 4018620d 0 returned -22 [ 503.813286][ T4066] device hsr_slave_0 left promiscuous mode [ 503.823722][ T4066] device hsr_slave_1 left promiscuous mode [ 503.830918][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.841065][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.871973][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.902065][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.937344][ T4066] device bridge_slave_1 left promiscuous mode [ 503.961000][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.020711][ T4066] device bridge_slave_0 left promiscuous mode [ 504.045107][ T7910] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 504.075143][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.131061][ T4066] device veth1_macvtap left promiscuous mode [ 504.145181][ T4066] device veth0_macvtap left promiscuous mode [ 504.151343][ T4066] device veth1_vlan left promiscuous mode [ 504.192028][ T7910] EXT4-fs (loop4): unmounting filesystem. [ 504.205862][ T4066] device veth0_vlan left promiscuous mode [ 504.608752][ T4066] team0 (unregistering): Port device team_slave_1 removed [ 504.631950][ T4066] team0 (unregistering): Port device team_slave_0 removed [ 504.658166][ T4066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.678997][ T4066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.831673][ T4066] bond0 (unregistering): Released all slaves [ 505.033609][ T3591] Bluetooth: hci1: command tx timeout [ 505.095866][ T8616] loop0: detected capacity change from 0 to 1024 [ 506.339478][ T8609] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 507.080490][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.087759][ T3591] Bluetooth: hci1: command tx timeout [ 507.160793][ T8629] loop0: detected capacity change from 0 to 256 [ 507.174243][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.181585][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 507.195292][ T8629] FAT-fs (loop0): Unrecognized mount option "ÿÿ" or missing value [ 507.204497][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 507.221976][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 507.244063][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 507.293226][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.300438][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.387670][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 507.434052][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 507.482673][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.519240][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.526479][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.592942][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 507.604792][ T8642] loop2: detected capacity change from 0 to 1024 [ 507.618662][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.673847][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.693860][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.712873][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.734279][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.769913][ T8512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.820995][ T8512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.856426][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.874818][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.903855][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.934498][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.954658][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 508.015837][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 508.252619][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.267762][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.276361][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.292633][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.302713][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 508.310081][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.554895][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 508.649596][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.658422][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.784357][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.882250][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.910677][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.959566][ T8655] device bridge_slave_0 entered promiscuous mode [ 508.998241][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 509.018667][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.098667][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.106279][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.144885][ T8655] device bridge_slave_1 entered promiscuous mode [ 509.153475][ T8671] binder: 8670:8671 ioctl 4018620d 0 returned -22 [ 509.181163][ T8512] device veth0_vlan entered promiscuous mode [ 509.205349][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.224694][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.329635][ T8512] device veth1_vlan entered promiscuous mode [ 509.354656][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.370622][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.399427][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.421654][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.456958][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.496966][ T8673] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 510.210035][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 510.288284][ T8655] team0: Port device team_slave_0 added [ 510.307707][ T8512] device veth0_macvtap entered promiscuous mode [ 510.356262][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 510.372743][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.373862][ T3591] Bluetooth: hci0: command tx timeout [ 510.415009][ T8655] team0: Port device team_slave_1 added [ 510.432343][ T8512] device veth1_macvtap entered promiscuous mode [ 510.482217][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.494081][ T8675] netlink: 2300 bytes leftover after parsing attributes in process `syz-executor.0'. [ 510.514554][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.643591][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.671114][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.824066][ T8655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.881432][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.931960][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.008714][ T8655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.055064][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.083720][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.109345][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.138457][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.160591][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.187076][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.213792][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.252675][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.308812][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.345312][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 511.371655][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 511.426134][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.450861][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.472098][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.498263][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.521509][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.549349][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.578414][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.599841][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.613291][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.640315][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 511.656721][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 511.673418][ T8512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.689448][ T8512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.704467][ T8512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.713267][ T8512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.735441][ T8655] device hsr_slave_0 entered promiscuous mode [ 511.764053][ T8655] device hsr_slave_1 entered promiscuous mode [ 511.803804][ T8655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.811593][ T8655] Cannot create hsr debugfs directory [ 512.054774][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.062978][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.141343][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 512.175501][ T3829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.193912][ T3829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.255438][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 512.454057][ T3591] Bluetooth: hci0: command tx timeout [ 512.490404][ T8655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.597254][ T8655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.704060][ T8655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.789907][ T8655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.245031][ T8655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.288884][ T8655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.357596][ T8655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.388046][ T8655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.772779][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.844134][ T4066] device hsr_slave_0 left promiscuous mode [ 513.872293][ T4066] device hsr_slave_1 left promiscuous mode [ 513.897509][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.935691][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.968165][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.018285][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.057304][ T4066] device bridge_slave_1 left promiscuous mode [ 514.077542][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.127668][ T4066] device bridge_slave_0 left promiscuous mode [ 514.141486][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.186236][ T4066] device veth1_macvtap left promiscuous mode [ 514.210433][ T4066] device veth0_macvtap left promiscuous mode [ 514.223605][ T3622] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 514.233765][ T4066] device veth1_vlan left promiscuous mode [ 514.249824][ T4066] device veth0_vlan left promiscuous mode [ 514.292808][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.302855][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.321380][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.329575][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.337716][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 514.345427][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.523702][ T47] Bluetooth: hci0: command tx timeout [ 514.595795][ T3622] usb 3-1: config 0 has an invalid interface number: 206 but max is 0 [ 514.612301][ T3622] usb 3-1: config 0 has no interface number 0 [ 514.623787][ T3622] usb 3-1: config 0 interface 206 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 514.663673][ T3622] usb 3-1: config 0 interface 206 has no altsetting 0 [ 514.673637][ T3622] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 514.692932][ T3622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.742501][ T3622] usb 3-1: config 0 descriptor?? [ 515.159674][ T8706] binder: 8705:8706 ioctl 4018620d 0 returned -22 [ 515.204367][ T4066] team0 (unregistering): Port device team_slave_1 removed [ 515.228896][ T4066] team0 (unregistering): Port device team_slave_0 removed [ 515.253411][ T4066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.277531][ T4066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.446300][ T4066] bond0 (unregistering): Released all slaves [ 515.475364][ T8708] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 515.584120][ T3622] usb 3-1: string descriptor 0 read error: -71 [ 516.219297][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 516.239782][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.282143][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.289076][ T3622] usb 3-1: Cannot read MAC address [ 516.294678][ T3622] MOSCHIP usb-ethernet driver: probe of 3-1:0.206 failed with error -71 [ 516.322670][ T3622] usb 3-1: USB disconnect, device number 9 [ 516.365566][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 516.381157][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.409891][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.417080][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.443751][ T47] Bluetooth: hci1: command tx timeout [ 516.484121][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 516.492289][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 516.544457][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.559413][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.566625][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.580475][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 516.603954][ T3591] Bluetooth: hci0: command tx timeout [ 516.656072][ T8720] loop0: detected capacity change from 0 to 1024 [ 516.669174][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 516.680117][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 516.696269][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 516.705480][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 516.717989][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 516.727450][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 516.738334][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.764136][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 516.845443][ T8655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.864609][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 516.882173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 516.891471][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.935460][ T8728] loop0: detected capacity change from 0 to 1024 [ 517.956017][ T8703] chnl_net:caif_netlink_parms(): no params data found [ 518.281352][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.302119][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.335219][ T8703] device bridge_slave_0 entered promiscuous mode [ 518.389930][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.403754][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.411358][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.442049][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.474168][ T8703] device bridge_slave_1 entered promiscuous mode [ 518.499338][ T8655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.524486][ T47] Bluetooth: hci1: command tx timeout [ 518.605197][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.671949][ T8745] loop3: detected capacity change from 0 to 1024 [ 518.702679][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.784586][ T8745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 518.820562][ T8703] team0: Port device team_slave_0 added [ 518.847210][ T8703] team0: Port device team_slave_1 added [ 518.944832][ T8745] EXT4-fs warning (device loop3): empty_inline_dir:1847: bad inline directory (dir #12) - no `..' [ 518.999323][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.015078][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.104521][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.138166][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.147789][ T3579] EXT4-fs (loop3): unmounting filesystem. [ 519.180449][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.293983][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.468873][ T8703] device hsr_slave_0 entered promiscuous mode [ 519.485180][ T8703] device hsr_slave_1 entered promiscuous mode [ 519.513801][ T8703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.521431][ T8703] Cannot create hsr debugfs directory [ 519.644464][ T8763] binder: 8762:8763 ioctl 4018620d 0 returned -22 [ 519.835371][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.884911][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.932099][ T8655] device veth0_vlan entered promiscuous mode [ 519.967859][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.006142][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.052527][ T8655] device veth1_vlan entered promiscuous mode [ 520.125023][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.133074][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.222987][ T8655] device veth0_macvtap entered promiscuous mode [ 520.273355][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.295798][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.355420][ T8655] device veth1_macvtap entered promiscuous mode [ 520.375160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 520.383461][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 520.462215][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.523568][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.533426][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.602148][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.650360][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.679528][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.733614][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.774580][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.832609][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.867577][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 520.892758][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.940001][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.982200][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.012844][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.061742][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.110680][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.148445][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.192040][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.219423][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.266117][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.306814][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 521.327483][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.366194][ T8655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.392838][ T8655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.430367][ T8655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.454412][ T8655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.612017][ T47] Bluetooth: hci1: command tx timeout [ 521.728583][ T8703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.866662][ T8703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.958883][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.997241][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.051686][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 522.102976][ T3705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.124008][ T3705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.134286][ T8767] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 522.241616][ T8703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.268005][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 522.412816][ T8703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.592608][ T8790] loop4: detected capacity change from 0 to 1024 [ 522.669363][ T8790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 522.749260][ T8790] EXT4-fs warning (device loop4): empty_inline_dir:1847: bad inline directory (dir #12) - no `..' [ 522.814543][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 522.814558][ T26] audit: type=1804 audit(1718749223.635:235): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4170238877/syzkaller.7BM0gN/311/bus" dev="sda1" ino=1961 res=1 errno=0 [ 522.835685][ T8703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.911011][ T8703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.930709][ T8655] EXT4-fs (loop4): unmounting filesystem. [ 522.990948][ T8703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 523.015065][ T8703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 523.108341][ T8800] loop4: detected capacity change from 0 to 1024 [ 523.190920][ T26] audit: type=1326 audit(1718749224.005:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x0 [ 523.202483][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.248034][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.256921][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.269187][ T8703] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.281311][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.293872][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.302957][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.310151][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.349256][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.357844][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.371457][ T8804] loop0: detected capacity change from 0 to 256 [ 523.379210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.389111][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.396277][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.407790][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 523.447566][ T8804] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 523.471631][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.484639][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 523.512707][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.538402][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.556799][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.591462][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.607694][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.620520][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.639535][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.643855][ T47] Bluetooth: hci1: command tx timeout [ 523.670558][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.696256][ T8798] loop2: detected capacity change from 0 to 32768 [ 523.717408][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.797688][ T8798] XFS (loop2): Mounting V5 Filesystem [ 523.926409][ T8798] XFS (loop2): Ending clean mount [ 523.952480][ T8798] XFS (loop2): Quotacheck needed: Please wait. [ 524.013385][ T4066] device hsr_slave_0 left promiscuous mode [ 524.035674][ T4066] device hsr_slave_1 left promiscuous mode [ 524.064569][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.089615][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.104065][ T8798] XFS (loop2): Quotacheck: Done. [ 524.149759][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.183409][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.207913][ T3580] XFS (loop2): Unmounting Filesystem [ 524.250174][ T4066] device bridge_slave_1 left promiscuous mode [ 524.267407][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.279597][ T4066] device bridge_slave_0 left promiscuous mode [ 524.288493][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.329205][ T4066] device veth1_macvtap left promiscuous mode [ 524.341534][ T4066] device veth0_macvtap left promiscuous mode [ 524.353998][ T4066] device veth1_vlan left promiscuous mode [ 524.369537][ T4066] device veth0_vlan left promiscuous mode [ 525.126176][ T4066] team0 (unregistering): Port device team_slave_1 removed [ 525.185803][ T4066] team0 (unregistering): Port device team_slave_0 removed [ 525.210207][ T4066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.243382][ T4066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.446459][ T4066] bond0 (unregistering): Released all slaves [ 525.677823][ T8843] loop2: detected capacity change from 0 to 512 [ 525.774518][ T8843] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 4 [ 525.806890][ T8843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 525.853808][ T8843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 3: invalid block bitmap [ 525.959681][ T3580] EXT4-fs (loop2): unmounting filesystem. [ 526.014069][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.057587][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.087087][ T8703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.724248][ T8862] input: syz1 as /devices/virtual/input/input37 [ 527.978263][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.004693][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.023439][ T8868] loop2: detected capacity change from 0 to 2048 [ 528.089671][ T8868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.116145][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.161758][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.181880][ T8703] device veth0_vlan entered promiscuous mode [ 528.200027][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 528.213227][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 528.247737][ T8703] device veth1_vlan entered promiscuous mode [ 528.348061][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 528.369432][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 528.404824][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.445845][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.493631][ T8703] device veth0_macvtap entered promiscuous mode [ 528.535982][ T8703] device veth1_macvtap entered promiscuous mode [ 528.624646][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.679571][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.709291][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.760724][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.793939][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.827001][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.886125][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.932437][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.954708][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.982753][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 528.997110][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 529.029443][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.065326][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.104810][ T8867] loop3: detected capacity change from 0 to 32768 [ 529.109048][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.183561][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.211418][ T8867] XFS (loop3): Mounting V5 Filesystem [ 529.219752][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.307777][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.409762][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.425031][ T8867] XFS (loop3): Ending clean mount [ 529.447409][ T8867] XFS (loop3): Quotacheck needed: Please wait. [ 529.460308][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.520510][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.566145][ T8867] XFS (loop3): Quotacheck: Done. [ 529.602001][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.656578][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.679166][ T8890] loop4: detected capacity change from 0 to 512 [ 529.694854][ T3579] XFS (loop3): Unmounting Filesystem [ 529.703678][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 529.713296][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.734753][ T8703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.748561][ T8703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.758122][ T8703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.767015][ T8703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.815054][ T8890] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 4 [ 529.878190][ T8890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 529.932170][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.975422][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.987696][ T8890] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 530.012281][ T6127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.022040][ T6127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.037733][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.052044][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.112428][ T8655] EXT4-fs (loop4): unmounting filesystem. [ 530.779944][ T8913] loop2: detected capacity change from 0 to 2048 [ 530.918055][ T8915] input: syz1 as /devices/virtual/input/input38 [ 531.638500][ T8913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.013172][ T8931] loop2: detected capacity change from 0 to 32768 [ 534.083398][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 534.100776][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 534.110985][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 534.124055][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 534.135556][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 534.138834][ T4066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.154920][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 534.189130][ T8931] XFS (loop2): Mounting V5 Filesystem [ 534.347670][ T8931] XFS (loop2): Ending clean mount [ 534.400265][ T4066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.415300][ T8931] XFS (loop2): Quotacheck needed: Please wait. [ 534.507506][ T8931] XFS (loop2): Quotacheck: Done. [ 534.559035][ T4066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.649632][ T3580] XFS (loop2): Unmounting Filesystem [ 534.682299][ T4066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.168833][ T8970] input: syz1 as /devices/virtual/input/input39 [ 536.037171][ T8950] chnl_net:caif_netlink_parms(): no params data found [ 536.089546][ T8979] loop4: detected capacity change from 0 to 2048 [ 536.131484][ T8979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.203678][ T3591] Bluetooth: hci1: command tx timeout [ 536.391407][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.411230][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.442401][ T8950] device bridge_slave_0 entered promiscuous mode [ 536.475211][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.482445][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.507703][ T8950] device bridge_slave_1 entered promiscuous mode [ 536.606278][ T8950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.621817][ T8950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.764869][ T8950] team0: Port device team_slave_0 added [ 536.794323][ T8950] team0: Port device team_slave_1 added [ 536.902989][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.926777][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.004566][ T8950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.053200][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.070573][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.153550][ T8950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.188082][ T9000] loop0: detected capacity change from 0 to 32768 [ 537.274934][ T8950] device hsr_slave_0 entered promiscuous mode [ 537.302613][ T8950] device hsr_slave_1 entered promiscuous mode [ 537.323055][ T8950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.341239][ T8950] Cannot create hsr debugfs directory [ 538.139498][ T9000] XFS (loop0): Mounting V5 Filesystem [ 538.778250][ T9020] input: syz1 as /devices/virtual/input/input40 [ 538.789181][ T3591] Bluetooth: hci1: command tx timeout [ 539.162369][ T9000] XFS (loop0): Ending clean mount [ 539.180239][ T9000] XFS (loop0): Quotacheck needed: Please wait. [ 539.225845][ T9000] XFS (loop0): Quotacheck: Done. [ 539.280290][ T6601] XFS (loop0): Unmounting Filesystem [ 539.447032][ T9029] loop4: detected capacity change from 0 to 1024 [ 539.478061][ T9031] loop3: detected capacity change from 0 to 1024 [ 539.779617][ T4418] hfsplus: b-tree write err: -5, ino 4 [ 540.037477][ T4066] device hsr_slave_0 left promiscuous mode [ 540.048468][ T4066] device hsr_slave_1 left promiscuous mode [ 540.069220][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.112727][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.142766][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.167647][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.196856][ T4066] device bridge_slave_1 left promiscuous mode [ 540.227208][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.263063][ T4066] device bridge_slave_0 left promiscuous mode [ 540.278102][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.299877][ T4066] device veth1_macvtap left promiscuous mode [ 540.310514][ T4066] device veth0_macvtap left promiscuous mode [ 540.319529][ T4066] device veth1_vlan left promiscuous mode [ 540.341031][ T4066] device veth0_vlan left promiscuous mode [ 540.381450][ T9] hfsplus: b-tree write err: -5, ino 4 [ 540.779392][ T4066] team0 (unregistering): Port device team_slave_1 removed [ 540.820938][ T4066] team0 (unregistering): Port device team_slave_0 removed [ 540.843799][ T3591] Bluetooth: hci1: command tx timeout [ 540.855266][ T4066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.883158][ T4066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.995039][ T4066] bond0 (unregistering): Released all slaves [ 541.249680][ T8950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 541.308914][ T8950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 541.336981][ T8950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 541.401059][ T8950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.479095][ T9068] netlink: 2300 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.745330][ T8950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.794433][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.816150][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.867585][ T8950] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.922482][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.934739][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.943381][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.950574][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.102309][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.111317][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.144553][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.192772][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.199984][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.251556][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.292394][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.330160][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.361742][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.429264][ T8950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 542.480683][ T8950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.536051][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.564681][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.597951][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.614398][ T9070] input: syz1 as /devices/virtual/input/input41 [ 542.651569][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.692133][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.719922][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.749042][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.110872][ T3591] Bluetooth: hci1: command tx timeout [ 543.113343][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.100883][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.133752][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.145455][ T8950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.247346][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 544.264727][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.301877][ T8950] device veth0_vlan entered promiscuous mode [ 544.397277][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 544.414656][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.455509][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.505758][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.581044][ T8950] device veth1_vlan entered promiscuous mode [ 544.715931][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 544.734741][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.758442][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.774656][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.796892][ T8950] device veth0_macvtap entered promiscuous mode [ 544.821586][ T8950] device veth1_macvtap entered promiscuous mode [ 544.927939][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.979687][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.005029][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.043888][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.079297][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.120722][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.164169][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.200397][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.225601][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.256201][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 545.274399][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 545.291330][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.320904][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.358254][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.386328][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.403849][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.437881][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.458763][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.480976][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.507415][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.539226][ T26] audit: type=1326 audit(1718749246.355:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 545.539858][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.602673][ T26] audit: type=1326 audit(1718749246.355:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 545.665395][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.691913][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.693568][ T26] audit: type=1326 audit(1718749246.385:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 545.707155][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.771942][ T26] audit: type=1326 audit(1718749246.385:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 545.804937][ T8950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.830567][ T8950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.861327][ T8950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.863560][ T26] audit: type=1326 audit(1718749246.385:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 545.889555][ T8950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.942397][ T26] audit: type=1326 audit(1718749246.395:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 546.090035][ T26] audit: type=1326 audit(1718749246.395:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2bc7cf29 code=0x7ffc0000 [ 546.163852][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.195483][ T26] audit: type=1326 audit(1718749246.395:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a2bc7a6a7 code=0x7ffc0000 [ 546.236009][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.268596][ T26] audit: type=1326 audit(1718749246.395:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a2bc40379 code=0x7ffc0000 [ 546.332930][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 546.361570][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.371183][ T26] audit: type=1326 audit(1718749246.395:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a2bc7a6a7 code=0x7ffc0000 [ 546.383301][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.435692][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 547.925983][ T4066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.064915][ T9194] loop2: detected capacity change from 0 to 1024 [ 548.099908][ T4066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.305449][ T4066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.422575][ T9206] loop4: detected capacity change from 0 to 256 [ 548.480681][ T4066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.495831][ T9206] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 548.639386][ T9219] tipc: Failed to remove unknown binding: 66,1,1/0:2136473610/2136473612 [ 548.692519][ T9223] tipc: Failed to remove unknown binding: 66,1,1/0:2136473610/2136473612 [ 548.830804][ T3591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 548.841609][ T3591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 548.850365][ T3591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 548.865394][ T3591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 548.874731][ T3591] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 548.882251][ T3591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.218433][ T9249] loop4: detected capacity change from 0 to 1024 [ 549.310665][ T9227] chnl_net:caif_netlink_parms(): no params data found [ 549.498036][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.555113][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.591034][ T9227] device bridge_slave_0 entered promiscuous mode [ 549.603351][ T9268] tipc: Failed to remove unknown binding: 66,1,1/0:1823372297/1823372299 [ 549.605417][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.620552][ T9268] tipc: Failed to remove unknown binding: 66,1,1/0:1823372297/1823372299 [ 549.640226][ T9227] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.688102][ T9227] device bridge_slave_1 entered promiscuous mode [ 549.842617][ T9227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.904749][ T4066] device hsr_slave_0 left promiscuous mode [ 549.924214][ T4066] device hsr_slave_1 left promiscuous mode [ 549.966772][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.993379][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.009789][ T9290] binder: 9289:9290 ioctl 4018620d 0 returned -22 [ 550.018899][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.081434][ T4066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.111456][ T4066] device bridge_slave_1 left promiscuous mode [ 550.122761][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.168879][ T4066] device bridge_slave_0 left promiscuous mode [ 550.199904][ T9298] loop0: detected capacity change from 0 to 1024 [ 550.213724][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.241361][ T9299] tipc: Failed to remove unknown binding: 66,1,1/0:255420920/255420922 [ 550.250667][ T9299] tipc: Failed to remove unknown binding: 66,1,1/0:255420920/255420922 [ 550.260485][ T4066] device veth1_macvtap left promiscuous mode [ 550.280015][ T4066] device veth0_macvtap left promiscuous mode [ 550.320535][ T4066] device veth1_vlan left promiscuous mode [ 550.333627][ T4066] device veth0_vlan left promiscuous mode [ 550.925420][ T3591] Bluetooth: hci1: command tx timeout [ 551.362621][ T4066] team0 (unregistering): Port device team_slave_1 removed [ 551.382609][ T4066] team0 (unregistering): Port device team_slave_0 removed [ 551.410659][ T4066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.432149][ T4066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.560122][ T4066] bond0 (unregistering): Released all slaves [ 552.118957][ T9227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.302338][ T9227] team0: Port device team_slave_0 added [ 552.354367][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 552.362751][ T9227] team0: Port device team_slave_1 added [ 552.492147][ T9227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.525236][ T9316] loop3: detected capacity change from 0 to 1024 [ 552.541871][ T9227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.634522][ T9316] hfsplus: part requires an argument [ 552.640797][ T9227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.653596][ T9316] hfsplus: unable to parse mount options [ 552.728839][ T9227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.763817][ T9227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.818548][ T9227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.916733][ T9227] device hsr_slave_0 entered promiscuous mode [ 552.925829][ T9227] device hsr_slave_1 entered promiscuous mode [ 552.932531][ T9227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.940302][ T9227] Cannot create hsr debugfs directory [ 553.004542][ T3591] Bluetooth: hci1: command tx timeout [ 553.449382][ T9342] loop0: detected capacity change from 0 to 1024 [ 553.485409][ T9346] binder: 9345:9346 ioctl 4018620d 0 returned -22 [ 554.361397][ T9334] loop4: detected capacity change from 0 to 40427 [ 554.432595][ T9334] F2FS-fs (loop4): Found nat_bits in checkpoint [ 554.641612][ T9334] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 554.696921][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 554.696936][ T26] audit: type=1800 audit(1718749255.515:283): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 554.830112][ T26] audit: type=1804 audit(1718749255.545:284): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3984483083/syzkaller.ltEDyp/45/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 554.879401][ T8655] syz-executor.4: attempt to access beyond end of device [ 554.879401][ T8655] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 554.959161][ T26] audit: type=1804 audit(1718749255.555:285): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3984483083/syzkaller.ltEDyp/45/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 555.085071][ T3591] Bluetooth: hci1: command tx timeout [ 555.533287][ T9227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.583256][ T9227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.609557][ T9227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.644032][ T9227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.898521][ T9227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.939981][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 555.957209][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 555.957400][ T9350] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 556.022292][ T9227] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.042937][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.100586][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.293153][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.300340][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.310281][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.319808][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.328469][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.335650][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.346868][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.380850][ T9372] loop2: detected capacity change from 0 to 1024 [ 556.412919][ T9372] hfsplus: part requires an argument [ 556.441180][ T9372] hfsplus: unable to parse mount options [ 556.457006][ T9227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.498018][ T9227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.563137][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 556.574460][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.604114][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.633895][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.642692][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 556.694634][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 556.724636][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 556.749427][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.764618][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 556.773449][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 556.788229][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 556.818060][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.163615][ T3591] Bluetooth: hci1: command tx timeout [ 557.195119][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.203325][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.242745][ T9227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.360014][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.380112][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.476330][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 557.495385][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 557.526957][ T9227] device veth0_vlan entered promiscuous mode [ 557.561383][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.579878][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.633454][ T9227] device veth1_vlan entered promiscuous mode [ 557.777556][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 557.798431][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 557.822624][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 557.852541][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 557.881907][ T9227] device veth0_macvtap entered promiscuous mode [ 557.922398][ T9227] device veth1_macvtap entered promiscuous mode [ 557.964881][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 557.973197][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 558.032281][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.080495][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.093646][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.177863][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.208971][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.251719][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.271852][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.316588][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.381401][ T9227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.423225][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 558.443145][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.473276][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.502485][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.533048][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.561324][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.584920][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.626427][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.662549][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.683427][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.722239][ T9227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.753154][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 558.766381][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 558.788530][ T9227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.822999][ T9227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.842093][ T9227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.864098][ T9227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.074107][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.097224][ T9401] loop4: detected capacity change from 0 to 32768 [ 559.124049][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.145980][ T9401] XFS: attr2 mount option is deprecated. [ 559.173673][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 559.185897][ T9401] XFS: noikeep mount option is deprecated. [ 559.195791][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.214860][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.234953][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 559.422348][ T9392] trusted_key: encrypted_key: insufficient parameters specified [ 559.434063][ T6894] hid-generic 0000:0020:0000.0033: unknown main item tag 0x0 [ 559.446091][ T9401] XFS (loop4): Mounting V5 Filesystem [ 559.455888][ T6894] hid-generic 0000:0020:0000.0033: item fetching failed at offset 7/18 [ 559.474196][ T9420] tipc: Failed to remove unknown binding: 66,1,1/0:4131496908/4131496910 [ 559.484511][ T6894] hid-generic: probe of 0000:0020:0000.0033 failed with error -22 [ 559.493020][ T9420] tipc: Failed to remove unknown binding: 66,1,1/0:4131496908/4131496910 [ 559.522612][ T9401] XFS (loop4): Ending clean mount [ 559.537767][ T9401] XFS (loop4): Quotacheck needed: Please wait. [ 559.609322][ T9401] XFS (loop4): Quotacheck: Done. [ 559.824033][ T8655] XFS (loop4): Unmounting Filesystem [ 560.056794][ T9434] loop0: detected capacity change from 0 to 1024 [ 560.070771][ T9434] hfsplus: part requires an argument [ 560.076429][ T9434] hfsplus: unable to parse mount options [ 561.235330][ T9455] trusted_key: encrypted_key: insufficient parameters specified [ 561.260806][ T4764] hid-generic 0000:0020:0000.0034: unknown main item tag 0x0 [ 561.284300][ T4764] hid-generic 0000:0020:0000.0034: item fetching failed at offset 7/18 [ 561.334591][ T4764] hid-generic: probe of 0000:0020:0000.0034 failed with error -22 [ 562.175333][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 562.466257][ T4418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.682263][ T26] audit: type=1326 audit(1718749263.495:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bb167cf29 code=0x0 [ 562.717830][ T9487] loop3: detected capacity change from 0 to 1024 [ 562.729690][ T9487] hfsplus: part requires an argument [ 562.737779][ T9487] hfsplus: unable to parse mount options [ 562.765913][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.772246][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.848787][ T9494] loop2: detected capacity change from 0 to 256 [ 562.888863][ T9494] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 563.038416][ T9498] trusted_key: encrypted_key: insufficient parameters specified [ 563.158934][ T4764] hid-generic 0000:0020:0000.0035: unknown main item tag 0x0 [ 563.221808][ T4764] hid-generic 0000:0020:0000.0035: item fetching failed at offset 7/18 [ 563.328862][ T4764] hid-generic: probe of 0000:0020:0000.0035 failed with error -22 [ 563.500054][ T4418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.913216][ T4418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.953459][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 563.965425][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 563.981714][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 563.991643][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.014755][ T3588] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 564.023365][ T3588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 564.119510][ T4418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.566968][ T9499] chnl_net:caif_netlink_parms(): no params data found [ 564.700473][ T9531] loop2: detected capacity change from 0 to 1024 [ 564.754885][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.762675][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.823570][ T9538] trusted_key: encrypted_key: insufficient parameters specified [ 564.852621][ T3327] hid-generic 0000:0020:0000.0036: unknown main item tag 0x0 [ 564.866682][ T9499] device bridge_slave_0 entered promiscuous mode [ 564.889568][ T3327] hid-generic 0000:0020:0000.0036: item fetching failed at offset 7/18 [ 564.959805][ T3327] hid-generic: probe of 0000:0020:0000.0036 failed with error -22 [ 565.048546][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.062484][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.171291][ T9499] device bridge_slave_1 entered promiscuous mode [ 565.636286][ T9499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.715530][ T9499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.852305][ T9499] team0: Port device team_slave_0 added [ 565.883404][ T9499] team0: Port device team_slave_1 added [ 566.054039][ T3591] Bluetooth: hci1: command tx timeout [ 566.121332][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.128833][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.166307][ T9499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.227525][ T4418] device hsr_slave_0 left promiscuous mode [ 566.234501][ T4418] device hsr_slave_1 left promiscuous mode [ 566.251775][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.259363][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.292481][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.300278][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.342470][ T4418] device bridge_slave_1 left promiscuous mode [ 566.362765][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.406145][ T4418] device bridge_slave_0 left promiscuous mode [ 566.412458][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.457961][ T4418] device veth1_macvtap left promiscuous mode [ 566.477334][ T4418] device veth0_macvtap left promiscuous mode [ 566.497485][ T4418] device veth1_vlan left promiscuous mode [ 566.512645][ T4418] device veth0_vlan left promiscuous mode [ 566.641137][ T9575] trusted_key: encrypted_key: insufficient parameters specified [ 566.674059][ T4765] hid-generic 0000:0020:0000.0037: unknown main item tag 0x0 [ 566.738707][ T4765] hid-generic 0000:0020:0000.0037: item fetching failed at offset 7/18 [ 566.847391][ T4765] hid-generic: probe of 0000:0020:0000.0037 failed with error -22 [ 567.808991][ T4418] team0 (unregistering): Port device team_slave_1 removed [ 567.856895][ T4418] team0 (unregistering): Port device team_slave_0 removed [ 567.933971][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.023964][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.054705][ T9604] loop4: detected capacity change from 0 to 1024 [ 568.123714][ T3591] Bluetooth: hci1: command tx timeout [ 568.380128][ T4418] bond0 (unregistering): Released all slaves [ 568.554304][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.566640][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.693563][ T9499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.018858][ T9499] device hsr_slave_0 entered promiscuous mode [ 569.084169][ T9499] device hsr_slave_1 entered promiscuous mode [ 569.113873][ T9499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.121506][ T9499] Cannot create hsr debugfs directory [ 569.489372][ T9637] loop2: detected capacity change from 0 to 1024 [ 569.501288][ T9637] hfsplus: part requires an argument [ 569.524196][ T9637] hfsplus: unable to parse mount options [ 570.197132][ T9499] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 570.201253][ T9658] loop3: detected capacity change from 0 to 1024 [ 570.210845][ T3588] Bluetooth: hci1: command tx timeout [ 570.233141][ T9499] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 570.276669][ T9499] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 570.332570][ T9499] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 570.592547][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.631585][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 570.643122][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 570.671860][ T9499] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.703585][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 570.715877][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.741033][ T4765] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.748327][ T4765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.809280][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 570.820077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 570.840292][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.869554][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.876749][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.923996][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 570.955029][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 571.161034][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 571.181447][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 571.249399][ T9689] input: syz1 as /devices/virtual/input/input42 [ 572.094849][ T9691] loop4: detected capacity change from 0 to 1024 [ 572.104657][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 572.108697][ T9691] hfsplus: part requires an argument [ 572.120747][ T9691] hfsplus: unable to parse mount options [ 572.141018][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 572.182438][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 572.224005][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 572.236462][ T9499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.270617][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 572.283787][ T3588] Bluetooth: hci1: command tx timeout [ 572.338137][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 572.353434][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 572.376333][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 572.950188][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 572.966728][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 572.994103][ T9499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.059622][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 573.076133][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 573.132711][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 573.156561][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 573.179822][ T9499] device veth0_vlan entered promiscuous mode [ 573.203394][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 573.217056][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 573.248169][ T9499] device veth1_vlan entered promiscuous mode [ 573.345167][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 573.359646][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 573.388761][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 573.428406][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 573.473284][ T9499] device veth0_macvtap entered promiscuous mode [ 573.515865][ T9499] device veth1_macvtap entered promiscuous mode [ 573.572030][ T9713] loop3: detected capacity change from 0 to 32768 [ 573.612169][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.732444][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.779892][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.835891][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.882389][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.941576][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.990976][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.032898][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.090574][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.135481][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.172912][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.191103][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.202770][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.221470][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.268123][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.286685][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.304227][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.327670][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.352659][ T9499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.370455][ T9499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.380886][ T9499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.397058][ T9499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.971226][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 575.990542][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 576.010377][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 576.035443][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 576.051277][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.247304][ T9752] loop2: detected capacity change from 0 to 1024 [ 576.268012][ T9752] hfsplus: part requires an argument [ 576.273359][ T9752] hfsplus: unable to parse mount options [ 576.361258][ T4066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.380953][ T4066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.412130][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 576.432025][ T4066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.448738][ T4066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.500021][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 576.960811][ T9791] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 576.970539][ T9791] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 576.980512][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 577.293969][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.542926][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.661968][ T9794] loop2: detected capacity change from 0 to 32768 [ 577.666355][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.749832][ T9794] Dev loop2 SGI disklabel: csum bad, label corrupted [ 577.792464][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.262706][ T3588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 579.279123][ T3588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 579.291937][ T3588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 579.300436][ T3588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 579.308531][ T3588] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 579.316357][ T3588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.071478][ T9827] chnl_net:caif_netlink_parms(): no params data found [ 580.146925][ T52] device hsr_slave_0 left promiscuous mode [ 580.167716][ T52] device hsr_slave_1 left promiscuous mode [ 580.208491][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.243772][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.273861][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.281329][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.304817][ T52] device bridge_slave_1 left promiscuous mode [ 580.311107][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.349166][ T52] device bridge_slave_0 left promiscuous mode [ 580.379315][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.453169][ T52] device veth1_macvtap left promiscuous mode [ 580.464452][ T52] device veth0_macvtap left promiscuous mode [ 580.483836][ T52] device veth1_vlan left promiscuous mode [ 580.489707][ T52] device veth0_vlan left promiscuous mode [ 581.073156][ T9849] loop3: detected capacity change from 0 to 32768 [ 581.120192][ T9849] XFS: attr2 mount option is deprecated. [ 581.133924][ T9849] XFS: noikeep mount option is deprecated. [ 581.192214][ T9849] XFS (loop3): Mounting V5 Filesystem [ 581.244566][ T9860] loop0: detected capacity change from 0 to 4096 [ 581.278191][ T52] team0 (unregistering): Port device team_slave_1 removed [ 581.338713][ T52] team0 (unregistering): Port device team_slave_0 removed [ 581.381483][ T9849] XFS (loop3): Ending clean mount [ 581.381900][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.401686][ T9849] XFS (loop3): Quotacheck needed: Please wait. [ 581.411259][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.419970][ T3588] Bluetooth: hci1: command tx timeout [ 581.467032][ T9849] XFS (loop3): Quotacheck: Done. [ 581.531580][ T9873] [U] [ 581.614332][ T3579] XFS (loop3): Unmounting Filesystem [ 581.776016][ T52] bond0 (unregistering): Released all slaves [ 581.903325][ T9878] sp0: Synchronizing with TNC [ 581.933233][ T9879] sp0: Found TNC [ 581.948325][ T9884] binder: 9883:9884 ioctl 4018620d 0 returned -22 [ 582.072798][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.080513][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.089051][ T9827] device bridge_slave_0 entered promiscuous mode [ 582.099332][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.168790][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.260493][ T9891] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 582.607600][ T9827] device bridge_slave_1 entered promiscuous mode [ 582.894206][ T9827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.916361][ T9827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.978063][ T9827] team0: Port device team_slave_0 added [ 582.996283][ T9827] team0: Port device team_slave_1 added [ 583.065092][ T9895] tipc: Failed to remove unknown binding: 66,1,1/0:846527328/846527330 [ 583.109556][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.133702][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.200719][ T9827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.223449][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.232056][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.282033][ T9827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.384669][ T9827] device hsr_slave_0 entered promiscuous mode [ 583.391555][ T9827] device hsr_slave_1 entered promiscuous mode [ 583.398566][ T9827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.406462][ T9827] Cannot create hsr debugfs directory [ 583.483899][ T3591] Bluetooth: hci1: command tx timeout [ 584.013030][ T9936] tipc: Failed to remove unknown binding: 66,1,1/0:873263510/873263512 [ 584.262514][ T9827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 584.328766][ T9827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.366628][ T9827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 584.390681][ T9827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 584.577634][ T9827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.634512][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 584.648435][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.684532][ T9827] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.724262][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 584.740205][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.790589][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.798014][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.855028][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 584.879370][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 584.897189][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 584.931870][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.939075][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.967793][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 584.996409][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.051431][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 585.070329][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.106814][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.144716][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.183001][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.209981][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.258176][ T9827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.293962][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.318840][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.338036][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.368248][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.384716][ T9960] loop2: detected capacity change from 0 to 512 [ 585.434272][ T9960] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 585.541564][ T9960] block device autoloading is deprecated and will be removed. [ 585.564162][ T3591] Bluetooth: hci1: command tx timeout [ 585.581588][ T9960] I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 585.640055][ T9960] EXT4-fs (loop2): couldn't read superblock of external journal [ 585.867065][ T26] audit: type=1326 audit(1718749286.685:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bb167cf29 code=0x0 [ 585.889450][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.038230][ T9974] loop2: detected capacity change from 0 to 256 [ 586.095109][ T9974] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 586.127295][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.145637][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.192964][ T9827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.272740][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.293827][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.348164][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.364589][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.385810][ T9827] device veth0_vlan entered promiscuous mode [ 586.400541][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.418896][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.442487][ T9827] device veth1_vlan entered promiscuous mode [ 586.541786][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.551723][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.605112][ T9827] device veth0_macvtap entered promiscuous mode [ 586.629768][ T9827] device veth1_macvtap entered promiscuous mode [ 586.672186][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.723245][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.744046][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.776620][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.787388][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.839176][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.860953][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.883566][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.925360][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.946512][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 586.955842][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 587.012065][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 587.032771][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 587.065322][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.103150][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.125205][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.154390][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.164792][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.183700][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.203870][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.217164][ T9999] loop0: detected capacity change from 0 to 512 [ 587.230944][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.245324][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.262190][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 587.291724][ T9999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 587.309623][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 587.325476][ T9999] ext4 filesystem being mounted at /root/syzkaller-testdir3404604956/syzkaller.i7tNK9/265/bus supports timestamps until 2038 (0x7fffffff) [ 587.357095][ T9827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.389333][ T9827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.400050][ T9999] EXT4-fs (loop0): unmounting filesystem. [ 587.427808][ T9827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.441583][T10009] binder: 10007:10009 ioctl 4018620d 0 returned -22 [ 587.457664][T10011] loop2: detected capacity change from 0 to 1024 [ 587.470207][ T9827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.669838][ T3591] Bluetooth: hci1: command tx timeout [ 587.694426][T10012] sp0: Synchronizing with TNC [ 587.909212][T10015] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 588.699864][T10013] sp0: Found TNC [ 588.767017][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.779418][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.801705][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 588.869256][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.888930][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.921093][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 589.292749][T10046] binder: 10044:10046 ioctl 4018620d 0 returned -22 [ 589.627330][T10053] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 590.460418][T10067] loop2: detected capacity change from 0 to 1024 [ 593.284101][ T3705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.951796][T10091] trusted_key: encrypted_key: insufficient parameters specified [ 593.966630][ T3622] hid-generic 0000:0020:0000.0038: unknown main item tag 0x0 [ 593.987559][ T3622] hid-generic 0000:0020:0000.0038: item fetching failed at offset 7/18 [ 593.996779][ T3622] hid-generic: probe of 0000:0020:0000.0038 failed with error -22 [ 594.020442][ T3705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.226934][ T3705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.262726][ T3591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.273067][ T3591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 594.289170][ T3591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 594.306662][ T3591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 594.324166][ T3591] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 594.331579][ T3591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.358815][ T3705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.368494][T10121] chnl_net:caif_netlink_parms(): no params data found [ 595.711289][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.743721][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.770646][T10121] device bridge_slave_0 entered promiscuous mode [ 595.821836][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.844820][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.862924][T10121] device bridge_slave_1 entered promiscuous mode [ 595.960499][T10121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.980139][T10121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.054663][T10158] trusted_key: encrypted_key: insufficient parameters specified [ 596.080502][ T3627] hid-generic 0000:0020:0000.0039: unknown main item tag 0x0 [ 596.116399][ T3627] hid-generic 0000:0020:0000.0039: item fetching failed at offset 7/18 [ 596.188504][ T3627] hid-generic: probe of 0000:0020:0000.0039 failed with error -22 [ 596.887412][ T3591] Bluetooth: hci1: command tx timeout [ 596.980825][T10121] team0: Port device team_slave_0 added [ 597.042540][T10121] team0: Port device team_slave_1 added [ 597.088520][T10165] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 597.146103][T10121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.169169][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.253822][T10121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.295639][T10121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.302628][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.420217][T10121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.545931][T10121] device hsr_slave_0 entered promiscuous mode [ 597.573399][T10121] device hsr_slave_1 entered promiscuous mode [ 597.600209][T10121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.613576][T10121] Cannot create hsr debugfs directory [ 598.383614][ T3705] device hsr_slave_0 left promiscuous mode [ 598.453639][ T3705] device hsr_slave_1 left promiscuous mode [ 598.464223][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.497565][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.577326][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.609295][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.649364][ T3705] device bridge_slave_1 left promiscuous mode [ 598.676325][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.707646][ T3705] device bridge_slave_0 left promiscuous mode [ 598.734351][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.795109][ T3705] device veth1_macvtap left promiscuous mode [ 598.811609][ T3705] device veth0_macvtap left promiscuous mode [ 598.824407][ T3705] device veth1_vlan left promiscuous mode [ 598.930999][ T3705] device veth0_vlan left promiscuous mode [ 598.937662][ T3591] Bluetooth: hci1: command tx timeout [ 599.950252][ T3705] team0 (unregistering): Port device team_slave_1 removed [ 600.034214][ T3705] team0 (unregistering): Port device team_slave_0 removed [ 600.101168][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.164996][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.581537][ T3705] bond0 (unregistering): Released all slaves [ 601.011526][ T3588] Bluetooth: hci1: command tx timeout [ 601.146542][T10186] trusted_key: encrypted_key: insufficient parameters specified [ 601.204408][ T3707] hid-generic 0000:0020:0000.003A: unknown main item tag 0x0 [ 601.214343][ T3707] hid-generic 0000:0020:0000.003A: item fetching failed at offset 7/18 [ 601.223216][ T3707] hid-generic: probe of 0000:0020:0000.003A failed with error -22 [ 601.931403][T10205] loop0: detected capacity change from 0 to 2048 [ 602.021279][T10215] input: syz1 as /devices/virtual/input/input43 [ 602.738749][T10205] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 602.825868][T10205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.085858][ T3588] Bluetooth: hci1: command tx timeout [ 603.629044][T10121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 603.680548][T10121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 603.713138][T10121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.762685][T10121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 604.021627][T10231] ================================================================== [ 604.029765][T10231] BUG: KASAN: null-ptr-deref in udf_bread+0x29f/0x4b0 [ 604.036675][T10231] Write of size 8 at addr 0000000000000000 by task syz-executor.0/10231 [ 604.045034][T10231] [ 604.047381][T10231] CPU: 1 PID: 10231 Comm: syz-executor.0 Not tainted 6.1.94-syzkaller #0 [ 604.055821][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 604.065907][T10231] Call Trace: [ 604.069201][T10231] [ 604.072232][T10231] dump_stack_lvl+0x1e3/0x2cb [ 604.076963][T10231] ? nf_tcp_handle_invalid+0x642/0x642 [ 604.082468][T10231] ? panic+0x764/0x764 [ 604.086569][T10231] ? _printk+0xd1/0x111 [ 604.090752][T10231] ? _raw_spin_lock_irqsave+0xac/0x120 [ 604.096248][T10231] print_report+0xe6/0x4f0 [ 604.100699][T10231] ? __virt_addr_valid+0x54/0x520 [ 604.105758][T10231] ? udf_bread+0x29f/0x4b0 [ 604.110205][T10231] kasan_report+0x136/0x160 [ 604.114730][T10231] ? udf_bread+0x29f/0x4b0 [ 604.119178][T10231] kasan_check_range+0x27f/0x290 [ 604.124140][T10231] udf_bread+0x29f/0x4b0 [ 604.128415][T10231] ? udf_add_aext+0x370/0x370 [ 604.133132][T10231] ? __mark_inode_dirty+0x430/0xf80 [ 604.138367][T10231] ? udf_write_aext+0x515/0x7a0 [ 604.143252][T10231] udf_add_entry+0x1d1e/0x3350 [ 604.148065][T10231] ? udf_add_nondir+0x5d0/0x5d0 [ 604.152962][T10231] ? udf_write_fi+0x8e7/0xba0 [ 604.157676][T10231] ? rcu_is_watching+0x11/0xb0 [ 604.162464][T10231] ? __mark_inode_dirty+0x430/0xf80 [ 604.167702][T10231] udf_mkdir+0x429/0xaa0 [ 604.171985][T10231] ? udf_symlink+0x1690/0x1690 [ 604.176856][T10231] ? from_kgid+0x1a3/0x730 [ 604.181322][T10231] ? make_kgid+0x6f0/0x6f0 [ 604.185812][T10231] ? inode_permission+0xf7/0x450 [ 604.190791][T10231] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 604.195848][T10231] ? security_inode_mkdir+0xb4/0x100 [ 604.201183][T10231] vfs_mkdir+0x3b6/0x590 [ 604.205472][T10231] do_mkdirat+0x225/0x360 [ 604.209927][T10231] ? vfs_mkdir+0x590/0x590 [ 604.214375][T10231] ? getname_flags+0x1f9/0x4f0 [ 604.219165][T10231] ? lockdep_hardirqs_on+0x94/0x130 [ 604.224394][T10231] __x64_sys_mkdir+0x6a/0x80 [ 604.229027][T10231] do_syscall_64+0x3b/0xb0 [ 604.233478][T10231] ? clear_bhb_loop+0x45/0xa0 [ 604.238183][T10231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.244107][T10231] RIP: 0033:0x7f2a2bc7cf29 [ 604.248549][T10231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 604.268263][T10231] RSP: 002b:00007f2a2c9380c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 604.276722][T10231] RAX: ffffffffffffffda RBX: 00007f2a2bdb41f0 RCX: 00007f2a2bc7cf29 [ 604.284735][T10231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 604.292737][T10231] RBP: 00007f2a2bcec074 R08: 0000000000000000 R09: 0000000000000000 [ 604.300728][T10231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.308719][T10231] R13: 000000000000006e R14: 00007f2a2bdb41f0 R15: 00007fffd5ed32b8 [ 604.317162][T10231] 2024/06/18 22:21:45 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 604.320196][T10231] ================================================================== [ 606.186675][T10231] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 606.193917][T10231] CPU: 1 PID: 10231 Comm: syz-executor.0 Not tainted 6.1.94-syzkaller #0 [ 606.202355][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 606.212432][T10231] Call Trace: [ 606.215755][T10231] [ 606.218700][T10231] dump_stack_lvl+0x1e3/0x2cb [ 606.223416][T10231] ? nf_tcp_handle_invalid+0x642/0x642 [ 606.228939][T10231] ? panic+0x764/0x764 [ 606.233037][T10231] ? preempt_schedule_common+0xa6/0xd0 [ 606.238524][T10231] ? vscnprintf+0x59/0x80 [ 606.242891][T10231] panic+0x318/0x764 [ 606.246815][T10231] ? check_panic_on_warn+0x1d/0xa0 [ 606.251950][T10231] ? memcpy_page_flushcache+0xfc/0xfc [ 606.257345][T10231] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 606.263356][T10231] ? _raw_spin_unlock+0x40/0x40 [ 606.268237][T10231] ? print_report+0xe6/0x4f0 [ 606.272854][T10231] check_panic_on_warn+0x7e/0xa0 [ 606.277907][T10231] ? udf_bread+0x29f/0x4b0 [ 606.282350][T10231] end_report+0x66/0x110 [ 606.286611][T10231] kasan_report+0x143/0x160 [ 606.291133][T10231] ? udf_bread+0x29f/0x4b0 [ 606.295575][T10231] kasan_check_range+0x27f/0x290 [ 606.300535][T10231] udf_bread+0x29f/0x4b0 [ 606.304904][T10231] ? udf_add_aext+0x370/0x370 [ 606.309616][T10231] ? __mark_inode_dirty+0x430/0xf80 [ 606.314855][T10231] ? udf_write_aext+0x515/0x7a0 [ 606.319736][T10231] udf_add_entry+0x1d1e/0x3350 [ 606.324539][T10231] ? udf_add_nondir+0x5d0/0x5d0 [ 606.329418][T10231] ? udf_write_fi+0x8e7/0xba0 [ 606.334121][T10231] ? rcu_is_watching+0x11/0xb0 [ 606.338907][T10231] ? __mark_inode_dirty+0x430/0xf80 [ 606.344135][T10231] udf_mkdir+0x429/0xaa0 [ 606.348410][T10231] ? udf_symlink+0x1690/0x1690 [ 606.353194][T10231] ? from_kgid+0x1a3/0x730 [ 606.357634][T10231] ? make_kgid+0x6f0/0x6f0 [ 606.362078][T10231] ? inode_permission+0xf7/0x450 [ 606.367033][T10231] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 606.372074][T10231] ? security_inode_mkdir+0xb4/0x100 [ 606.377394][T10231] vfs_mkdir+0x3b6/0x590 [ 606.381664][T10231] do_mkdirat+0x225/0x360 [ 606.386016][T10231] ? vfs_mkdir+0x590/0x590 [ 606.390458][T10231] ? getname_flags+0x1f9/0x4f0 [ 606.395238][T10231] ? lockdep_hardirqs_on+0x94/0x130 [ 606.400456][T10231] __x64_sys_mkdir+0x6a/0x80 [ 606.405070][T10231] do_syscall_64+0x3b/0xb0 [ 606.409511][T10231] ? clear_bhb_loop+0x45/0xa0 [ 606.414303][T10231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.420228][T10231] RIP: 0033:0x7f2a2bc7cf29 [ 606.424676][T10231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 606.444303][T10231] RSP: 002b:00007f2a2c9380c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 606.452739][T10231] RAX: ffffffffffffffda RBX: 00007f2a2bdb41f0 RCX: 00007f2a2bc7cf29 [ 606.460728][T10231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 606.468726][T10231] RBP: 00007f2a2bcec074 R08: 0000000000000000 R09: 0000000000000000 [ 606.476729][T10231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.484731][T10231] R13: 000000000000006e R14: 00007f2a2bdb41f0 R15: 00007fffd5ed32b8 [ 606.492746][T10231] [ 606.496038][T10231] Kernel Offset: disabled [ 606.500363][T10231] Rebooting in 86400 seconds..