last executing test programs: 4.812004829s ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x32, 0x10122, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0xa000000a}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x88}, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x39}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, 0x0, 0x0, 0x4, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0xf0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.624949973s ago: executing program 3 (id=6): dup(0xffffffffffffffff) userfaultfd(0x80001) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3.561337769s ago: executing program 2 (id=3): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 3.288810595s ago: executing program 1 (id=2): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f000001f900)='2', 0x1, 0x8000c63) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2.633340028s ago: executing program 0 (id=1): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r0, 0x10, 0x30, 0x30, 0x0, @ib={0x1b, 0x4f53, 0xffff, {"15bf3c0782bafb0045c4377b8e39aed9"}, 0x7c4fd0a9, 0xa6, 0x5e}, @ib={0x1b, 0x38e, 0x0, {}, 0x9, 0x0, 0x8}}}, 0x118) epoll_create(0x76f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x8010, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x101}}, './file0\x00'}) tee(r5, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x3000000, 0x1000, 0x1}}) 2.492732061s ago: executing program 3 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mount(0x0, 0x0, 0x0, 0x16, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200fe80"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x0) 2.453846775s ago: executing program 2 (id=8): mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0xac5309fb722a316e, 0x4018831, 0xffffffffffffffff, 0x0) 1.079876857s ago: executing program 3 (id=9): dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = inotify_init() r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) tkill(r2, 0xb) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) inotify_add_watch(r0, 0x0, 0xa50003d1) kcmp(r2, r2, 0x4, r1, r3) syz_usb_connect(0x3, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b000100000000090401"], 0x0) 776.997726ms ago: executing program 2 (id=10): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="682ed500000000a1783569ae0000000000000000", 0xfffffdd2}, {&(0x7f00000001c0)="29235f8b92d8a00700000000000000442aba329c9f1dc1d202c0c12aefdeed8e463a935ef4418b81b79ec3019db723e26db60936b09359c37bbb7c353cf6f339e32000"/76, 0x4c}], 0x2, 0x0, 0x0, 0x40011}, 0x20040000) 704.579343ms ago: executing program 4 (id=5): syz_open_procfs(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) 0s ago: executing program 0 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0xc) connect$x25(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xa090}, 0x20000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, 0x0, 0x4000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000040)=0x2) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r7, &(0x7f0000002300)=""/175, 0xaf, 0xbb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 72.548876][ T4252] cgroup: Unknown subsys name 'net' [ 72.680642][ T4252] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.266527][ T4252] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.561536][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.569844][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.579481][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.589604][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.594345][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.598795][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.606781][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.612502][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.623501][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.625884][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.632429][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.639540][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.648145][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.656331][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.662552][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.669398][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.675957][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.683803][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.690252][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.703241][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.704347][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.711216][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.717827][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.725113][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.733265][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.738927][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.747318][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.760551][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.780462][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.788425][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.244471][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 77.373705][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 77.407431][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 77.449281][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 77.501938][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.509274][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.518337][ T4263] device bridge_slave_0 entered promiscuous mode [ 77.560905][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.568282][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.576418][ T4266] device bridge_slave_0 entered promiscuous mode [ 77.584287][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.591439][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.599603][ T4263] device bridge_slave_1 entered promiscuous mode [ 77.632481][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.642478][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.650820][ T4266] device bridge_slave_1 entered promiscuous mode [ 77.657916][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 77.697650][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.735665][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.747591][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.768485][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.801317][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.808660][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.817515][ T4275] device bridge_slave_0 entered promiscuous mode [ 77.845624][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.852784][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.860953][ T4281] device bridge_slave_0 entered promiscuous mode [ 77.877991][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.885432][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.893347][ T4275] device bridge_slave_1 entered promiscuous mode [ 77.912350][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.919849][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.928646][ T4281] device bridge_slave_1 entered promiscuous mode [ 77.940103][ T4263] team0: Port device team_slave_0 added [ 77.948667][ T4263] team0: Port device team_slave_1 added [ 77.967369][ T4266] team0: Port device team_slave_0 added [ 77.989035][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.018091][ T4266] team0: Port device team_slave_1 added [ 78.032590][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.096287][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.103313][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.129601][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.143654][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.162263][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.169643][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.178348][ T4264] device bridge_slave_0 entered promiscuous mode [ 78.188761][ T4275] team0: Port device team_slave_0 added [ 78.195660][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.202658][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.228843][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.249959][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.259843][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.266973][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.293074][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.304637][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.311813][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.320747][ T4264] device bridge_slave_1 entered promiscuous mode [ 78.329703][ T4275] team0: Port device team_slave_1 added [ 78.349629][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.356984][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.383229][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.448644][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.461889][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.472596][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.479808][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.505853][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.519945][ T4281] team0: Port device team_slave_0 added [ 78.529125][ T4281] team0: Port device team_slave_1 added [ 78.558676][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.566155][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.592674][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.650400][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.657647][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.683997][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.698564][ T4264] team0: Port device team_slave_0 added [ 78.708237][ T4263] device hsr_slave_0 entered promiscuous mode [ 78.716181][ T4263] device hsr_slave_1 entered promiscuous mode [ 78.728021][ T4266] device hsr_slave_0 entered promiscuous mode [ 78.734894][ T4266] device hsr_slave_1 entered promiscuous mode [ 78.741554][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.749713][ T4266] Cannot create hsr debugfs directory [ 78.755863][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.762843][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.788838][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.799677][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 78.805986][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 78.812212][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 78.821455][ T4264] team0: Port device team_slave_1 added [ 78.874210][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 78.880676][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 78.894310][ T4275] device hsr_slave_0 entered promiscuous mode [ 78.901253][ T4275] device hsr_slave_1 entered promiscuous mode [ 78.908492][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.916317][ T4275] Cannot create hsr debugfs directory [ 78.938455][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.945660][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.972159][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.987817][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.994880][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.020874][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.075305][ T4281] device hsr_slave_0 entered promiscuous mode [ 79.082157][ T4281] device hsr_slave_1 entered promiscuous mode [ 79.088915][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.096676][ T4281] Cannot create hsr debugfs directory [ 79.187078][ T4264] device hsr_slave_0 entered promiscuous mode [ 79.193841][ T4264] device hsr_slave_1 entered promiscuous mode [ 79.200972][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.209755][ T4264] Cannot create hsr debugfs directory [ 79.476971][ T4263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.492345][ T4263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.510399][ T4263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.531366][ T4263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.571609][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.590354][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.618541][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.648570][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.667644][ T4281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.698694][ T4281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.716035][ T4281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.748605][ T4281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.785448][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.796942][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.808458][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.846351][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.873479][ T4264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.888280][ T4264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.902526][ T4264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.939954][ T4264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.972033][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.040027][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.050713][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.077397][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.096913][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.106871][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.116658][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.124098][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.146794][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.157710][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.168823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.180155][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.187369][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.201078][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.226496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.252413][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.267055][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.282307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.291315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.302213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.311815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.321217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.332687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.340804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.349223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.358490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.367210][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.374349][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.382960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.391467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.424621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.433269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.445613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.454891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.463370][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.470536][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.481669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.492252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.511244][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.523543][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.543847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.552579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.562733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.571959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.582030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.592079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.603489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.612561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.622028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.632472][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.648048][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.691838][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.703729][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.721105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.731946][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.745467][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.752618][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.761615][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.769786][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.789861][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.803786][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.826017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.836579][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.846585][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.856914][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.864133][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.874244][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 80.880108][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 80.880413][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 80.901899][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.911224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.926680][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.940499][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.951337][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.960103][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 80.966566][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 80.977734][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.986788][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.997129][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.004394][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.020083][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.041815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.053164][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.062123][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.070470][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.081905][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.092456][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.102004][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.112251][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.119485][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.134370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.143538][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.156432][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.163709][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.183171][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.198251][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.221371][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.231865][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.242850][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.259335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.271999][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.288565][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.300961][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.313105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.328836][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.385329][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.393242][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.403490][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.422272][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.429532][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.440841][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.451848][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.461666][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.516581][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.527291][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.560963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.585413][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.602052][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.611803][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.627254][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.640244][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.652069][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.668005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.680171][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.692503][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.708126][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.717961][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.742223][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.766823][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.786601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.811827][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.830605][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.855213][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.873071][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.912106][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.922164][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.991188][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.013234][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.072290][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.085382][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.123305][ T4263] device veth0_vlan entered promiscuous mode [ 82.154745][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.175140][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.194572][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.202129][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.215827][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.227548][ T4263] device veth1_vlan entered promiscuous mode [ 82.270187][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.291184][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.300327][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.340596][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.359160][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.372855][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.382734][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.425163][ T4263] device veth0_macvtap entered promiscuous mode [ 82.442495][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.451856][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.461110][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.502109][ T4281] device veth0_vlan entered promiscuous mode [ 82.511317][ T4263] device veth1_macvtap entered promiscuous mode [ 82.538830][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.556085][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.575885][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.595018][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.615262][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.636083][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.653097][ T4281] device veth1_vlan entered promiscuous mode [ 82.681912][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.699447][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.710851][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.729910][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.740768][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.757055][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.766037][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.774751][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.786330][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.799815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.809677][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.823426][ T4275] device veth0_vlan entered promiscuous mode [ 82.842823][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.852027][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.860829][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.871768][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.883065][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.897207][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.907292][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.931772][ T4275] device veth1_vlan entered promiscuous mode [ 82.949391][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.956846][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 82.962902][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 82.970741][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 83.018368][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.034606][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 83.040686][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 83.048008][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.062254][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.072096][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.087376][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.099013][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.115913][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.138704][ T4281] device veth0_macvtap entered promiscuous mode [ 83.157968][ T4281] device veth1_macvtap entered promiscuous mode [ 83.215048][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.228418][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.240845][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.254686][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.262968][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.283199][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.292551][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.305501][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.314636][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.329605][ T4275] device veth0_macvtap entered promiscuous mode [ 83.348273][ T4275] device veth1_macvtap entered promiscuous mode [ 83.388343][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.399990][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.412939][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.451469][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.471803][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.482005][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.499826][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.511668][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.549335][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.561395][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.570047][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.579164][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.588780][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.598812][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.610478][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.619821][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.632096][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.641752][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651259][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.660430][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.673332][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.690272][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.700267][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.710926][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.723795][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.746071][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.755283][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.762756][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.779271][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.789121][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.799475][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.808556][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.820040][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.830042][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.840966][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.850071][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.870883][ T4266] device veth0_vlan entered promiscuous mode [ 83.911306][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.925437][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.947029][ T4266] device veth1_vlan entered promiscuous mode [ 84.021233][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.044190][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.057395][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.071257][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.084694][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.092674][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.101551][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.125005][ T4266] device veth0_macvtap entered promiscuous mode [ 84.162827][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.190240][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.199418][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.211471][ T4266] device veth1_macvtap entered promiscuous mode [ 84.266691][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.279267][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.291532][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.323818][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.334089][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.346081][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.356645][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.368578][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.380635][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.400542][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.415505][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.423617][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.437515][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.449812][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.462473][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.478541][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.492474][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.623067][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.631249][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.645841][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.668389][ T4264] device veth0_vlan entered promiscuous mode [ 84.682147][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.693346][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.703626][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.715062][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.750931][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.784937][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.805150][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.071554][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.104204][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 85.110994][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 85.119700][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 85.127015][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 85.133746][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 85.263574][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.294079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.303059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.312329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.333217][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.355480][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.369811][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.379261][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.409561][ T4264] device veth1_vlan entered promiscuous mode [ 85.518257][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.574736][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.622923][ T4264] device veth0_macvtap entered promiscuous mode [ 85.637417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.648457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.658210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.670453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.696326][ T4264] device veth1_macvtap entered promiscuous mode [ 85.758903][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.797342][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.815995][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.838883][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.854542][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.865409][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.876321][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.895681][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.909052][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.922499][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.935458][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.949961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.961565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.976211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.990204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.012074][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.023317][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.033745][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.044748][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.055783][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.066587][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.077837][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.089307][ T4399] loop1: detected capacity change from 0 to 8192 [ 86.096495][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.111202][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.135576][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.147979][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.152844][ T4399] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.173595][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.183756][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.186192][ T4399] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 86.202359][ T4399] REISERFS (device loop1): using ordered data mode [ 86.209854][ T4399] reiserfs: using flush barriers [ 86.221188][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.221245][ T4399] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.248786][ T4399] REISERFS (device loop1): checking transaction log (loop1) [ 86.264110][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.282051][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.294403][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.317356][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.522055][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.580810][ T4399] REISERFS (device loop1): Using tea hash to sort names [ 86.591353][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.630799][ T4399] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 86.687421][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.721113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.805489][ T128] cfg80211: failed to load regulatory.db [ 86.954547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.963947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.972281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 86.980601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 86.988917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 86.997215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.006192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.014515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.023921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.823444][ T4411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 87.824783][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.833529][ T4412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 88.178686][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.207514][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.386054][ T4399] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 88.594322][ T4423] process 'syz.3.9' launched '/dev/fd/-1' with NULL argv: empty string added [ 88.665132][ T4399] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 89.101163][ T4399] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 1) [ 89.145174][ T4399] ================================================================== [ 89.153414][ T4399] BUG: KASAN: out-of-bounds in leaf_paste_in_buffer+0x1de/0xaa0 [ 89.161128][ T4399] Read of size 18446744073709493643 at addr ffff88805415e275 by task syz.1.2/4399 [ 89.170366][ T4399] [ 89.172745][ T4399] CPU: 1 PID: 4399 Comm: syz.1.2 Not tainted syzkaller #0 [ 89.179894][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.190005][ T4399] Call Trace: [ 89.193312][ T4399] [ 89.196275][ T4399] dump_stack_lvl+0x168/0x22e [ 89.201016][ T4399] ? __lock_acquire+0x7c50/0x7c50 [ 89.206080][ T4399] ? show_regs_print_info+0x12/0x12 [ 89.211319][ T4399] ? load_image+0x3b0/0x3b0 [ 89.215859][ T4399] ? __virt_addr_valid+0x465/0x540 [ 89.221002][ T4399] ? leaf_paste_in_buffer+0x1de/0xaa0 [ 89.226408][ T4399] print_report+0xa8/0x210 [ 89.230878][ T4399] kasan_report+0x10b/0x140 [ 89.235410][ T4399] ? mark_lock+0x94/0x320 [ 89.239787][ T4399] ? leaf_paste_in_buffer+0x1de/0xaa0 [ 89.245187][ T4399] ? leaf_paste_in_buffer+0x1de/0xaa0 [ 89.250595][ T4399] kasan_check_range+0x27b/0x290 [ 89.255579][ T4399] memmove+0x25/0x60 [ 89.259498][ T4399] leaf_paste_in_buffer+0x1de/0xaa0 [ 89.264733][ T4399] leaf_copy_boundary_item+0xc75/0x2190 [ 89.270315][ T4399] leaf_move_items+0x84a/0xde0 [ 89.275105][ T4399] ? reiserfs_convert_objectid_map_v1+0x4f0/0x4f0 [ 89.281559][ T4399] leaf_shift_left+0xb9/0x450 [ 89.286262][ T4399] balance_leaf+0x2fb7/0x10e60 [ 89.291059][ T4399] ? unwind_get_return_address+0x49/0x80 [ 89.296723][ T4399] ? stack_trace_save+0xe0/0xe0 [ 89.301603][ T4399] ? arch_stack_walk+0xf2/0x140 [ 89.306527][ T4399] ? do_balance+0x930/0x930 [ 89.311070][ T4399] ? __mutex_trylock_common+0x14f/0x250 [ 89.316649][ T4399] ? trace_raw_output_contention_end+0xd0/0xd0 [ 89.322833][ T4399] ? rcu_is_watching+0x11/0xa0 [ 89.327628][ T4399] ? trace_contention_end+0x5f/0x170 [ 89.332948][ T4399] ? __mutex_lock+0x19e/0xaf0 [ 89.337670][ T4399] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 89.343340][ T4399] ? reiserfs_write_lock_nested+0x5c/0xd0 [ 89.349092][ T4399] ? mutex_lock_nested+0x10/0x10 [ 89.354061][ T4399] ? get_empty_nodes+0x431/0x8c0 [ 89.359032][ T4399] ? __wake_up+0x190/0x190 [ 89.363481][ T4399] ? indirect_is_left_mergeable+0xe1/0x180 [ 89.369324][ T4399] ? indirect_decrement_key+0x90/0x90 [ 89.374731][ T4399] ? get_neighbors+0x1030/0x1030 [ 89.379706][ T4399] ? create_virtual_node+0x1fd/0x1c60 [ 89.385121][ T4399] ? reiserfs_write_lock_nested+0x5c/0xd0 [ 89.390880][ T4399] ? get_neighbors+0x9ba/0x1030 [ 89.395771][ T4399] ? reiserfs_prepare_for_journal+0x267/0x280 [ 89.401873][ T4399] ? fix_nodes+0x7b26/0x82d0 [ 89.406505][ T4399] do_balance+0x2fa/0x930 [ 89.410881][ T4399] ? get_right_neighbor_position+0x210/0x210 [ 89.416944][ T4399] ? preempt_count_add+0x8d/0x190 [ 89.422005][ T4399] reiserfs_paste_into_item+0x69b/0x7e0 [ 89.427602][ T4399] ? reiserfs_cut_from_item+0x1ef0/0x1ef0 [ 89.433378][ T4399] ? __kmem_cache_alloc_node+0x140/0x260 [ 89.439041][ T4399] ? reiserfs_get_block+0x152d/0x3ef0 [ 89.444458][ T4399] ? rcu_is_watching+0x11/0xa0 [ 89.449260][ T4399] ? reiserfs_get_block+0x152d/0x3ef0 [ 89.454665][ T4399] ? __kmalloc+0xe1/0x240 [ 89.459039][ T4399] reiserfs_get_block+0x1bdc/0x3ef0 [ 89.464274][ T4399] ? look_up_lock_class+0x75/0x140 [ 89.469430][ T4399] ? make_le_item_head+0x510/0x510 [ 89.474570][ T4399] ? mark_lock+0x94/0x320 [ 89.478937][ T4399] ? mod_objcg_state+0x507/0x890 [ 89.483903][ T4399] ? verify_lock_unused+0x140/0x140 [ 89.489142][ T4399] ? lockdep_init_map_type+0x9d/0x880 [ 89.494551][ T4399] ? alloc_buffer_head+0xd4/0x100 [ 89.499602][ T4399] ? __lock_acquire+0x7c50/0x7c50 [ 89.504658][ T4399] ? attach_page_private+0x110/0x300 [ 89.509975][ T4399] ? do_raw_spin_unlock+0x11d/0x230 [ 89.515208][ T4399] ? create_page_buffers+0x24f/0x4a0 [ 89.520529][ T4399] __block_write_begin_int+0x54b/0x1a70 [ 89.526116][ T4399] ? filemap_add_folio+0x188/0x3c0 [ 89.531262][ T4399] ? xas_load+0x119/0x140 [ 89.535645][ T4399] ? make_le_item_head+0x510/0x510 [ 89.540787][ T4399] ? page_zero_new_buffers+0x650/0x650 [ 89.546285][ T4399] ? pagecache_get_page+0x17/0x250 [ 89.551427][ T4399] ? __block_write_begin+0x60/0x150 [ 89.556669][ T4399] reiserfs_write_begin+0x206/0x4c0 [ 89.561931][ T4399] ? fault_in_iov_iter_readable+0xbb/0x2e0 [ 89.567767][ T4399] generic_perform_write+0x2f7/0x5a0 [ 89.573084][ T4399] ? generic_file_direct_write+0x330/0x330 [ 89.578917][ T4399] ? __file_remove_privs+0x5b0/0x5b0 [ 89.584226][ T4399] ? rwsem_write_trylock+0x12f/0x1b0 [ 89.589547][ T4399] ? clear_nonspinnable+0x60/0x60 [ 89.594607][ T4399] ? generic_write_checks_count+0x3d9/0x4c0 [ 89.600537][ T4399] __generic_file_write_iter+0x148/0x2a0 [ 89.606208][ T4399] generic_file_write_iter+0xab/0x2e0 [ 89.611618][ T4399] vfs_write+0x44c/0x960 [ 89.615900][ T4399] ? file_end_write+0x250/0x250 [ 89.620791][ T4399] ? __fget_files+0x44a/0x4d0 [ 89.625508][ T4399] ? __fdget+0x17c/0x200 [ 89.629811][ T4399] ? __x64_sys_pwrite64+0xec/0x220 [ 89.634970][ T4399] __x64_sys_pwrite64+0x191/0x220 [ 89.640023][ T4399] ? ksys_pwrite64+0x1b0/0x1b0 [ 89.644824][ T4399] ? lockdep_hardirqs_on+0x94/0x140 [ 89.650048][ T4399] do_syscall_64+0x4c/0xa0 [ 89.654531][ T4399] ? clear_bhb_loop+0x60/0xb0 [ 89.659238][ T4399] ? clear_bhb_loop+0x60/0xb0 [ 89.663953][ T4399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.669872][ T4399] RIP: 0033:0x7fb036b8f749 [ 89.674327][ T4399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.693970][ T4399] RSP: 002b:00007fb0379f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 89.702406][ T4399] RAX: ffffffffffffffda RBX: 00007fb036de5fa0 RCX: 00007fb036b8f749 [ 89.710409][ T4399] RDX: 0000000000000001 RSI: 000020000001f900 RDI: 0000000000000006 [ 89.718420][ T4399] RBP: 00007fb036c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 89.726420][ T4399] R10: 0000000008000c63 R11: 0000000000000246 R12: 0000000000000000 [ 89.734409][ T4399] R13: 00007fb036de6038 R14: 00007fb036de5fa0 R15: 00007ffd4e986448 [ 89.742519][ T4399] [ 89.745578][ T4399] [ 89.747916][ T4399] The buggy address belongs to the physical page: [ 89.754353][ T4399] page:ffffea0001505780 refcount:1 mapcount:1 mapping:0000000000000000 index:0x7ff55d718 pfn:0x5415e [ 89.765218][ T4399] memcg:ffff88807c2d8000 [ 89.769468][ T4399] anon flags: 0xfff800000a0014(uptodate|lru|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 89.780268][ T4399] raw: 00fff800000a0014 ffffea0001505748 ffffea00015057c8 ffff88805b81b881 [ 89.788884][ T4399] raw: 00000007ff55d718 0000000000000000 0000000100000000 ffff88807c2d8000 [ 89.797485][ T4399] page dumped because: kasan: bad access detected [ 89.803956][ T4399] page_owner tracks the page as allocated [ 89.809688][ T4399] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4281, tgid 4281 (syz-executor), ts 88192072634, free_ts 87950805091 [ 89.827525][ T4399] post_alloc_hook+0x173/0x1a0 [ 89.832321][ T4399] get_page_from_freelist+0x1a26/0x1ac0 [ 89.837892][ T4399] __alloc_pages+0x1df/0x4e0 [ 89.842513][ T4399] __folio_alloc+0xe/0x30 [ 89.846872][ T4399] vma_alloc_folio+0x4a3/0x900 [ 89.851663][ T4399] wp_page_copy+0x26c/0x1640 [ 89.856277][ T4399] handle_mm_fault+0x1ca6/0x3e60 [ 89.861249][ T4399] do_user_addr_fault+0x51f/0xb10 [ 89.866295][ T4399] exc_page_fault+0x60/0x100 [ 89.870915][ T4399] asm_exc_page_fault+0x22/0x30 [ 89.875793][ T4399] page last free stack trace: [ 89.880487][ T4399] free_unref_page_prepare+0x8b4/0x9a0 [ 89.885973][ T4399] free_unref_page_list+0xbb/0x8e0 [ 89.891111][ T4399] release_pages+0x1f92/0x2200 [ 89.895900][ T4399] __pagevec_release+0x6d/0xe0 [ 89.900697][ T4399] shmem_undo_range+0x75b/0x2050 [ 89.905680][ T4399] shmem_evict_inode+0x248/0xa40 [ 89.910650][ T4399] evict+0x485/0x870 [ 89.914570][ T4399] __dentry_kill+0x431/0x650 [ 89.919274][ T4399] dentry_kill+0xb8/0x290 [ 89.923630][ T4399] dput+0xfa/0x1d0 [ 89.927376][ T4399] __fput+0x5e0/0x920 [ 89.931384][ T4399] task_work_run+0x1ca/0x250 [ 89.936005][ T4399] do_exit+0x93e/0x2400 [ 89.940187][ T4399] do_group_exit+0x217/0x2d0 [ 89.944812][ T4399] get_signal+0x1272/0x1350 [ 89.949348][ T4399] arch_do_signal_or_restart+0xb7/0x1240 [ 89.955010][ T4399] [ 89.957367][ T4399] Memory state around the buggy address: [ 89.963024][ T4399] ffff88805415e100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.971124][ T4399] ffff88805415e180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.979237][ T4399] >ffff88805415e200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.987435][ T4399] ^ [ 89.995174][ T4399] ffff88805415e280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.003264][ T4399] ffff88805415e300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.011360][ T4399] ================================================================== [ 90.199458][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.208048][ T4399] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.215277][ T4399] CPU: 0 PID: 4399 Comm: syz.1.2 Not tainted syzkaller #0 [ 90.222421][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.232516][ T4399] Call Trace: [ 90.235814][ T4399] [ 90.238774][ T4399] dump_stack_lvl+0x168/0x22e [ 90.243487][ T4399] ? memcpy+0x3c/0x60 [ 90.247497][ T4399] ? show_regs_print_info+0x12/0x12 [ 90.252744][ T4399] ? load_image+0x3b0/0x3b0 [ 90.257301][ T4399] panic+0x2c9/0x710 [ 90.261222][ T4399] ? bpf_jit_dump+0xd0/0xd0 [ 90.265750][ T4399] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 90.271662][ T4399] ? _raw_spin_unlock+0x40/0x40 [ 90.276533][ T4399] ? print_memory_metadata+0x314/0x400 [ 90.282020][ T4399] check_panic_on_warn+0x80/0xa0 [ 90.286985][ T4399] ? leaf_paste_in_buffer+0x1de/0xaa0 [ 90.292376][ T4399] end_report+0x66/0x110 [ 90.296652][ T4399] kasan_report+0x118/0x140 [ 90.301184][ T4399] ? mark_lock+0x94/0x320 [ 90.305542][ T4399] ? leaf_paste_in_buffer+0x1de/0xaa0 [ 90.310936][ T4399] ? leaf_paste_in_buffer+0x1de/0xaa0 [ 90.316328][ T4399] kasan_check_range+0x27b/0x290 [ 90.321288][ T4399] memmove+0x25/0x60 [ 90.325202][ T4399] leaf_paste_in_buffer+0x1de/0xaa0 [ 90.330430][ T4399] leaf_copy_boundary_item+0xc75/0x2190 [ 90.336016][ T4399] leaf_move_items+0x84a/0xde0 [ 90.340823][ T4399] ? reiserfs_convert_objectid_map_v1+0x4f0/0x4f0 [ 90.347268][ T4399] leaf_shift_left+0xb9/0x450 [ 90.351962][ T4399] balance_leaf+0x2fb7/0x10e60 [ 90.356757][ T4399] ? unwind_get_return_address+0x49/0x80 [ 90.362417][ T4399] ? stack_trace_save+0xe0/0xe0 [ 90.367294][ T4399] ? arch_stack_walk+0xf2/0x140 [ 90.372180][ T4399] ? do_balance+0x930/0x930 [ 90.376709][ T4399] ? __mutex_trylock_common+0x14f/0x250 [ 90.382280][ T4399] ? trace_raw_output_contention_end+0xd0/0xd0 [ 90.388460][ T4399] ? rcu_is_watching+0x11/0xa0 [ 90.393256][ T4399] ? trace_contention_end+0x5f/0x170 [ 90.398569][ T4399] ? __mutex_lock+0x19e/0xaf0 [ 90.403299][ T4399] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 90.408958][ T4399] ? reiserfs_write_lock_nested+0x5c/0xd0 [ 90.414711][ T4399] ? mutex_lock_nested+0x10/0x10 [ 90.419680][ T4399] ? get_empty_nodes+0x431/0x8c0 [ 90.424652][ T4399] ? __wake_up+0x190/0x190 [ 90.429091][ T4399] ? indirect_is_left_mergeable+0xe1/0x180 [ 90.434919][ T4399] ? indirect_decrement_key+0x90/0x90 [ 90.440324][ T4399] ? get_neighbors+0x1030/0x1030 [ 90.445299][ T4399] ? create_virtual_node+0x1fd/0x1c60 [ 90.450698][ T4399] ? reiserfs_write_lock_nested+0x5c/0xd0 [ 90.456449][ T4399] ? get_neighbors+0x9ba/0x1030 [ 90.461335][ T4399] ? reiserfs_prepare_for_journal+0x267/0x280 [ 90.467427][ T4399] ? fix_nodes+0x7b26/0x82d0 [ 90.472057][ T4399] do_balance+0x2fa/0x930 [ 90.476497][ T4399] ? get_right_neighbor_position+0x210/0x210 [ 90.482509][ T4399] ? preempt_count_add+0x8d/0x190 [ 90.487571][ T4399] reiserfs_paste_into_item+0x69b/0x7e0 [ 90.493144][ T4399] ? reiserfs_cut_from_item+0x1ef0/0x1ef0 [ 90.498912][ T4399] ? __kmem_cache_alloc_node+0x140/0x260 [ 90.504567][ T4399] ? reiserfs_get_block+0x152d/0x3ef0 [ 90.509964][ T4399] ? rcu_is_watching+0x11/0xa0 [ 90.514791][ T4399] ? reiserfs_get_block+0x152d/0x3ef0 [ 90.520186][ T4399] ? __kmalloc+0xe1/0x240 [ 90.524550][ T4399] reiserfs_get_block+0x1bdc/0x3ef0 [ 90.529770][ T4399] ? look_up_lock_class+0x75/0x140 [ 90.534924][ T4399] ? make_le_item_head+0x510/0x510 [ 90.540058][ T4399] ? mark_lock+0x94/0x320 [ 90.544425][ T4399] ? mod_objcg_state+0x507/0x890 [ 90.549388][ T4399] ? verify_lock_unused+0x140/0x140 [ 90.554630][ T4399] ? lockdep_init_map_type+0x9d/0x880 [ 90.560036][ T4399] ? alloc_buffer_head+0xd4/0x100 [ 90.565097][ T4399] ? __lock_acquire+0x7c50/0x7c50 [ 90.570154][ T4399] ? attach_page_private+0x110/0x300 [ 90.575498][ T4399] ? do_raw_spin_unlock+0x11d/0x230 [ 90.580728][ T4399] ? create_page_buffers+0x24f/0x4a0 [ 90.586047][ T4399] __block_write_begin_int+0x54b/0x1a70 [ 90.591651][ T4399] ? filemap_add_folio+0x188/0x3c0 [ 90.596782][ T4399] ? xas_load+0x119/0x140 [ 90.601142][ T4399] ? make_le_item_head+0x510/0x510 [ 90.606278][ T4399] ? page_zero_new_buffers+0x650/0x650 [ 90.611767][ T4399] ? pagecache_get_page+0x17/0x250 [ 90.616905][ T4399] ? __block_write_begin+0x60/0x150 [ 90.622131][ T4399] reiserfs_write_begin+0x206/0x4c0 [ 90.627361][ T4399] ? fault_in_iov_iter_readable+0xbb/0x2e0 [ 90.633195][ T4399] generic_perform_write+0x2f7/0x5a0 [ 90.638560][ T4399] ? generic_file_direct_write+0x330/0x330 [ 90.644398][ T4399] ? __file_remove_privs+0x5b0/0x5b0 [ 90.649713][ T4399] ? rwsem_write_trylock+0x12f/0x1b0 [ 90.655020][ T4399] ? clear_nonspinnable+0x60/0x60 [ 90.660065][ T4399] ? generic_write_checks_count+0x3d9/0x4c0 [ 90.665994][ T4399] __generic_file_write_iter+0x148/0x2a0 [ 90.671658][ T4399] generic_file_write_iter+0xab/0x2e0 [ 90.677067][ T4399] vfs_write+0x44c/0x960 [ 90.681346][ T4399] ? file_end_write+0x250/0x250 [ 90.686222][ T4399] ? __fget_files+0x44a/0x4d0 [ 90.690925][ T4399] ? __fdget+0x17c/0x200 [ 90.695193][ T4399] ? __x64_sys_pwrite64+0xec/0x220 [ 90.700338][ T4399] __x64_sys_pwrite64+0x191/0x220 [ 90.705393][ T4399] ? ksys_pwrite64+0x1b0/0x1b0 [ 90.710190][ T4399] ? lockdep_hardirqs_on+0x94/0x140 [ 90.715417][ T4399] do_syscall_64+0x4c/0xa0 [ 90.719864][ T4399] ? clear_bhb_loop+0x60/0xb0 [ 90.724567][ T4399] ? clear_bhb_loop+0x60/0xb0 [ 90.729276][ T4399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.735196][ T4399] RIP: 0033:0x7fb036b8f749 [ 90.739631][ T4399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.759264][ T4399] RSP: 002b:00007fb0379f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 90.767712][ T4399] RAX: ffffffffffffffda RBX: 00007fb036de5fa0 RCX: 00007fb036b8f749 [ 90.775710][ T4399] RDX: 0000000000000001 RSI: 000020000001f900 RDI: 0000000000000006 [ 90.783708][ T4399] RBP: 00007fb036c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 90.791702][ T4399] R10: 0000000008000c63 R11: 0000000000000246 R12: 0000000000000000 [ 90.799695][ T4399] R13: 00007fb036de6038 R14: 00007fb036de5fa0 R15: 00007ffd4e986448 [ 90.807691][ T4399] [ 90.811295][ T4399] Kernel Offset: disabled [ 90.815718][ T4399] Rebooting in 86400 seconds..