last executing test programs: 45.03194907s ago: executing program 4 (id=220): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.752936556s ago: executing program 4 (id=225): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 43.124618674s ago: executing program 4 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x1, 0xfffffffd}}]}}}]}, 0x60}}, 0x0) 41.297936309s ago: executing program 4 (id=235): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x0, 0x20000}) 37.293523157s ago: executing program 3 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x8c) keyctl$update(0x2, r3, &(0x7f0000000300)="94", 0x1) 36.234435844s ago: executing program 3 (id=255): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) 33.580899037s ago: executing program 3 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x8c) keyctl$update(0x2, r3, &(0x7f0000000300)="94", 0x1) 32.447657013s ago: executing program 3 (id=269): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000000700)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d302c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d63703835372c636f6465706167653d3836302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c73686f72746e616d653d6c6f7765722c757466383d312c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d302c757466383d302c6e6e6f6e756d74616929b1312c7375626a5f757365723d5c242a5b292a3a275c2c00"], 0x6, 0x2dd, &(0x7f0000000d40)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) truncate(&(0x7f0000000180)='./file1\x00', 0x800) open(&(0x7f0000000040)='./file1\x00', 0x800, 0x12) 31.579471891s ago: executing program 3 (id=274): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000180)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x302}}, {@lfs_mode}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') 30.057421756s ago: executing program 3 (id=281): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa08, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 29.422866925s ago: executing program 32 (id=281): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa08, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 20.389775029s ago: executing program 4 (id=235): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x0, 0x20000}) 6.041664238s ago: executing program 5 (id=353): r0 = userfaultfd(0x80001) io_setup(0x2007, &(0x7f0000000200)=0x0) r2 = eventfd2(0xe2f4, 0x80801) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 5.736001977s ago: executing program 5 (id=356): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x42, 0x1}, 0x1}}, 0x10) 5.634241806s ago: executing program 5 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000180)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x302}}, {@lfs_mode}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') 5.243081165s ago: executing program 4 (id=235): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x0, 0x20000}) 4.968629415s ago: executing program 0 (id=363): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.589855204s ago: executing program 2 (id=364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.255343333s ago: executing program 0 (id=365): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@sysvgroups}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000300)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.072731922s ago: executing program 2 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r1, 0x7) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x3}], 0x1}, 0x20040050) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="755a65725f78617474722c61636c2c00abc39e1ba3ee498e1d8c12531462cd5519277b030853d25b421c0b2083c0ce47446e728a070000000000000068735bd5f06e6f25a29fce8ee7fdde9d092508e3df606b9036557dfa085395e37c67337d522ef3d3a6a08578f19ed4d0753564c43e75e62b2364e15e44db0a6db93967c1c2c9a62908c5eed89bfd88f1c0901206f328d3f4a0c8fcc1d814ffb7ca9943034aa4696d95cc69e7c9393aab279743bf46287a7c2b272ff0931337eef96fb4f7730a67ae088b5940bad26b4af74fcd82e2eeb68a58a08bf1b6cfb1a24b01aca29e7d8ccaf95f455892e99a9e51326572e41f", @ANYRESHEX=r0], 0x3, 0x1dc, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000000c0)={0xfffffffb, 0x7, 0x80, 0x5}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) gettid() setresuid(0x0, 0x0, 0x0) 2.937989859s ago: executing program 2 (id=367): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000004c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 2.565108697s ago: executing program 2 (id=368): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000540)={[{@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}]}, 0x0, 0x274, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 2.375894467s ago: executing program 0 (id=369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 2.169155506s ago: executing program 2 (id=371): socket$key(0xf, 0x3, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000002f40)="c40d026060") 2.025156736s ago: executing program 0 (id=372): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008014) 1.845890046s ago: executing program 0 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x8c) keyctl$update(0x2, r2, &(0x7f0000000300)="94", 0x1) 1.515609505s ago: executing program 2 (id=375): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405000020"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1.281511584s ago: executing program 33 (id=375): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405000020"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1.269833074s ago: executing program 1 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="98000000020101"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1.268705064s ago: executing program 5 (id=378): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1}, 0x90) 1.048024313s ago: executing program 1 (id=379): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x22041, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8) 854.361273ms ago: executing program 0 (id=380): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x10040f00) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x6], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff9000/0x4000)=nil) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/227) write$rfkill(r0, &(0x7f0000000080)={0x3f, 0x1, 0x3, 0x1}, 0x8) 744.525882ms ago: executing program 1 (id=381): msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="03000000000000002c5b92fe53d0a8d45c8df77b3a5b24f5b5f47fb21e984f7cd98be58672f21c05d89a28dd30d16695fd88872467e730c5c5b07c0baad7f374dbe5548198"], 0xfd1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3, 0x0, 0xffffffffffffffff}) 543.888142ms ago: executing program 5 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) msgsnd(0x0, 0x0, 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x9, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000040), 0x3, 0x637, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x6880, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 543.727462ms ago: executing program 1 (id=383): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf, 0xffff}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x68}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 383.679311ms ago: executing program 1 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) 87.833551ms ago: executing program 1 (id=385): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000840), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200488, &(0x7f00000007c0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'iso8859-14'}}, {@umask={'umask', 0x3d, 0x1c}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 5 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000015c0)=' hash=', 0x0) kernel console output (not intermixed with test programs): lave_0) entered disabled state [10849.265293][ T4737] device bridge_slave_0 entered promiscuous mode [10849.284937][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [10849.292027][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [10849.300437][ T4751] device bridge_slave_0 entered promiscuous mode [10849.324755][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [10849.331865][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [10849.340013][ T4737] device bridge_slave_1 entered promiscuous mode [10849.358242][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [10849.365489][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [10849.373675][ T4751] device bridge_slave_1 entered promiscuous mode [10849.404804][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [10849.411962][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [10849.420131][ T4741] device bridge_slave_0 entered promiscuous mode [10849.464267][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [10849.471538][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [10849.480623][ T4741] device bridge_slave_1 entered promiscuous mode [10849.499236][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [10849.506495][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [10849.514897][ T4738] device bridge_slave_0 entered promiscuous mode [10849.536745][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10849.556978][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10849.575872][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [10849.583233][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [10849.591216][ T4738] device bridge_slave_1 entered promiscuous mode [10849.598934][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [10849.606305][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [10849.614616][ T4753] device bridge_slave_0 entered promiscuous mode [10849.624544][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10849.636180][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10849.659193][ T4741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10849.679416][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [10849.686664][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [10849.695503][ T4753] device bridge_slave_1 entered promiscuous mode [10849.721154][ T4741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10849.752765][ T4738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10849.782520][ T4751] team0: Port device team_slave_0 added [10849.791369][ T4737] team0: Port device team_slave_0 added [10849.809870][ T4738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10849.838087][ T4751] team0: Port device team_slave_1 added [10849.846065][ T4737] team0: Port device team_slave_1 added [10849.863679][ T4741] team0: Port device team_slave_0 added [10849.891320][ T4753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10849.915764][ T4741] team0: Port device team_slave_1 added [10849.931682][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [10849.939355][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10849.966233][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10849.980817][ T4738] team0: Port device team_slave_0 added [10849.989464][ T4753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10850.008900][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0 [10850.016490][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.042599][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10850.054681][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [10850.061652][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.088069][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10850.101288][ T4738] team0: Port device team_slave_1 added [10850.138239][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1 [10850.145354][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.171470][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10850.208610][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_0 [10850.215849][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.242225][ T4741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10850.255641][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_1 [10850.262900][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.288941][ T4741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10850.305526][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_0 [10850.313210][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.339758][ T4738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10850.353524][ T4753] team0: Port device team_slave_0 added [10850.359835][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_1 [10850.366914][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.392961][ T4738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10850.434344][ T4753] team0: Port device team_slave_1 added [10850.458869][ T4751] device hsr_slave_0 entered promiscuous mode [10850.466371][ T4751] device hsr_slave_1 entered promiscuous mode [10850.492901][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [10850.492901][ T21] Bluetooth: hci2: command 0x0409 tx timeout [10850.500001][ T21] Bluetooth: hci0: command 0x0409 tx timeout [10850.506577][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [10850.524232][ T4737] device hsr_slave_0 entered promiscuous mode [10850.531381][ T4737] device hsr_slave_1 entered promiscuous mode [10850.538661][ T4737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10850.546588][ T4737] Cannot create hsr debugfs directory [10850.582985][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [10850.613292][ T4738] device hsr_slave_0 entered promiscuous mode [10850.620376][ T4738] device hsr_slave_1 entered promiscuous mode [10850.628484][ T4738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10850.636234][ T4738] Cannot create hsr debugfs directory [10850.642324][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_0 [10850.649287][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.675665][ T4753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10850.691557][ T4741] device hsr_slave_0 entered promiscuous mode [10850.698901][ T4741] device hsr_slave_1 entered promiscuous mode [10850.705874][ T4741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10850.713761][ T4741] Cannot create hsr debugfs directory [10850.737157][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_1 [10850.744181][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10850.770242][ T4753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10850.932610][ T4753] device hsr_slave_0 entered promiscuous mode [10850.939732][ T4753] device hsr_slave_1 entered promiscuous mode [10850.946484][ T4753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10850.954237][ T4753] Cannot create hsr debugfs directory [10851.218915][ T4751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [10851.236684][ T4751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [10851.248337][ T4751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [10851.258197][ T4751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [10851.308850][ T4741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [10851.321364][ T4741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [10851.334616][ T4741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [10851.346391][ T4741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [10851.438764][ T4738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [10851.450889][ T4738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [10851.477228][ T4738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [10851.491397][ T4738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [10851.561657][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [10851.603514][ T4753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [10851.633401][ T4741] 8021q: adding VLAN 0 to HW filter on device bond0 [10851.640355][ T4753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [10851.657182][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [10851.664451][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [10851.676736][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [10851.699513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [10851.708662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [10851.717391][ T4753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [10851.727614][ T4753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [10851.743233][ T4741] 8021q: adding VLAN 0 to HW filter on device team0 [10851.772606][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [10851.781473][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [10851.791538][ T4766] bridge0: port 1(bridge_slave_0) entered blocking state [10851.798944][ T4766] bridge0: port 1(bridge_slave_0) entered forwarding state [10851.808514][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [10851.818101][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [10851.828175][ T4766] bridge0: port 2(bridge_slave_1) entered blocking state [10851.835339][ T4766] bridge0: port 2(bridge_slave_1) entered forwarding state [10851.844094][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [10851.858575][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [10851.871231][ T4737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [10851.883711][ T4737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [10851.898276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [10851.912025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [10851.922441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [10851.931083][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [10851.938258][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [10851.958096][ T4737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [10851.967391][ T4737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [10851.985898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [10852.007359][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0 [10852.021933][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [10852.034262][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [10852.043933][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [10852.053101][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [10852.061790][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [10852.071195][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [10852.080124][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state [10852.087291][ T4783] bridge0: port 2(bridge_slave_1) entered forwarding state [10852.129425][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [10852.138168][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [10852.147833][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [10852.157958][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [10852.167402][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [10852.177824][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [10852.186638][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [10852.195515][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [10852.210748][ T4738] 8021q: adding VLAN 0 to HW filter on device team0 [10852.231209][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [10852.245683][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [10852.266647][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [10852.277292][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [10852.286331][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [10852.297282][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [10852.306327][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state [10852.313448][ T4783] bridge0: port 1(bridge_slave_0) entered forwarding state [10852.326984][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [10852.338176][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [10852.371558][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [10852.381862][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [10852.392002][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state [10852.399145][ T4783] bridge0: port 2(bridge_slave_1) entered forwarding state [10852.407987][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [10852.418324][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [10852.427029][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [10852.448227][ T4741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [10852.466356][ T4741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [10852.506744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [10852.515588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [10852.524973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [10852.534846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [10852.543607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [10852.553356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [10852.563369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [10852.571900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [10852.572397][ T4784] Bluetooth: hci1: command 0x041b tx timeout [10852.580569][ T4786] Bluetooth: hci3: command 0x041b tx timeout [10852.592815][ T4784] Bluetooth: hci0: command 0x041b tx timeout [10852.593788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [10852.606975][ T4786] Bluetooth: hci2: command 0x041b tx timeout [10852.610956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [10852.621978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [10852.652347][ T4784] Bluetooth: hci4: command 0x041b tx timeout [10852.667145][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [10852.689642][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [10852.708375][ T4753] 8021q: adding VLAN 0 to HW filter on device bond0 [10852.721266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [10852.733054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [10852.760913][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [10852.778312][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0 [10852.804118][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [10852.813284][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [10852.824109][ T4753] 8021q: adding VLAN 0 to HW filter on device team0 [10852.874468][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [10852.886490][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [10852.898377][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [10852.910420][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [10852.924781][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [10852.931857][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state [10852.940286][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [10852.949518][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [10852.958607][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [10852.965753][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state [10852.973876][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [10852.985341][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [10852.998592][ T4737] 8021q: adding VLAN 0 to HW filter on device team0 [10853.028384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10853.036919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10853.045237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [10853.057508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [10853.067473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [10853.078553][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [10853.085674][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [10853.094411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10853.101939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10853.109782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [10853.141093][ T4741] 8021q: adding VLAN 0 to HW filter on device batadv0 [10853.149207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [10853.160773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [10853.170005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [10853.180122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [10853.188952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [10853.197800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [10853.206820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [10853.215837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [10853.226337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [10853.257038][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [10853.270524][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [10853.279998][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [10853.289489][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [10853.296639][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state [10853.305777][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [10853.315294][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [10853.324255][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [10853.337258][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [10853.346161][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [10853.357541][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [10853.374019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10853.381583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10853.444615][ T4738] 8021q: adding VLAN 0 to HW filter on device batadv0 [10853.455894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [10853.469773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [10853.480307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [10853.489634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [10853.499033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [10853.508178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [10853.522885][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [10853.552491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [10853.561558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [10853.620437][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [10853.647266][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [10853.703755][ T4741] device veth0_vlan entered promiscuous mode [10853.722819][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [10853.740507][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [10853.748993][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [10853.758452][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [10853.776750][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10853.785315][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10853.803258][ T4753] 8021q: adding VLAN 0 to HW filter on device batadv0 [10853.815362][ T4741] device veth1_vlan entered promiscuous mode [10853.839756][ T4738] device veth0_vlan entered promiscuous mode [10853.856402][ T4738] device veth1_vlan entered promiscuous mode [10853.879605][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [10853.888332][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [10853.897782][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [10853.907177][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [10853.916278][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [10853.926039][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [10853.934919][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [10853.971832][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [10853.981149][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [10853.991622][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [10854.000869][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [10854.010197][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10854.019490][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10854.028953][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [10854.038130][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [10854.050543][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [10854.059235][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [10854.074091][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0 [10854.084088][ T4753] device veth0_vlan entered promiscuous mode [10854.135541][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [10854.147926][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [10854.157172][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [10854.167606][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [10854.176581][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [10854.185501][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [10854.195055][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [10854.203850][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [10854.214550][ T4741] device veth0_macvtap entered promiscuous mode [10854.225351][ T4753] device veth1_vlan entered promiscuous mode [10854.238802][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [10854.247169][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [10854.265402][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [10854.287197][ T4741] device veth1_macvtap entered promiscuous mode [10854.295182][ T4751] device veth0_vlan entered promiscuous mode [10854.306551][ T4738] device veth0_macvtap entered promiscuous mode [10854.336639][ T4738] device veth1_macvtap entered promiscuous mode [10854.349113][ T4751] device veth1_vlan entered promiscuous mode [10854.365329][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [10854.373989][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [10854.384948][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [10854.393408][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [10854.401438][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [10854.409913][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [10854.418541][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [10854.427112][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [10854.437744][ T4737] device veth0_vlan entered promiscuous mode [10854.464392][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_0 [10854.497869][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10854.509659][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10854.521452][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [10854.531685][ T4737] device veth1_vlan entered promiscuous mode [10854.539512][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [10854.547800][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [10854.556446][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [10854.567411][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [10854.577961][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [10854.586794][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [10854.595429][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [10854.608421][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [10854.621564][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_1 [10854.630777][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [10854.640179][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [10854.650242][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [10854.652557][ T4784] Bluetooth: hci2: command 0x040f tx timeout [10854.661179][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [10854.671125][ T4784] Bluetooth: hci3: command 0x040f tx timeout [10854.677400][ T4753] device veth0_macvtap entered promiscuous mode [10854.679352][ T4784] Bluetooth: hci0: command 0x040f tx timeout [10854.691078][ T4784] Bluetooth: hci1: command 0x040f tx timeout [10854.703525][ T4753] device veth1_macvtap entered promiscuous mode [10854.710798][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10854.721571][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10854.732580][ T4784] Bluetooth: hci4: command 0x040f tx timeout [10854.740134][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [10854.755825][ T4751] device veth0_macvtap entered promiscuous mode [10854.772486][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [10854.780729][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [10854.790095][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [10854.798772][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [10854.809543][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [10854.819808][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [10854.835397][ T4738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10854.845088][ T4738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10854.854348][ T4738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10854.863274][ T4738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10854.883228][ T4741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10854.892068][ T4741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10854.901926][ T4741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10854.910881][ T4741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10854.925573][ T4751] device veth1_macvtap entered promiscuous mode [10854.969874][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10854.982486][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10854.992432][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10855.003547][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.015980][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [10855.029293][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10855.039961][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.050661][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10855.062008][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.072336][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10855.082944][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.094466][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_0 [10855.111309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [10855.120500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [10855.129648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [10855.139956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [10855.150578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [10855.161837][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.173204][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.183386][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.194190][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.205360][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [10855.229738][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.240742][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.251491][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.266562][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.276514][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.287332][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.307901][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_1 [10855.320513][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [10855.333480][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [10855.343106][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [10855.351903][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [10855.361834][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [10855.371388][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [10855.384944][ T4737] device veth0_macvtap entered promiscuous mode [10855.407746][ T4753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10855.418266][ T4753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10855.427692][ T4753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10855.436808][ T4753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10855.450709][ T4737] device veth1_macvtap entered promiscuous mode [10855.466150][ T4751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10855.475261][ T4751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10855.484670][ T4751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10855.493565][ T4751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10855.556586][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10855.571703][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.582464][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10855.593262][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.603431][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10855.615640][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.625904][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10855.636762][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.648622][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [10855.678031][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10855.687682][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10855.711941][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [10855.724901][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [10855.734325][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [10855.743629][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [10855.754223][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [10855.764430][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.776682][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.786941][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.797483][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.807540][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.818333][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.828247][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10855.839236][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10855.850798][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1 [10855.886588][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [10855.897685][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [10855.909399][ T4737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10855.919718][ T4737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10855.928821][ T4737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10855.937830][ T4737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10855.966262][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10855.975404][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.015549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [10856.060077][ T4783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10856.081350][ T4783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.099630][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [10856.148246][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10856.170193][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.192544][ T4783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10856.200809][ T4783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.214851][ T4797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10856.226855][ T4797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.238715][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [10856.264570][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [10856.277249][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [10856.325997][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10856.354703][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.381361][ T4823] input: syz0 as /devices/virtual/input/input5 [10856.410045][ T4783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10856.410279][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [10856.427690][ T4783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.473917][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [10856.536657][ T4783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10856.566032][ T4783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.593772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [10856.615986][ T4783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10856.635656][ T4783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10856.710266][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [10856.733720][ T21] Bluetooth: hci1: command 0x0419 tx timeout [10856.747267][ T21] Bluetooth: hci0: command 0x0419 tx timeout [10856.933316][ T21] Bluetooth: hci3: command 0x0419 tx timeout [10857.543897][ T21] Bluetooth: hci2: command 0x0419 tx timeout [10857.557033][ T4836] loop1: detected capacity change from 0 to 16 [10857.579125][ T4788] Bluetooth: hci4: command 0x0419 tx timeout [10857.593657][ T4836] erofs: Unknown parameter 'uZer_xattr' [10858.054690][ T4855] loop3: detected capacity change from 0 to 16 [10858.062758][ T4740] usb 5-1: new high-speed USB device number 2 using dummy_hcd [10858.155807][ T4855] erofs: (device loop3): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 8 [10858.800601][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [10858.833644][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10858.859876][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10858.886126][ T4879] device bridge_slave_0 left promiscuous mode [10858.916558][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [10858.963694][ T4879] device bridge_slave_1 left promiscuous mode [10858.973486][ T4740] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [10858.992427][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [10859.001076][ T4740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10859.009680][ T4740] usb 5-1: Product: syz [10859.020612][ T4740] usb 5-1: Manufacturer: syz [10859.025588][ T4740] usb 5-1: SerialNumber: syz [10859.062303][ T4879] bond0: (slave bond_slave_0): Releasing backup interface [10859.103699][ T4740] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [10859.108406][ T4879] bond0: (slave bond_slave_1): Releasing backup interface [10859.315576][ T4879] team0: Port device team_slave_0 removed [10859.358449][ T4879] team0: Port device team_slave_1 removed [10859.379620][ T4879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [10859.388028][ T4879] batman_adv: batadv0: Removing interface: batadv_slave_0 [10859.401319][ T4879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [10859.410131][ T4879] batman_adv: batadv0: Removing interface: batadv_slave_1 [10859.861815][ T4884] loop0: detected capacity change from 0 to 40427 [10859.883217][ T4740] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [10859.960940][ T4884] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [10859.969016][ T4884] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [10860.000088][ T4884] F2FS-fs (loop0): invalid crc value [10860.003075][ T4879] syz.1.15 (4879) used greatest stack depth: 18744 bytes left [10860.062585][ T4884] F2FS-fs (loop0): Found nat_bits in checkpoint [10860.132649][ C0] usb 5-1: ath9k_htc: invalid pkt_len (fe1a) [10860.166334][ T4917] loop1: detected capacity change from 0 to 1024 [10860.379668][ T4841] loop4: detected capacity change from 0 to 64 [10860.387637][ T4884] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [10860.432495][ T4884] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [10860.497629][ T4841] hfs: unable to parse mount options [10861.695011][ T4943] loop2: detected capacity change from 0 to 16 [10862.512505][ T4740] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [10862.520250][ T4740] ath9k_htc: Failed to initialize the device [10862.522166][ C1] sched: RT throttling activated [10862.533102][ T4940] attempt to access beyond end of device [10862.533102][ T4940] loop0: rw=2049, want=53256, limit=40427 [10862.573222][ T4943] erofs: Unknown parameter 'uZer_xattr' [10862.677411][ T4947] loop3: detected capacity change from 0 to 256 [10862.707973][ T4790] usb 5-1: USB disconnect, device number 2 [10862.756170][ T4790] usb 5-1: ath9k_htc: USB layer deinitialized [10863.468090][ T4947] capability: warning: `syz.3.26' uses deprecated v2 capabilities in a way that may be insecure [10863.853229][ T4972] Zero length message leads to an empty skb [10863.989626][ T4981] loop2: detected capacity change from 0 to 64 [10864.150347][ T4981] ======================================================= [10864.150347][ T4981] WARNING: The mand mount option has been deprecated and [10864.150347][ T4981] and is ignored by this kernel. Remove the mand [10864.150347][ T4981] option from the mount to silence this warning. [10864.150347][ T4981] ======================================================= [10865.880383][ T4996] loop4: detected capacity change from 0 to 16 [10866.666876][ T4996] erofs: Unknown parameter 'uZer_xattr' [10866.707065][ T5001] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [10866.789204][ T4737] attempt to access beyond end of device [10866.789204][ T4737] loop0: rw=2049, want=45104, limit=40427 [10867.098134][ T5014] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [10867.485695][ T4789] kernel read not supported for file /33/net/igmp (pid: 4789 comm: kworker/1:6) [10867.884908][ T5035] loop1: detected capacity change from 0 to 4096 [10869.216551][ T5064] loop3: detected capacity change from 0 to 16 [10869.259040][ T5064] erofs: Unknown parameter 'uZer_xattr' [10870.149418][ T5079] loop0: detected capacity change from 0 to 8 [10870.190298][ T5081] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [10870.219457][ T5076] loop4: detected capacity change from 0 to 512 [10870.318643][ T5076] EXT4-fs (loop4): orphan cleanup on readonly fs [10870.345286][ T5079] SQUASHFS error: xz decompression failed, data probably corrupt [10870.353848][ T5079] SQUASHFS error: Failed to read block 0x108: -5 [10870.360216][ T5079] SQUASHFS error: Unable to read metadata cache entry [106] [10870.367957][ T5079] SQUASHFS error: Unable to read inode 0x11f [10870.386349][ T5076] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.59: bg 0: block 248: padding at end of block bitmap is not set [10870.455257][ T5076] Quota error (device loop4): write_blk: dquota write failed [10870.511064][ T5076] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [10870.578520][ T5076] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.59: Failed to acquire dquot type 1 [10870.795126][ T5076] EXT4-fs (loop4): 1 truncate cleaned up [10870.817641][ T5076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [10870.863575][ T5076] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [10870.973910][ T4821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [10871.115184][ T5076] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [10871.242660][ T4821] usb 1-1: device descriptor read/64, error -71 [10871.632425][ T4821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [10871.842534][ T4821] usb 1-1: device descriptor read/64, error -71 [10871.972512][ T4821] usb usb1-port1: attempt power cycle [10872.094548][ T5113] loop1: detected capacity change from 0 to 16 [10872.186152][ T5113] erofs: Unknown parameter 'uZer_xattr' [10872.861015][ T5119] sctp: [Deprecated]: syz.2.75 (pid 5119) Use of int in max_burst socket option deprecated. [10872.861015][ T5119] Use struct sctp_assoc_value instead [10873.062034][ T5127] loop3: detected capacity change from 0 to 128 [10873.208978][ T4821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [10873.319388][ T5127] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [10873.374771][ T5127] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [10873.417840][ T5134] nbd0: detected capacity change from 0 to 18 [10873.452457][ T4821] usb 1-1: device not accepting address 4, error -71 [10873.475448][ T1092] block nbd0: Send control failed (result -89) [10873.482314][ T1092] block nbd0: Request send failed, requeueing [10873.490245][ T4750] block nbd0: Receive control failed (result -107) [10873.491073][ T1092] block nbd0: Dead connection, failed to find a fallback [10873.504276][ T1092] block nbd0: shutting down sockets [10873.510268][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.522472][ T1092] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.532332][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.543253][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.551222][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.562212][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.570172][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.581015][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.595225][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.607181][ T1092] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.615293][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.626154][ T1092] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.634247][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.645146][ T1092] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.658935][ T26] audit: type=1326 audit(1741019317.047:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.0.79" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2977313169 code=0x0 [10873.685066][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.696175][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.704153][ T4819] ldm_validate_partition_table(): Disk read failed. [10873.731693][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.742704][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.760175][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10873.771137][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [10873.787091][ T4819] Dev nbd0: unable to read RDB block 0 [10873.825450][ T4819] nbd0: unable to read partition table [10873.848944][ T4819] nbd0: partition table beyond EOD, truncated [10873.958928][ T4819] ldm_validate_partition_table(): Disk read failed. [10874.070775][ T4819] Dev nbd0: unable to read RDB block 0 [10874.108209][ T4819] nbd0: unable to read partition table [10874.131276][ T4819] nbd0: partition table beyond EOD, truncated [10875.203735][ T5151] loop1: detected capacity change from 0 to 16 [10875.963193][ T5151] erofs: Unknown parameter 'uZer_xattr' [10876.081162][ T5153] loop0: detected capacity change from 0 to 64 [10876.098319][ T5133] loop2: detected capacity change from 0 to 40427 [10876.139069][ T5133] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [10876.149484][ T5133] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [10876.205863][ T5133] F2FS-fs (loop2): invalid crc value [10876.251946][ T5107] ODEBUG: Out of memory. ODEBUG disabled [10876.328963][ T5133] F2FS-fs (loop2): Found nat_bits in checkpoint [10876.418170][ T5157] loop3: detected capacity change from 0 to 512 [10876.489003][ T5157] EXT4-fs (loop3): Test dummy encryption mode enabled [10876.500883][ T5157] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [10876.534944][ T5157] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [10876.549391][ T5165] loop0: detected capacity change from 0 to 256 [10876.623590][ T5157] EXT4-fs (loop3): 1 truncate cleaned up [10876.629679][ T5157] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [10877.216957][ T5157] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [10877.365568][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.100'. [10877.375054][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.100'. [10877.576919][ T5157] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [10878.454663][ T5211] loop2: detected capacity change from 0 to 1024 [10878.530544][ T5213] loop1: detected capacity change from 0 to 16 [10878.627213][ T5213] erofs: Unknown parameter 'uZer_xattr' [10879.358904][ T5214] loop0: detected capacity change from 0 to 32768 [10879.383222][ T4834] hfsplus: b-tree write err: -5, ino 4 [10879.409928][ T5214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.106 (5214) [10879.508712][ T5214] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [10879.518112][ T5214] BTRFS info (device loop0): using free space tree [10879.524760][ T5214] BTRFS info (device loop0): has skinny extents [10879.699055][ T5236] netlink: 'syz.3.111': attribute type 4 has an invalid length. [10879.835461][ T5214] BTRFS info (device loop0): enabling ssd optimizations [10880.053216][ T5216] loop1: detected capacity change from 0 to 40427 [10880.090165][ T5216] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [10880.120683][ T5216] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [10880.147343][ T5216] F2FS-fs (loop1): invalid crc value [10880.258878][ T4740] usb 3-1: new high-speed USB device number 2 using dummy_hcd [10880.265644][ T5216] F2FS-fs (loop1): Found nat_bits in checkpoint [10880.421242][ T5216] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [10880.428481][ T5216] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [10880.432633][ T4819] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4819) [10880.540430][ T4740] usb 3-1: Using ep0 maxpacket: 8 [10880.553118][ T5269] attempt to access beyond end of device [10880.553118][ T5269] loop1: rw=2049, want=53256, limit=40427 [10881.046411][ T4740] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [10881.056834][ T4740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10881.065708][ T4740] usb 3-1: Product: syz [10881.069982][ T4740] usb 3-1: Manufacturer: syz [10881.075849][ T4740] usb 3-1: SerialNumber: syz [10881.084812][ T4740] usb 3-1: config 0 descriptor?? [10881.197528][ T4740] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [10881.353549][ T4740] gspca_sn9c2028: read1 error -32 [10881.522543][ T4740] gspca_sn9c2028: read1 error -32 [10881.971303][ T5107] Set syz1 is full, maxelem 65536 reached [10881.980706][ T5271] usb 3-1: USB disconnect, device number 2 [10882.981895][ T5290] loop0: detected capacity change from 0 to 16 [10883.023570][ T5290] erofs: Unknown parameter 'uZer_xattr' [10883.479635][ T5312] loop0: detected capacity change from 0 to 128 [10883.691807][ T4741] attempt to access beyond end of device [10883.691807][ T4741] loop1: rw=2049, want=45104, limit=40427 [10883.786600][ T5312] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [10884.519322][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [10884.794644][ T5325] netlink: 100 bytes leftover after parsing attributes in process `syz.0.134'. [10885.083539][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [10885.090517][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [10885.258200][ T5340] loop0: detected capacity change from 0 to 16 [10885.336940][ T5340] erofs: Unknown parameter 'uZer_xattr' [10886.248470][ T5352] loop3: detected capacity change from 0 to 64 [10886.643043][ T5356] loop2: detected capacity change from 0 to 64 [10887.268671][ T5360] loop0: detected capacity change from 0 to 47 [10887.436882][ T5360] attempt to access beyond end of device [10887.436882][ T5360] loop0: rw=2049, want=50, limit=47 [10887.506257][ T5360] buffer_io_error: 25 callbacks suppressed [10887.506275][ T5360] Buffer I/O error on dev loop0, logical block 24, lost async page write [10887.543588][ T5360] attempt to access beyond end of device [10887.543588][ T5360] loop0: rw=2049, want=52, limit=47 [10887.562280][ T5360] Buffer I/O error on dev loop0, logical block 25, lost async page write [10887.946475][ T5381] 9pnet: p9_errstr2errno: server reported unknown error ªª» [10887.978763][ T5382] loop3: detected capacity change from 0 to 16 [10888.184867][ T5346] loop1: detected capacity change from 0 to 40427 [10888.693104][ T5382] erofs: Unknown parameter 'uZer_xattr' [10888.711859][ T5346] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [10888.732275][ T5346] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [10888.778915][ T5346] F2FS-fs (loop1): invalid crc value [10888.814143][ T5390] loop0: detected capacity change from 0 to 64 [10888.857272][ T5346] F2FS-fs (loop1): Found nat_bits in checkpoint [10889.736768][ T5413] loop0: detected capacity change from 0 to 512 [10889.812735][ T26] audit: type=1326 audit(1741019333.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6822a4b169 code=0x7ffc0000 [10889.845916][ T5413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [10889.882432][ T26] audit: type=1326 audit(1741019333.227:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6822a4b169 code=0x7ffc0000 [10889.904717][ C0] vkms_vblank_simulate: vblank timer overrun [10889.925327][ T26] audit: type=1326 audit(1741019333.227:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6822a4b169 code=0x7ffc0000 [10889.948356][ T26] audit: type=1326 audit(1741019333.227:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6822a4b169 code=0x7ffc0000 [10889.966049][ T5413] EXT4-fs (loop0): 1 truncate cleaned up [10889.978635][ T26] audit: type=1326 audit(1741019333.227:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6822a4b169 code=0x7ffc0000 [10890.022420][ T5413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [10890.358250][ T5420] loop3: detected capacity change from 0 to 4096 [10890.441041][ T5427] loop1: detected capacity change from 0 to 16 [10890.595873][ T5427] erofs: Unknown parameter 'uZer_xattr' [10890.754289][ T5420] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [10891.456173][ T5429] loop0: detected capacity change from 0 to 40427 [10891.513379][ T5429] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [10891.520379][ T5429] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [10891.545080][ T5429] F2FS-fs (loop0): invalid crc value [10891.602174][ T5429] F2FS-fs (loop0): Found nat_bits in checkpoint [10891.681905][ T5429] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [10891.689200][ T5429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [10891.823127][ T5442] attempt to access beyond end of device [10891.823127][ T5442] loop0: rw=2049, want=53256, limit=40427 [10892.261586][ T4737] attempt to access beyond end of device [10892.261586][ T4737] loop0: rw=2049, want=45104, limit=40427 [10892.463406][ T5446] kvm: pic: level sensitive irq not supported [10892.465977][ T5446] kvm: pic: level sensitive irq not supported [10892.494820][ T5446] kvm: pic: level sensitive irq not supported [10892.502067][ T5446] kvm: pic: level sensitive irq not supported [10892.529668][ T5446] kvm: pic: single mode not supported [10892.810216][ T5462] kvm: pic: level sensitive irq not supported [10893.002323][ T5472] loop4: detected capacity change from 0 to 512 [10893.118723][ T5477] loop3: detected capacity change from 0 to 16 [10893.236021][ T5477] erofs: Unknown parameter 'uZer_xattr' [10893.753948][ T5472] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,discard,,errors=continue. Quota mode: writeback. [10893.818411][ T5472] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [10893.868641][ T5485] loop2: detected capacity change from 0 to 128 [10894.258182][ T4766] attempt to access beyond end of device [10894.258182][ T4766] loop2: rw=1, want=513, limit=128 [10894.297121][ T5495] loop0: detected capacity change from 0 to 32768 [10894.343052][ T5495] XFS: ikeep mount option is deprecated. [10894.844161][ T5506] loop2: detected capacity change from 0 to 32768 [10894.880352][ T5495] XFS (loop0): Mounting V5 Filesystem [10894.962530][ T5506] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.195 (5506) [10895.035757][ T5489] loop3: detected capacity change from 0 to 40427 [10895.046469][ T5506] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [10895.055700][ T5506] BTRFS info (device loop2): enabling auto defrag [10895.062346][ T5506] BTRFS info (device loop2): doing ref verification [10895.069037][ T5506] BTRFS info (device loop2): max_inline at 4096 [10895.075400][ T5506] BTRFS info (device loop2): enabling ssd optimizations [10895.082473][ T5506] BTRFS info (device loop2): using spread ssd allocation scheme [10895.090130][ T5506] BTRFS info (device loop2): using free space tree [10895.096728][ T5506] BTRFS info (device loop2): has skinny extents [10895.289424][ T5489] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [10895.451125][ T5489] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [10895.671382][ T5489] F2FS-fs (loop3): invalid crc value [10895.710243][ T5495] XFS (loop0): Ending clean mount [10895.727009][ T5495] XFS (loop0): Quotacheck needed: Please wait. [10895.863181][ T5495] XFS (loop0): Quotacheck: Done. [10895.895321][ T5489] F2FS-fs (loop3): Found nat_bits in checkpoint [10896.006995][ T4737] XFS (loop0): Unmounting Filesystem [10896.199567][ T5539] loop4: detected capacity change from 0 to 4096 [10896.203257][ T5489] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [10896.222622][ T5489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [10896.242944][ T5539] ntfs3: Unknown parameter 'windows_names' [10896.318645][ T5489] attempt to access beyond end of device [10896.318645][ T5489] loop3: rw=2049, want=53256, limit=40427 [10896.843073][ T5542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.202'. [10896.862963][ T4738] attempt to access beyond end of device [10896.862963][ T4738] loop3: rw=2049, want=45104, limit=40427 [10897.481256][ T5550] loop0: detected capacity change from 0 to 32768 [10897.623678][ T5556] loop1: detected capacity change from 0 to 2048 [10897.702729][ T5550] XFS (loop0): Mounting V5 Filesystem [10897.712638][ T5556] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [10897.754176][ T5556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [10897.931461][ T5550] XFS (loop0): Ending clean mount [10899.787418][ T5550] XFS (loop0): Quotacheck needed: Please wait. [10899.831151][ T5577] loop4: detected capacity change from 0 to 4096 [10899.899920][ T5550] XFS (loop0): Quotacheck: Done. [10899.953816][ T4737] XFS (loop0): Unmounting Filesystem [10900.200625][ T5577] EXT4-fs (loop4): Test dummy encryption mode enabled [10900.211374][ T5577] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [10900.452575][ T5577] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,test_dummy_encryption,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [10900.482216][ T5558] usb 3-1: new high-speed USB device number 3 using dummy_hcd [10900.880319][ T5577] EXT4-fs (loop4): Test dummy encryption mode enabled [10900.985313][ T5577] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [10901.147556][ T5577] EXT4-fs (loop4): re-mounted. Opts: norecovery,test_dummy_encryption,nombcache,user_xattr,nomblk_io_submit,. Quota mode: writeback. [10901.322310][ T5558] usb 3-1: Using ep0 maxpacket: 8 [10901.452519][ T5558] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10901.742919][ T5613] loop0: detected capacity change from 0 to 40427 [10902.465550][ T5624] loop1: detected capacity change from 0 to 1764 [10902.493498][ T5558] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [10902.556353][ T5613] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [10902.563605][ T5613] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [10902.611092][ T5613] F2FS-fs (loop0): invalid crc value [10902.651229][ T5613] F2FS-fs (loop0): Found nat_bits in checkpoint [10902.732543][ T5558] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [10902.741724][ T5558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10902.775448][ T5558] usb 3-1: Product: syz [10902.779679][ T5558] usb 3-1: Manufacturer: syz [10902.788454][ T5613] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [10902.795712][ T5613] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [10902.804426][ T5558] usb 3-1: SerialNumber: syz [10902.884911][ T5638] attempt to access beyond end of device [10902.884911][ T5638] loop0: rw=2049, want=53256, limit=40427 [10903.185584][ T5558] usb 3-1: can't set config #1, error -71 [10903.212030][ T5558] usb 3-1: USB disconnect, device number 3 [10903.374096][ T4737] attempt to access beyond end of device [10903.374096][ T4737] loop0: rw=2049, want=45104, limit=40427 [10904.105836][ T4751] syz-executor (4751) used greatest stack depth: 18456 bytes left [10905.375760][ T5659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.236'. [10906.015931][ T5662] loop3: detected capacity change from 0 to 32768 [10906.755881][ T5675] dccp_close: ABORT with 32 bytes unread [10907.117726][ T5683] loop1: detected capacity change from 0 to 512 [10907.179299][ T5683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [10907.225962][ T5685] loop3: detected capacity change from 0 to 1024 [10907.297959][ T5690] loop2: detected capacity change from 0 to 8 [10907.312585][ T5683] EXT4-fs (loop1): 1 truncate cleaned up [10907.319296][ T5683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [10907.364268][ T5678] chnl_net:caif_netlink_parms(): no params data found [10907.370614][ T5672] loop0: detected capacity change from 0 to 40427 [10907.384383][ T5685] hfsplus: bad catalog entry type [10907.425649][ T5672] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [10907.440614][ T5672] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [10907.465825][ T5672] F2FS-fs (loop0): invalid crc value [10907.476906][ T4766] hfsplus: b-tree write err: -5, ino 4 [10907.516266][ T5672] F2FS-fs (loop0): Found nat_bits in checkpoint [10907.544506][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [10907.551836][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [10907.560242][ T5678] device bridge_slave_0 entered promiscuous mode [10907.569107][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [10907.576394][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [10907.585472][ T5678] device bridge_slave_1 entered promiscuous mode [10907.950217][ T5707] loop3: detected capacity change from 0 to 16 [10908.167166][ T5707] erofs: Unknown parameter 'uZer_xattr' [10908.427848][ T5563] Bluetooth: hci4: command 0x0405 tx timeout [10908.952751][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10908.979151][ T5672] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [10908.991956][ T5672] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [10909.007794][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [10909.025841][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10909.062324][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [10909.062324][ T5563] Bluetooth: hci3: command 0x0409 tx timeout [10909.107131][ T5718] attempt to access beyond end of device [10909.107131][ T5718] loop0: rw=2049, want=53256, limit=40427 [10909.673931][ T5678] team0: Port device team_slave_0 added [10909.822374][ T5678] team0: Port device team_slave_1 added [10910.124697][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0 [10910.147544][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10910.173765][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10910.178386][ T5264] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [10910.186611][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1 [10910.199357][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10910.225917][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10910.240076][ T5726] loop2: detected capacity change from 0 to 1024 [10910.277897][ T5264] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [10910.315818][ T5726] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [10910.330764][ T5726] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [10910.338869][ T5726] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [10910.366672][ T5678] device hsr_slave_0 entered promiscuous mode [10910.397363][ T5726] EXT4-fs (loop2): mounted filesystem without journal. Opts: dax=inode,nodioread_nolock,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [10910.418277][ T5678] device hsr_slave_1 entered promiscuous mode [10910.456897][ T5678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10910.466117][ T5678] Cannot create hsr debugfs directory [10910.592297][ T5271] usb 4-1: new full-speed USB device number 2 using dummy_hcd [10910.709515][ T5678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10910.799549][ T5740] loop1: detected capacity change from 0 to 256 [10910.863225][ T5678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10910.952368][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [10910.969021][ T5271] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [10911.020253][ T5678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10911.142926][ T5553] Bluetooth: hci3: command 0x041b tx timeout [10911.192558][ T5271] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [10911.201711][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10911.229274][ T5271] usb 4-1: Product: syz [10911.241350][ T5271] usb 4-1: Manufacturer: syz [10911.247177][ T5271] usb 4-1: SerialNumber: syz [10911.273141][ T5271] usb 4-1: config 0 descriptor?? [10911.296764][ T5728] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [10911.324893][ T5728] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [10911.350170][ T5678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10911.361893][ T5271] usb 4-1: ucan: probing device on interface #0 [10911.377784][ T5271] usb 4-1: ucan: invalid EP count (1) [10911.385403][ T5271] usb 4-1: ucan: probe failed; try to update the device firmware [10911.893625][ T5746] loop2: detected capacity change from 0 to 16 [10912.055547][ T5746] erofs: Unknown parameter 'uZer_xattr' [10912.103399][ T5553] usb 4-1: USB disconnect, device number 2 [10912.636453][ T4737] attempt to access beyond end of device [10912.636453][ T4737] loop0: rw=2049, want=45104, limit=40427 [10912.728627][ T5678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [10912.758617][ T5678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [10912.807270][ T5678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [10912.851490][ T5678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [10913.080298][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0 [10913.111609][ T5678] 8021q: adding VLAN 0 to HW filter on device team0 [10913.140789][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [10913.200573][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [10913.213925][ T5271] Bluetooth: hci3: command 0x040f tx timeout [10913.333255][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [10913.502086][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [10913.842888][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [10913.849997][ T4756] bridge0: port 1(bridge_slave_0) entered forwarding state [10913.971203][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [10913.998096][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [10914.010066][ T5765] loop3: detected capacity change from 0 to 256 [10914.071861][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [10914.117758][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [10914.120270][ T5763] loop2: detected capacity change from 0 to 4096 [10914.124948][ T4756] bridge0: port 2(bridge_slave_1) entered forwarding state [10914.170374][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [10914.236979][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [10914.249706][ T5763] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [10914.282227][ T5765] loop3: detected capacity change from 256 to 0 [10914.304931][ C0] print_req_error: 25 callbacks suppressed [10914.304948][ C0] blk_update_request: I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.330244][ T5765] FAT-fs (loop3): Directory bread(block 3) failed [10914.348436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [10914.350303][ C0] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.367505][ T5765] FAT-fs (loop3): Directory bread(block 4) failed [10914.374798][ C1] blk_update_request: I/O error, dev loop3, sector 20 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.391103][ T5765] FAT-fs (loop3): Directory bread(block 5) failed [10914.398644][ C0] blk_update_request: I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.409758][ T5765] FAT-fs (loop3): Directory bread(block 6) failed [10914.409886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [10914.424826][ C1] blk_update_request: I/O error, dev loop3, sector 28 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.437905][ T5765] FAT-fs (loop3): Directory bread(block 7) failed [10914.464589][ C1] blk_update_request: I/O error, dev loop3, sector 32 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.465423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [10914.483946][ T5765] FAT-fs (loop3): Directory bread(block 8) failed [10914.493155][ C1] blk_update_request: I/O error, dev loop3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.505406][ T5765] FAT-fs (loop3): Directory bread(block 9) failed [10914.513387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [10914.523534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [10914.528040][ C1] blk_update_request: I/O error, dev loop3, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.534151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [10914.550345][ T5765] FAT-fs (loop3): Directory bread(block 10) failed [10914.557902][ C0] blk_update_request: I/O error, dev loop3, sector 44 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.569280][ T5765] FAT-fs (loop3): Directory bread(block 11) failed [10914.576928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [10914.595786][ C0] blk_update_request: I/O error, dev loop3, sector 48 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [10914.607078][ T5765] FAT-fs (loop3): Directory bread(block 12) failed [10914.622878][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [10914.712659][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [10914.755730][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [10914.788027][ T5780] loop0: detected capacity change from 0 to 2048 [10914.980035][ T5780] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nombcache,nolazytime,bsddf,,errors=continue. Quota mode: none. [10915.003573][ T5780] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [10915.087133][ T5791] loop1: detected capacity change from 0 to 16 [10915.160314][ T4738] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [10915.286959][ T5791] erofs: Unknown parameter 'uZer_xattr' [10915.798164][ T5265] Bluetooth: hci3: command 0x0419 tx timeout [10916.076113][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10916.086067][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10916.101606][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0 [10916.947014][ T4766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10917.166931][ T4766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10917.203940][ T5823] loop0: detected capacity change from 0 to 16 [10917.276222][ T4766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10917.308867][ T5823] erofs: (device loop0): erofs_read_superblock: blkszbits 9 isn't supported on this platform [10917.409346][ T4766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10917.615123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [10917.632446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [10917.741511][ T5678] device veth0_vlan entered promiscuous mode [10917.776639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [10917.790953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [10917.890982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [10917.903121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [10917.945629][ T5678] device veth1_vlan entered promiscuous mode [10918.101625][ T5837] loop0: detected capacity change from 0 to 16 [10918.653003][ T5678] device veth0_macvtap entered promiscuous mode [10918.840808][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [10918.850008][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [10918.853017][ T5837] erofs: Unknown parameter 'uZer_xattr' [10918.865842][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [10918.876214][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [10918.885716][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [10918.904327][ T5678] device veth1_macvtap entered promiscuous mode [10918.975353][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10919.025653][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10919.064455][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10919.081099][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10919.098531][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10919.168009][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10919.194063][ T5843] loop0: detected capacity change from 0 to 64 [10919.202236][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10919.257046][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10919.281032][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0 [10919.308177][ T5826] chnl_net:caif_netlink_parms(): no params data found [10919.357864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [10919.372448][ T5265] Bluetooth: hci1: command 0x0409 tx timeout [10919.379553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [10919.506004][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10919.522813][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10919.540267][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10919.560364][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10919.570570][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10919.591597][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10919.601867][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10919.625536][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10919.649655][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1 [10919.664272][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [10919.673387][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [10919.714363][ T5678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10919.729313][ T5678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10919.740450][ T5678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10919.749476][ T5678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10919.897911][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [10919.905550][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [10919.916915][ T5826] device bridge_slave_0 entered promiscuous mode [10920.006608][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [10920.022250][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [10920.030533][ T5826] device bridge_slave_1 entered promiscuous mode [10920.284877][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10920.369735][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10920.391428][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10920.398376][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10920.419079][ T26] audit: type=1326 audit(1741019363.807:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29772af359 code=0x7ffc0000 [10920.498578][ T26] audit: type=1326 audit(1741019363.837:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29772af359 code=0x7ffc0000 [10920.530009][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [10920.607092][ T4797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10920.650053][ T5826] team0: Port device team_slave_0 added [10920.692150][ T4797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10920.702305][ T26] audit: type=1326 audit(1741019363.837:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2977313169 code=0x7ffc0000 [10920.769222][ T5826] team0: Port device team_slave_1 added [10920.926626][ T26] audit: type=1326 audit(1741019363.837:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2977313169 code=0x7ffc0000 [10921.533465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [10921.692591][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [10921.701607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [10921.710511][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [10921.719523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [10921.728426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [10921.737442][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [10921.746348][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [10921.755359][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [10921.764271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [10921.799854][ T5554] Bluetooth: hci1: command 0x041b tx timeout [10921.852659][ T26] audit: type=1326 audit(1741019363.837:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29772af359 code=0x7ffc0000 [10921.886357][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [10921.934332][ T26] audit: type=1326 audit(1741019363.837:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2977313169 code=0x7ffc0000 [10921.980119][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [10921.994795][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10922.031615][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10922.052756][ T26] audit: type=1326 audit(1741019363.857:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29772af359 code=0x7ffc0000 [10922.118313][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [10922.163028][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10922.182181][ T26] audit: type=1326 audit(1741019363.857:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29772af359 code=0x7ffc0000 [10922.257016][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10922.404258][ T26] audit: type=1326 audit(1741019363.857:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2977313169 code=0x7ffc0000 [10922.435799][ T26] audit: type=1326 audit(1741019363.867:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2977313169 code=0x7ffc0000 [10922.511571][ T5898] loop2: detected capacity change from 0 to 16 [10923.742793][ T5898] erofs: Unknown parameter 'uZer_xattr' [10924.233938][ T5563] Bluetooth: hci1: command 0x040f tx timeout [10924.547081][ T4766] device hsr_slave_0 left promiscuous mode [10924.572685][ T4766] device hsr_slave_1 left promiscuous mode [10924.596449][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [10924.607148][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_0 [10924.621523][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [10924.639262][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_1 [10924.671205][ T4766] device bridge_slave_1 left promiscuous mode [10924.723028][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [10924.780391][ T4766] device bridge_slave_0 left promiscuous mode [10924.802969][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [10924.917673][ T5918] loop2: detected capacity change from 0 to 1024 [10924.938691][ T4766] device veth1_macvtap left promiscuous mode [10924.961210][ T4766] device veth0_macvtap left promiscuous mode [10924.962393][ T5554] usb 2-1: new full-speed USB device number 2 using dummy_hcd [10924.978696][ T4766] device veth1_vlan left promiscuous mode [10924.990040][ T4766] device veth0_vlan left promiscuous mode [10925.018598][ T5918] EXT4-fs (loop2): Ignoring removed bh option [10925.036243][ T5918] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [10925.121720][ T5918] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,jqfmt=vfsold,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nodioread_nolock,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [10925.212471][ T5918] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.302: Allocating blocks 385-513 which overlap fs metadata [10925.312282][ T5917] EXT4-fs (loop2): pa ffff888021ebcd20: logic 16, phys. 129, len 24 [10925.320929][ T5917] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [10925.582509][ T5554] usb 2-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6 [10925.591606][ T5554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10925.612320][ T5554] usb 2-1: Product: syz [10925.616534][ T5554] usb 2-1: Manufacturer: syz [10925.633012][ T5554] usb 2-1: SerialNumber: syz [10925.648946][ T5554] usb 2-1: config 0 descriptor?? [10925.680420][ T4766] team0 (unregistering): Port device team_slave_1 removed [10925.719511][ T4766] team0 (unregistering): Port device team_slave_0 removed [10925.724523][ T5554] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1 [10925.769223][ T4766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10925.807244][ T4766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10925.895499][ T4766] bond0 (unregistering): Released all slaves [10925.928178][ T5270] usb 2-1: USB disconnect, device number 2 [10926.060779][ T5826] device hsr_slave_0 entered promiscuous mode [10926.079011][ T5826] device hsr_slave_1 entered promiscuous mode [10926.120286][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10926.140843][ T5826] Cannot create hsr debugfs directory [10926.262349][ T5551] Bluetooth: hci1: command 0x0419 tx timeout [10926.862045][ T5826] netdevsim netdevsim5 netdevsim0: renamed from eth0 [10926.907143][ T5826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [10926.947692][ T5826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [10926.965416][ T5826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [10927.148823][ T5942] chnl_net:caif_netlink_parms(): no params data found [10927.171732][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [10927.246850][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [10927.269994][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [10927.283624][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [10927.376805][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [10927.455692][ T5973] loop2: detected capacity change from 0 to 16 [10927.494836][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [10927.515588][ T5973] erofs: Unknown parameter 'uZer_xattr' [10927.804896][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [10927.812129][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [10928.213535][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [10928.223177][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [10928.293036][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [10928.422869][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [10928.430049][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [10928.480505][ T5957] loop1: detected capacity change from 0 to 40427 [10928.489057][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [10928.540753][ T5978] loop2: detected capacity change from 0 to 32768 [10928.569866][ T5957] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [10928.577547][ T5553] Bluetooth: hci3: command 0x0409 tx timeout [10928.617113][ T5957] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [10928.639438][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [10928.667255][ T5978] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [10928.693873][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [10928.725315][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [10928.741371][ T5957] F2FS-fs (loop1): invalid crc value [10928.784237][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [10928.794569][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [10928.805798][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [10928.837228][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [10928.842076][ T5957] F2FS-fs (loop1): Found nat_bits in checkpoint [10928.874885][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [10928.903028][ T5942] device bridge_slave_0 entered promiscuous mode [10928.924593][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [10928.931958][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [10928.949711][ T5942] device bridge_slave_1 entered promiscuous mode [10928.999796][ T4753] ocfs2: Unmounting device (7,2) on (node local) [10929.027807][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [10929.039107][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [10929.065966][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [10929.091974][ T5957] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [10929.107561][ T5957] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [10929.156446][ T5826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [10929.258862][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [10929.280060][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [10929.334011][ T6000] attempt to access beyond end of device [10929.334011][ T6000] loop1: rw=2049, want=53256, limit=40427 [10929.335169][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10929.398928][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10929.568671][ T5942] team0: Port device team_slave_0 added [10929.617775][ T5942] team0: Port device team_slave_1 added [10929.836316][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [10929.864069][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10929.941778][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10929.958976][ T6013] loop2: detected capacity change from 0 to 32768 [10930.002829][ T6013] XFS: ikeep mount option is deprecated. [10930.068696][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10930.128038][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10930.170684][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [10930.171857][ T6013] XFS (loop2): Mounting V5 Filesystem [10930.187148][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10930.215015][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10930.259110][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [10930.418419][ T6013] XFS (loop2): Ending clean mount [10930.437513][ T6013] XFS (loop2): Quotacheck needed: Please wait. [10930.579848][ T6013] XFS (loop2): Quotacheck: Done. [10930.662788][ T5551] Bluetooth: hci3: command 0x041b tx timeout [10930.831217][ T5942] device hsr_slave_0 entered promiscuous mode [10930.854737][ T5942] device hsr_slave_1 entered promiscuous mode [10930.870648][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10930.879961][ T5942] Cannot create hsr debugfs directory [10930.922475][ T5558] usb 3-1: new high-speed USB device number 4 using dummy_hcd [10931.340915][ T5558] usb 3-1: Using ep0 maxpacket: 16 [10931.341904][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [10931.391251][ T4741] attempt to access beyond end of device [10931.391251][ T4741] loop1: rw=2049, want=45104, limit=40427 [10931.392037][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [10931.474855][ T5942] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10931.508697][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [10931.522383][ T5558] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [10931.536890][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [10931.544760][ T5558] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [10931.568506][ T5826] device veth0_vlan entered promiscuous mode [10931.582031][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [10931.591309][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [10931.620089][ T5942] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10931.690201][ T5826] device veth1_vlan entered promiscuous mode [10931.713764][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [10931.722502][ T5558] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [10931.742192][ T5558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10931.780818][ T5558] usb 3-1: Product: syz [10931.792139][ T5558] usb 3-1: Manufacturer: syz [10931.796790][ T5558] usb 3-1: SerialNumber: syz [10931.833022][ T5558] usb 3-1: config 0 descriptor?? [10931.844879][ T5942] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10931.964655][ T5942] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10932.075520][ T6013] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x42b dinode [10932.086805][ T6013] XFS (loop2): Unmount and run xfs_repair [10932.092958][ T6013] XFS (loop2): First 128 bytes of corrupted metadata buffer: [10932.100371][ T6013] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [10932.109332][ T6013] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [10932.111072][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [10932.118242][ T6013] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [10932.118304][ T6013] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [10932.118320][ T6013] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [10932.118337][ T6013] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [10932.118353][ T6013] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [10932.118369][ T6013] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [10932.118475][ T6013] XFS (loop2): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_create+0x9f7/0x1370 [10932.118517][ T6013] CPU: 1 PID: 6013 Comm: syz.2.316 Not tainted 5.15.178-syzkaller #0 [10932.118540][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [10932.118568][ T6013] Call Trace: [10932.213381][ T6013] [10932.216314][ T6013] dump_stack_lvl+0x1e3/0x2d0 [10932.220999][ T6013] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [10932.226637][ T6013] ? xfs_init_new_inode+0x1e8/0x1100 [10932.231927][ T6013] ? rwsem_write_trylock+0x166/0x210 [10932.237219][ T6013] ? xfs_error_report+0x8e/0xd0 [10932.242190][ T6013] ? xfs_create+0x9f7/0x1370 [10932.246937][ T6013] ? xfs_create+0x9f7/0x1370 [10932.251541][ T6013] xfs_trans_cancel+0x1c9/0x410 [10932.256483][ T6013] ? xfs_create+0x9f7/0x1370 [10932.261112][ T6013] xfs_create+0x9f7/0x1370 [10932.265555][ T6013] ? xfs_inode_inherit_flags2+0x340/0x340 [10932.271286][ T6013] ? __lock_acquire+0x1ff0/0x1ff0 [10932.276328][ T6013] ? posix_acl_create+0x155/0x420 [10932.281399][ T6013] xfs_generic_create+0x426/0xd00 [10932.286445][ T6013] ? xfs_vn_tmpfile+0x40/0x40 [10932.291121][ T6013] ? xfs_vn_lookup+0x1cb/0x290 [10932.295888][ T6013] ? generic_permission+0x21c/0x4f0 [10932.301097][ T6013] ? inode_permission+0xf7/0x450 [10932.306036][ T6013] ? bpf_lsm_inode_create+0x5/0x10 [10932.311166][ T6013] ? security_inode_create+0xb4/0x100 [10932.316568][ T6013] ? xfs_vn_ci_lookup+0x430/0x430 [10932.321629][ T6013] path_openat+0x130a/0x2f20 [10932.326248][ T6013] ? do_filp_open+0x460/0x460 [10932.330949][ T6013] do_filp_open+0x21c/0x460 [10932.335458][ T6013] ? vfs_tmpfile+0x2e0/0x2e0 [10932.340075][ T6013] ? _raw_spin_unlock+0x24/0x40 [10932.344931][ T6013] ? alloc_fd+0x598/0x630 [10932.349306][ T6013] do_sys_openat2+0x13b/0x4f0 [10932.354019][ T6013] ? do_sys_open+0x220/0x220 [10932.358651][ T6013] __x64_sys_openat+0x243/0x290 [10932.363595][ T6013] ? __ia32_sys_open+0x270/0x270 [10932.368561][ T6013] ? syscall_enter_from_user_mode+0x2e/0x240 [10932.374572][ T6013] ? lockdep_hardirqs_on+0x94/0x130 [10932.379778][ T6013] ? syscall_enter_from_user_mode+0x2e/0x240 [10932.385765][ T6013] do_syscall_64+0x3b/0xb0 [10932.390184][ T6013] ? clear_bhb_loop+0x15/0x70 [10932.394864][ T6013] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [10932.400770][ T6013] RIP: 0033:0x7f6ca3f9b169 [10932.405210][ T6013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [10932.424848][ T6013] RSP: 002b:00007f6ca1e04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [10932.433277][ T6013] RAX: ffffffffffffffda RBX: 00007f6ca41b3fa0 RCX: 00007f6ca3f9b169 [10932.441252][ T6013] RDX: 000000000000275a RSI: 0000400000000040 RDI: ffffffffffffff9c [10932.449222][ T6013] RBP: 00007f6ca401c2a0 R08: 0000000000000000 R09: 0000000000000000 [10932.457194][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [10932.465163][ T6013] R13: 0000000000000000 R14: 00007f6ca41b3fa0 R15: 00007fff8cafb8e8 [10932.473181][ T6013] [10932.488271][ T6013] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e2/0x410 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [10932.503036][ T6013] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [10932.528981][ T4740] usb 3-1: USB disconnect, device number 4 [10932.543890][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [10932.563905][ T5826] device veth0_macvtap entered promiscuous mode [10932.588054][ T5826] device veth1_macvtap entered promiscuous mode [10932.662927][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10932.693304][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10932.703331][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10932.713935][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10932.724342][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10932.734905][ T5553] Bluetooth: hci3: command 0x040f tx timeout [10932.741000][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10932.750915][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10932.761671][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10932.774906][ T6057] loop1: detected capacity change from 0 to 16 [10932.782294][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [10932.807719][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [10932.815949][ T6057] erofs: Unknown parameter 'uZer_xattr' [10932.823769][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [10932.843218][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [10932.853532][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [10932.888324][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10932.941522][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10932.957100][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10932.978327][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10932.990363][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10933.001219][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10933.011169][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10933.060857][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10933.097452][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [10933.118109][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [10933.127664][ T4753] XFS (loop2): Unmounting Filesystem [10933.180855][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [10933.195117][ T5826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10933.211158][ T5826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10933.220438][ T5826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10933.229367][ T5826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10933.347972][ T5942] netdevsim netdevsim4 netdevsim0: renamed from eth0 [10933.422845][ T5942] netdevsim netdevsim4 netdevsim1: renamed from eth1 [10933.471909][ T5942] netdevsim netdevsim4 netdevsim2: renamed from eth2 [10933.502978][ T5942] netdevsim netdevsim4 netdevsim3: renamed from eth3 [10933.569266][ T6068] loop1: detected capacity change from 0 to 32768 [10933.622369][ T6068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.326 (6068) [10933.736235][ T6068] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [10933.745372][ T6068] BTRFS error (device loop1): superblock checksum mismatch [10933.754930][ T6068] BTRFS error (device loop1): open_ctree failed [10933.799896][ T4819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4819) [10933.880149][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [10933.914011][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10933.933039][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10933.966670][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [10933.992907][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [10934.042660][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [10934.107211][ T6083] loop2: detected capacity change from 0 to 47 [10934.149555][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [10934.203416][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [10934.204214][ T4783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [10934.222809][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [10934.245353][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [10934.252613][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state [10934.270570][ T6083] attempt to access beyond end of device [10934.270570][ T6083] loop2: rw=2049, want=50, limit=47 [10934.296142][ T4783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [10934.327808][ T6083] Buffer I/O error on dev loop2, logical block 24, lost async page write [10934.328694][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [10934.398067][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [10934.406755][ T6083] attempt to access beyond end of device [10934.406755][ T6083] loop2: rw=2049, want=52, limit=47 [10934.433219][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [10934.442676][ T6083] Buffer I/O error on dev loop2, logical block 25, lost async page write [10934.472427][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [10934.479628][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state [10934.512748][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [10934.612496][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [10934.621146][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [10934.663285][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [10934.716405][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [10934.746014][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [10934.777487][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [10934.831969][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [10934.910367][ T5553] Bluetooth: hci3: command 0x0419 tx timeout [10935.005212][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [10935.043265][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [10935.101855][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [10935.154304][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [10935.501866][ T5942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [10935.849045][ T6090] loop1: detected capacity change from 0 to 40427 [10935.908761][ T6114] loop2: detected capacity change from 0 to 16 [10935.963426][ T6114] erofs: Unknown parameter 'uZer_xattr' [10936.040758][ T6090] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [10936.051160][ T6090] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [10936.110392][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [10936.120712][ T6090] F2FS-fs (loop1): invalid crc value [10936.133060][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [10936.180687][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [10936.190869][ T6090] F2FS-fs (loop1): Found nat_bits in checkpoint [10936.239908][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [10936.424495][ T6090] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [10936.444290][ T6090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [10936.575522][ T6142] attempt to access beyond end of device [10936.575522][ T6142] loop1: rw=2049, want=53256, limit=40427 [10936.805344][ T6152] loop0: detected capacity change from 0 to 256 [10936.831031][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [10936.848946][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [10936.933430][ T6152] FAT-fs (loop0): Directory bread(block 64) failed [10936.953272][ T6152] FAT-fs (loop0): Directory bread(block 65) failed [10936.960289][ T6152] FAT-fs (loop0): Directory bread(block 66) failed [10936.996797][ T6152] FAT-fs (loop0): Directory bread(block 67) failed [10936.999043][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [10937.012446][ T6152] FAT-fs (loop0): Directory bread(block 68) failed [10937.014855][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [10937.029399][ T6152] FAT-fs (loop0): Directory bread(block 69) failed [10937.041758][ T6152] FAT-fs (loop0): Directory bread(block 70) failed [10937.069221][ T5942] device veth0_vlan entered promiscuous mode [10937.070049][ T6152] FAT-fs (loop0): Directory bread(block 71) failed [10937.090506][ T6152] FAT-fs (loop0): Directory bread(block 72) failed [10937.099490][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [10937.112773][ T6152] FAT-fs (loop0): Directory bread(block 73) failed [10937.125492][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [10937.161268][ T5942] device veth1_vlan entered promiscuous mode [10937.251861][ T5942] device veth0_macvtap entered promiscuous mode [10937.325561][ T5942] device veth1_macvtap entered promiscuous mode [10937.401347][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10937.420738][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.431925][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10937.451452][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.462250][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10937.467270][ T6162] loop2: detected capacity change from 0 to 32768 [10937.502247][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.512788][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10937.523430][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.544907][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [10937.578092][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.611039][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [10937.637920][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [10937.654483][ T6162] XFS: ikeep mount option is deprecated. [10937.672993][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [10937.674404][ T6159] overlayfs: statfs failed on './file0' [10937.681929][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [10937.706772][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [10937.720793][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [10937.781346][ T6162] XFS (loop2): Mounting V5 Filesystem [10937.806753][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10937.844724][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.871195][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10937.882304][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.892546][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10937.904259][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.911382][ T6162] XFS (loop2): Ending clean mount [10937.923836][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10937.940141][ T6162] XFS (loop2): Quotacheck needed: Please wait. [10937.965389][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10937.975791][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [10937.996265][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [10938.006408][ T6162] XFS (loop2): Quotacheck: Done. [10938.008973][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [10938.089540][ T6162] overlayfs: missing 'lowerdir' [10938.102779][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [10938.122031][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [10938.156485][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [10938.354909][ T5942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10938.373741][ T4753] XFS (loop2): Unmounting Filesystem [10938.396841][ T5942] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10938.416789][ T5942] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10938.478536][ T5942] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10938.518451][ T4741] attempt to access beyond end of device [10938.518451][ T4741] loop1: rw=2049, want=45104, limit=40427 [10938.787725][ T4766] device hsr_slave_0 left promiscuous mode [10939.092433][ T4766] device hsr_slave_1 left promiscuous mode [10939.130824][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [10939.148752][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_0 [10939.208839][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [10939.236799][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_1 [10939.283298][ T4766] device bridge_slave_1 left promiscuous mode [10939.303012][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [10939.317639][ T4766] device bridge_slave_0 left promiscuous mode [10939.346464][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [10939.348619][ T6190] loop1: detected capacity change from 0 to 128 [10939.371456][ T4766] device veth1_macvtap left promiscuous mode [10939.377934][ T4766] device veth0_macvtap left promiscuous mode [10939.385334][ T4766] device veth1_vlan left promiscuous mode [10939.391161][ T4766] device veth0_vlan left promiscuous mode [10939.501615][ T6190] attempt to access beyond end of device [10939.501615][ T6190] loop1: rw=2049, want=1041, limit=128 [10939.721488][ T4766] team0 (unregistering): Port device team_slave_1 removed [10939.761484][ T4766] team0 (unregistering): Port device team_slave_0 removed [10939.795597][ T4766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10939.831777][ T4766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10939.904849][ T6195] loop1: detected capacity change from 0 to 16 [10939.928483][ T4766] bond0 (unregistering): Released all slaves [10939.942873][ T6195] erofs: Unknown parameter 'uZer_xattr' [10940.404909][ T6212] loop2: detected capacity change from 0 to 256 [10940.552784][ T6212] FAT-fs (loop2): bogus sectors per cluster 223 [10940.560209][ T6212] FAT-fs (loop2): Can't find a valid FAT filesystem [10940.742449][ T6219] loop0: detected capacity change from 0 to 64 [10941.215700][ T6230] loop0: detected capacity change from 0 to 64 [10941.575735][ T6234] loop0: detected capacity change from 0 to 128 [10941.676604][ T6234] EXT4-fs (loop0): Ignoring removed nobh option [10941.856515][ T6234] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [10941.944603][ T6234] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [10941.970659][ T6221] loop5: detected capacity change from 0 to 40427 [10942.003720][ T6221] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [10942.011056][ T6221] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [10942.052960][ T6221] F2FS-fs (loop5): invalid crc value [10942.081749][ T6221] F2FS-fs (loop5): Found nat_bits in checkpoint [10942.195486][ T6221] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [10942.202777][ T6221] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [10942.299217][ T6249] loop0: detected capacity change from 0 to 512 [10942.322677][ T6251] attempt to access beyond end of device [10942.322677][ T6251] loop5: rw=2049, want=53256, limit=40427 [10942.412524][ T6249] EXT4-fs (loop0): Ignoring removed orlov option [10942.652728][ T6257] loop2: detected capacity change from 0 to 16 [10942.740007][ T6249] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.365: inode #1: comm syz.0.365: iget: illegal inode # [10942.785708][ T6257] erofs: Unknown parameter 'uZer_xattr' [10943.341056][ T6249] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.365: error while reading EA inode 1 err=-117 [10943.413274][ T6238] chnl_net:caif_netlink_parms(): no params data found [10943.422560][ T6249] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [10943.494763][ T6259] loop2: detected capacity change from 0 to 128 [10943.534311][ T6249] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.365: inode #1: comm syz.0.365: iget: illegal inode # [10943.622247][ T6249] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.365: error while reading EA inode 1 err=-117 [10943.654034][ T6249] EXT4-fs (loop0): 1 orphan inode deleted [10943.659823][ T6249] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,orlov,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [10943.826820][ T6249] overlayfs: missing 'lowerdir' [10943.846182][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [10943.868567][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [10943.899040][ T6238] device bridge_slave_0 entered promiscuous mode [10943.937278][ T4789] Bluetooth: hci3: command 0x0409 tx timeout [10943.946142][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [10943.984324][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [10943.987316][ T6264] loop2: detected capacity change from 0 to 128 [10944.025800][ T6238] device bridge_slave_1 entered promiscuous mode [10944.186080][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10944.231716][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10944.772046][ T6238] team0: Port device team_slave_0 added [10944.825250][ T6238] team0: Port device team_slave_1 added [10944.993130][ T5826] attempt to access beyond end of device [10944.993130][ T5826] loop5: rw=2049, want=45104, limit=40427 [10945.017371][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [10945.037328][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10945.118324][ T6288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.377'. [10945.138106][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [10945.189053][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [10945.216316][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [10945.277515][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [10945.615469][ T6238] device hsr_slave_0 entered promiscuous mode [10945.660530][ T6238] device hsr_slave_1 entered promiscuous mode [10945.691624][ T6238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10945.731781][ T6238] Cannot create hsr debugfs directory [10945.903884][ T6306] loop5: detected capacity change from 0 to 1024 [10946.012232][ T5563] Bluetooth: hci3: command 0x041b tx timeout [10946.152914][ T6316] pim6reg0: tun_chr_ioctl cmd 1074025673 [10946.214673][ T6238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10946.368769][ T6238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10946.485526][ T4766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10946.501026][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [10946.507402][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [11007.935577][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [11007.941896][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [11054.572089][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [11054.579160][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5933/1:b..l [11054.587664][ C0] (detected by 0, t=10502 jiffies, g=24749, q=300) [11054.594267][ C0] task:kworker/u4:7 state:R running task stack:22712 pid: 5933 ppid: 2 flags:0x00004000 [11054.606512][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [11054.614387][ C0] Call Trace: [11054.617677][ C0] [11054.620630][ C0] __schedule+0x12c4/0x45b0 [11054.625162][ C0] ? process_one_work+0x8a1/0x10c0 [11054.630328][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [11054.636332][ C0] ? release_firmware_map_entry+0x190/0x190 [11054.642257][ C0] ? preempt_schedule_irq+0xec/0x1c0 [11054.647701][ C0] preempt_schedule_irq+0xf7/0x1c0 [11054.653160][ C0] ? __cond_resched+0x20/0x20 [11054.657874][ C0] irqentry_exit+0x53/0x80 [11054.662312][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [11054.668311][ C0] RIP: 0010:rcu_lock_acquire+0x0/0x30 [11054.673706][ C0] Code: 8c 65 f9 ff ff 48 8b 7c 24 18 e8 7b 4d b3 f7 48 8b 54 24 18 e9 51 f9 ff ff e8 fc 2e 28 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 2b 65 69 f7 e8 26 65 69 f7 48 c7 c7 e0 fc b1 8c 31 f6 31 d2 b9 [11054.693345][ C0] RSP: 0018:ffffc9000333fa58 EFLAGS: 00000283 [11054.699442][ C0] RAX: 0000000000000001 RBX: 00000000000002cb RCX: 1ffff1100f99c038 [11054.707434][ C0] RDX: 0000000000000000 RSI: 00000000000002cb RDI: ffffffff8af9f2c0 [11054.715434][ C0] RBP: ffffc9000333fb98 R08: dffffc0000000000 R09: fffffbfff1c150ee [11054.723429][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806263a800 [11054.731418][ C0] R13: ffff88807cce01c0 R14: ffff888023a6d658 R15: dffffc0000000000 [11054.739429][ C0] batadv_iv_ogm_schedule+0x429/0x1000 [11054.744926][ C0] ? skb_push+0x93/0x100 [11054.749213][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [11054.756433][ C0] ? batadv_send_skb_packet+0x3bc/0x5f0 [11054.762403][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [11054.769477][ C0] process_one_work+0x8a1/0x10c0 [11054.774529][ C0] ? worker_detach_from_pool+0x260/0x260 [11054.780193][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [11054.785890][ C0] ? kthread_data+0x4e/0xc0 [11054.790418][ C0] ? wq_worker_running+0x97/0x170 [11054.795468][ C0] worker_thread+0xaca/0x1280 [11054.800200][ C0] kthread+0x3f6/0x4f0 [11054.804293][ C0] ? rcu_lock_release+0x20/0x20 [11054.809167][ C0] ? kthread_blkcg+0xd0/0xd0 [11054.813783][ C0] ret_from_fork+0x1f/0x30 [11054.818237][ C0] [11054.821314][ C0] rcu: rcu_preempt kthread starved for 9679 jiffies! g24749 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [11054.832553][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [11054.842536][ C0] rcu: RCU grace-period kthread stack dump: [11054.848434][ C0] task:rcu_preempt state:R running task stack:27064 pid: 15 ppid: 2 flags:0x00004000 [11054.859231][ C0] Call Trace: [11054.862526][ C0] [11054.865570][ C0] __schedule+0x12c4/0x45b0 [11054.870189][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [11054.876178][ C0] ? release_firmware_map_entry+0x190/0x190 [11054.882109][ C0] ? mod_timer_pending+0x20/0x20 [11054.887092][ C0] ? lockdep_softirqs_off+0x420/0x420 [11054.892498][ C0] schedule+0x11b/0x1f0 [11054.896677][ C0] schedule_timeout+0x1b9/0x300 [11054.901548][ C0] ? console_conditional_schedule+0x40/0x40 [11054.907476][ C0] ? update_process_times+0x200/0x200 [11054.912887][ C0] ? prepare_to_swait_event+0x321/0x340 [11054.918457][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [11054.923335][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [11054.928553][ C0] ? dyntick_save_progress_counter+0x230/0x230 [11054.934748][ C0] ? rcu_gp_init+0xdae/0x1140 [11054.939457][ C0] ? rcu_gp_init+0x1140/0x1140 [11054.944249][ C0] ? finish_swait+0xc5/0x1d0 [11054.948867][ C0] rcu_gp_kthread+0xa4/0x360 [11054.953491][ C0] ? _raw_spin_unlock+0x40/0x40 [11054.958370][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [11054.963501][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [11054.969511][ C0] ? __kthread_parkme+0x15c/0x1c0 [11054.974660][ C0] kthread+0x3f6/0x4f0 [11054.978751][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [11054.984186][ C0] ? kthread_blkcg+0xd0/0xd0 [11054.988799][ C0] ret_from_fork+0x1f/0x30 [11054.993250][ C0] [11054.996282][ C0] rcu: Stack dump where RCU GP kthread last ran: [11055.002627][ C0] NMI backtrace for cpu 0 [11055.006972][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.178-syzkaller #0 [11055.014790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [11055.024855][ C0] Call Trace: [11055.028581][ C0] [11055.031435][ C0] dump_stack_lvl+0x1e3/0x2d0 [11055.036139][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [11055.041792][ C0] ? panic+0x860/0x860 [11055.045892][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [11055.050857][ C0] ? __wake_up_klogd+0xd5/0x100 [11055.055735][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [11055.061911][ C0] ? _printk+0xd1/0x120 [11055.066097][ C0] ? cpu_online+0x1f/0x40 [11055.070468][ C0] ? panic+0x860/0x860 [11055.074559][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [11055.080646][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [11055.086653][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [11055.092835][ C0] print_other_cpu_stall+0x137a/0x14d0 [11055.098336][ C0] ? print_cpu_stall+0x600/0x600 [11055.103298][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [11055.108352][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [11055.113577][ C0] rcu_sched_clock_irq+0xa38/0x1150 [11055.118903][ C0] ? rcutree_dead_cpu+0x20/0x20 [11055.123777][ C0] ? hrtimer_run_queues+0x163/0x450 [11055.128997][ C0] ? account_process_tick+0x232/0x3a0 [11055.134393][ C0] update_process_times+0x196/0x200 [11055.139617][ C0] tick_sched_timer+0x386/0x550 [11055.144490][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [11055.150058][ C0] __hrtimer_run_queues+0x55b/0xcf0 [11055.155301][ C0] ? hrtimer_interrupt+0x980/0x980 [11055.160427][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [11055.166520][ C0] hrtimer_interrupt+0x392/0x980 [11055.171499][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [11055.177597][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [11055.183340][ C0] [11055.186279][ C0] [11055.189226][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [11055.195227][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [11055.201086][ C0] Code: a5 37 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 84 1f 3e f7 0f 1f 44 00 00 e8 1a a1 37 f7 0f 00 2d a3 4f bb 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 db 89 81 f7 [11055.220734][ C0] RSP: 0018:ffffffff8c807b80 EFLAGS: 000002d3 [11055.227271][ C0] RAX: ffffffff8a48e476 RBX: 0000000000000000 RCX: ffffffff8c8bd680 [11055.235264][ C0] RDX: 0000000000000000 RSI: ffffffff8aab2b80 RDI: ffffffff8af9f2c0 [11055.243342][ C0] RBP: ffffffff8c807c10 R08: ffffffff81870420 R09: fffffbfff1917ad1 [11055.251332][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1900f70 [11055.259319][ C0] R13: ffff888146254004 R14: ffffffff8c807ba0 R15: dffffc0000000000 [11055.267321][ C0] ? trace_hardirqs_on+0x30/0x80 [11055.272289][ C0] ? acpi_idle_do_entry+0x106/0x340 [11055.277520][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [11055.282737][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [11055.288302][ C0] ? rcu_qs+0x190/0x190 [11055.292481][ C0] acpi_idle_enter+0x352/0x4f0 [11055.297271][ C0] cpuidle_enter_state+0x521/0xef0 [11055.302414][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [11055.307818][ C0] ? tick_nohz_idle_stop_tick+0x246/0xa70 [11055.313576][ C0] cpuidle_enter+0x59/0x90 [11055.318034][ C0] do_idle+0x3e4/0x670 [11055.322138][ C0] ? idle_inject_timer_fn+0x60/0x60 [11055.327358][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [11055.333019][ C0] ? schedule_idle+0x57/0x90 [11055.337636][ C0] cpu_startup_entry+0x14/0x20 [11055.342457][ C0] ? time_init+0x40/0x40 [11055.346721][ C0] start_kernel+0x48c/0x540 [11055.351254][ C0] secondary_startup_64_no_verify+0xb1/0xbb [11055.357184][ C0]