last executing test programs: 1m10.842752472s ago: executing program 2 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000f40)=0xffffffff, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m9.870578996s ago: executing program 2 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m8.755378564s ago: executing program 2 (id=91): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket(0xa, 0x3, 0x87) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) 1m8.297209336s ago: executing program 2 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) write(r0, &(0x7f0000000280)="ff80", 0x2) 1m7.575539594s ago: executing program 2 (id=105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) brk(0x200000ffc000) 1m6.53198594s ago: executing program 2 (id=112): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.12821291s ago: executing program 32 (id=112): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 32.935937313s ago: executing program 4 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 32.578231983s ago: executing program 4 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x20008080, 0x0, 0x0, 0x0, 0x0, 0x0) 32.197233812s ago: executing program 4 (id=353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) 31.712132014s ago: executing program 4 (id=358): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000240)='./bus\x00', 0x14927e, 0x9) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 30.558776413s ago: executing program 4 (id=365): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78628dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 28.129269254s ago: executing program 4 (id=377): pipe2$9p(&(0x7f0000000080), 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 27.718230224s ago: executing program 33 (id=377): pipe2$9p(&(0x7f0000000080), 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 4.41145891s ago: executing program 0 (id=564): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) pread64(r1, &(0x7f0000000180)=""/118, 0x76, 0x6) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.195120045s ago: executing program 0 (id=566): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "ec720d001ef6be99b473d27aef0100008000"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 3.377419696s ago: executing program 5 (id=578): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0ea79", 0x5}], 0x1, &(0x7f0000000540)}], 0x1, 0x40800) 3.171963421s ago: executing program 0 (id=580): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x19, 0x4, 0x8, 0xfffffffc}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x6000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 2.703966522s ago: executing program 3 (id=584): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/32, 0x20}, 0xfffffff4}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.605825135s ago: executing program 5 (id=586): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.495777568s ago: executing program 3 (id=588): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x29) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x20000400) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 2.40933234s ago: executing program 5 (id=589): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x803) 2.319919802s ago: executing program 6 (id=590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) write(r1, &(0x7f0000001000)='\x00\x00', 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) 2.094606458s ago: executing program 0 (id=591): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x40, 0x0, 0x100016b}) close_range(r0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x100]}, 0x8) 2.017528039s ago: executing program 6 (id=592): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r1, r0, 0x0, 0x40001) 1.911998452s ago: executing program 3 (id=593): unshare(0xa020480) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) 1.764279916s ago: executing program 3 (id=594): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x4, 0xb, 0x6, "04000004", "02012000"}}, 0x0}, 0x0) r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) fchdir(0xffffffffffffffff) 1.635988139s ago: executing program 5 (id=595): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x8, 0x80002, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x20, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e6}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.61771644s ago: executing program 1 (id=596): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) 1.332006277s ago: executing program 1 (id=597): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000002400018006000500224e0000060001000200051b08000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.174716701s ago: executing program 3 (id=598): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) timerfd_create(0x4, 0x80000) setreuid(0xffffffffffffffff, 0xee01) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) timer_create(0x2, &(0x7f0000001000)={0x0, 0x13, 0x2, @tid=r0}, 0x0) 1.168304401s ago: executing program 1 (id=599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @remote}, {{0x6e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x606d, 0x0, 0x1ff}}}}}}, 0x0) 957.479966ms ago: executing program 1 (id=600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) listen(r0, 0x0) 956.533226ms ago: executing program 6 (id=601): syz_emit_ethernet(0x62, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000054000000000533907800000000ffffffff210090781200020000000000000000e0000002dffffffc070b7e0a010102e00000014418510000000000000000fa0000000200007fff000001"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 894.982648ms ago: executing program 1 (id=602): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = fanotify_init(0x2, 0x1000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) splice(r3, 0x0, r2, 0x0, 0x20000000000002, 0xa) 782.627461ms ago: executing program 0 (id=603): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x2, 0x80, 0x9, {0x8, 0xb, 0xff, 0xfd, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x10, 0x4e, {0xa, 0x25, 0x25, 0x3, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0x1e00, 0xac, 0x2}}}}}}}}]}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0xa, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 708.122633ms ago: executing program 1 (id=604): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0xfffffeb1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) fallocate(r2, 0x20, 0x4000, 0x8000) 707.548683ms ago: executing program 6 (id=605): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) 523.969527ms ago: executing program 5 (id=606): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x803) 447.285029ms ago: executing program 6 (id=607): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x1000, 0x5, 0x0, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 221.982735ms ago: executing program 5 (id=608): r0 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0x1b4, 0x0) fcntl$setlease(r0, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) mq_open(&(0x7f00000003c0)='syz', 0x40, 0x8, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 148.826517ms ago: executing program 3 (id=609): r0 = openat$kvm(0xffffff9c, &(0x7f00000003c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 113.557278ms ago: executing program 6 (id=610): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 0s ago: executing program 0 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x811}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xe8) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x2500}, {r0, 0x25}], 0x2, 0x3e1) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 59.162754][ T4254] cgroup: Unknown subsys name 'net' [ 59.273190][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.557717][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.816742][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.825145][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.826876][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.832974][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.840753][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.847689][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.854165][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.860948][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.868138][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.874775][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.881837][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.896902][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.942258][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.942463][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.958491][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.966214][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.974309][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.981892][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.989752][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.997263][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.001170][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.013639][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.020885][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.029106][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.037041][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.044818][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.053027][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.061124][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.068655][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.075935][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.197612][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 62.337037][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.344836][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.352819][ T4271] device bridge_slave_0 entered promiscuous mode [ 62.364313][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.371467][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.379590][ T4271] device bridge_slave_1 entered promiscuous mode [ 62.424958][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.462117][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.515541][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 62.534080][ T4271] team0: Port device team_slave_0 added [ 62.543695][ T4271] team0: Port device team_slave_1 added [ 62.560475][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 62.626360][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 62.637493][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.645184][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.671298][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.704241][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.711299][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.737299][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.777583][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 62.852378][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.859618][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.867716][ T4281] device bridge_slave_0 entered promiscuous mode [ 62.898245][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.905375][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.915945][ T4281] device bridge_slave_1 entered promiscuous mode [ 62.930903][ T4271] device hsr_slave_0 entered promiscuous mode [ 62.938014][ T4271] device hsr_slave_1 entered promiscuous mode [ 62.944806][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.952171][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.960399][ T4279] device bridge_slave_0 entered promiscuous mode [ 62.967657][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.974930][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.982906][ T4272] device bridge_slave_0 entered promiscuous mode [ 63.007186][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.014633][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.022612][ T4279] device bridge_slave_1 entered promiscuous mode [ 63.030113][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.037158][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.045941][ T4272] device bridge_slave_1 entered promiscuous mode [ 63.084462][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.095687][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.109850][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.116931][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.124932][ T4280] device bridge_slave_0 entered promiscuous mode [ 63.155986][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.163263][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.171384][ T4280] device bridge_slave_1 entered promiscuous mode [ 63.179917][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.190836][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.224799][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.235700][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.247083][ T4281] team0: Port device team_slave_0 added [ 63.263506][ T4281] team0: Port device team_slave_1 added [ 63.300140][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.325162][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.336941][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.363086][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.375982][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.389861][ T4279] team0: Port device team_slave_0 added [ 63.398526][ T4272] team0: Port device team_slave_0 added [ 63.415478][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.422509][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.451405][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.469248][ T4279] team0: Port device team_slave_1 added [ 63.482947][ T4272] team0: Port device team_slave_1 added [ 63.505647][ T4280] team0: Port device team_slave_0 added [ 63.544470][ T4280] team0: Port device team_slave_1 added [ 63.563557][ T4281] device hsr_slave_0 entered promiscuous mode [ 63.570692][ T4281] device hsr_slave_1 entered promiscuous mode [ 63.577100][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.585245][ T4281] Cannot create hsr debugfs directory [ 63.591284][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.598251][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.624166][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.638468][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.645428][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.671654][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.704011][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.713911][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.740137][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.756281][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.763384][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.791789][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.803277][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.813381][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.839404][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.883654][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.890720][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.916750][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.968749][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 63.974995][ T4273] Bluetooth: hci0: command 0x0409 tx timeout [ 63.984085][ T4279] device hsr_slave_0 entered promiscuous mode [ 63.991540][ T4279] device hsr_slave_1 entered promiscuous mode [ 63.998163][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.005730][ T4279] Cannot create hsr debugfs directory [ 64.030122][ T4272] device hsr_slave_0 entered promiscuous mode [ 64.036919][ T4272] device hsr_slave_1 entered promiscuous mode [ 64.043966][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.051771][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 64.051869][ T4272] Cannot create hsr debugfs directory [ 64.120447][ T4280] device hsr_slave_0 entered promiscuous mode [ 64.127059][ T4280] device hsr_slave_1 entered promiscuous mode [ 64.128323][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 64.137867][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 64.145855][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.153741][ T4280] Cannot create hsr debugfs directory [ 64.272524][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.300362][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.335446][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.373569][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.416389][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.426153][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.449542][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.471643][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.509688][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.520098][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.531444][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.556156][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.622462][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.661834][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.670781][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.703512][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.727402][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.752622][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.761800][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.779953][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.792357][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.802785][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.811937][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.822733][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.834506][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.843602][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.854554][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.861884][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.884004][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.898561][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.922837][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.935049][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.945028][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.952170][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.964111][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.972068][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.991215][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.007097][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.027719][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.038504][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.047241][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.054389][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.063450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.084061][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.093424][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.102017][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.109146][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.119347][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.128208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.153181][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.176113][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.185613][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.195650][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.204571][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.213252][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.222027][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.231060][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.239614][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.248100][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.256582][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.275543][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.300906][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.320434][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.334571][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.344142][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.352435][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.361575][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.371204][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.398374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.408727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.417656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.427259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.439141][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.459301][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.475995][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.484703][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.494735][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.504148][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.511295][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.530577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.542499][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.553331][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.560486][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.576442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.593370][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.621533][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.640735][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.649932][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.662701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.676250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.703310][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.716923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.725112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.735430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.759877][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.776322][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.787698][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.796612][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.805721][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.814821][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.823815][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.834924][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.843756][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.858253][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.881130][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.916621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.930517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.941222][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.948382][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.957635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.972261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.993234][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.000394][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.015651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.024730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.033770][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.040925][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.050132][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 66.050143][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 66.056688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.070784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.091647][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.115121][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.122865][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.130543][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 66.140139][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.160150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.172617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.183589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.194994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.204791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.207941][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 66.214864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.218703][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 66.236253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.244731][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.251824][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.264906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.287519][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.313167][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.323062][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.331940][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.347694][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.361065][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.374177][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.385644][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.396436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.413955][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.424446][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.470357][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.479382][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.492002][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.501602][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.527154][ T4281] device veth0_vlan entered promiscuous mode [ 66.577422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.588014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.596456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.604996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.613616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.622782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.631271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.639655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.647077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.655795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.664800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.673036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.683829][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.706747][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.733469][ T4281] device veth1_vlan entered promiscuous mode [ 66.742973][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.764466][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.784876][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.825759][ T4271] device veth0_vlan entered promiscuous mode [ 66.855232][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.888413][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.897166][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.939811][ T4271] device veth1_vlan entered promiscuous mode [ 66.958620][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.966964][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.976110][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.014299][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.040675][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.062651][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.074204][ T4281] device veth0_macvtap entered promiscuous mode [ 67.092769][ T4271] device veth0_macvtap entered promiscuous mode [ 67.109737][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.138763][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.147510][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.156760][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.170498][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.180339][ T4271] device veth1_macvtap entered promiscuous mode [ 67.200162][ T4281] device veth1_macvtap entered promiscuous mode [ 67.257709][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.273026][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.293573][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.320401][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.345453][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.370537][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.381556][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.390697][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.400724][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.410053][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.432209][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.441353][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.450767][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.459716][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.468817][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.476436][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.484821][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.497587][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.510179][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.539649][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.551293][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.562832][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.577254][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.586557][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.595999][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.604242][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.612639][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.621981][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.633243][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.643887][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.653356][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.662434][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.674504][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.683973][ T4280] device veth0_vlan entered promiscuous mode [ 67.719831][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.733308][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.743619][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.765867][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.781783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.790058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.802573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.812263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.831664][ T4279] device veth0_vlan entered promiscuous mode [ 67.864436][ T4280] device veth1_vlan entered promiscuous mode [ 67.873284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.885354][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.895196][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.921362][ T4272] device veth0_vlan entered promiscuous mode [ 67.950750][ T4279] device veth1_vlan entered promiscuous mode [ 67.957636][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.966164][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.975400][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.983632][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.003409][ T4272] device veth1_vlan entered promiscuous mode [ 68.034183][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.043874][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.052459][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.060989][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.115535][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.125434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.133687][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 68.140206][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 68.141298][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.155907][ T4280] device veth0_macvtap entered promiscuous mode [ 68.175070][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.182508][ T4272] device veth0_macvtap entered promiscuous mode [ 68.189467][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.208177][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 68.214473][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.222924][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.232895][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.241780][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.250980][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.260971][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.270026][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.288331][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 68.291340][ T4279] device veth0_macvtap entered promiscuous mode [ 68.294354][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 68.305288][ T4279] device veth1_macvtap entered promiscuous mode [ 68.314972][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.333923][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.334961][ T4280] device veth1_macvtap entered promiscuous mode [ 68.360674][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.370879][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.381601][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.389887][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.398406][ T4272] device veth1_macvtap entered promiscuous mode [ 68.428222][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.430298][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.436053][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.447550][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.470031][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.481334][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.492424][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.510637][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.515954][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.531230][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.542178][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.553098][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.553995][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.563373][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.581580][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.594861][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.602472][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.612454][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.620343][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.628963][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.637493][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.645751][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.655132][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.672944][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.685816][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.696901][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.707377][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.720079][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.731371][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.745247][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.756654][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.767382][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.778885][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.789460][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.799654][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.810945][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.824829][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.835034][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.846427][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.858355][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.869338][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.879328][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.889885][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.901393][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.909343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.919944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.929701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.938628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.947248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.956264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.984685][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.993782][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.002644][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.012596][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.061971][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.107824][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.118276][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.129047][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.139593][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.150472][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.160652][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.172984][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.189872][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.201541][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.212838][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.223002][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.232765][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.274154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.289514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.308804][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.323081][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.333311][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.351548][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.504912][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.520916][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.542211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.549679][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.557505][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.594111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.609832][ T4351] loop3: detected capacity change from 0 to 40427 [ 69.620290][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.633694][ T4351] F2FS-fs (loop3): invalid crc value [ 69.645432][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.670260][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.672589][ T4351] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.706266][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.716613][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.736981][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.737833][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.783459][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.793074][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.805934][ T4351] F2FS-fs (loop3): Start checkpoint disabled! [ 69.841362][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.856186][ T4351] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 69.862727][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.880804][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.096710][ T4351] syz.3.4: attempt to access beyond end of device [ 70.096710][ T4351] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 70.137527][ T4363] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 70.178800][ T4364] loop0: detected capacity change from 0 to 256 [ 70.188978][ T4364] exfat: Deprecated parameter 'namecase' [ 70.208601][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 70.214679][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 70.288248][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 70.358120][ T4364] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 70.370553][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 70.370590][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 70.537498][ T4375] FAULT_FLAG_ALLOW_RETRY missing 801 [ 70.541779][ T4339] kworker/u4:7: attempt to access beyond end of device [ 70.541779][ T4339] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 70.572046][ T4339] kworker/u4:7: attempt to access beyond end of device [ 70.572046][ T4339] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 70.578125][ T4375] CPU: 1 PID: 4375 Comm: syz.4.9 Not tainted syzkaller #0 [ 70.593347][ T4375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.603439][ T4375] Call Trace: [ 70.606731][ T4375] [ 70.609675][ T4375] dump_stack_lvl+0x188/0x24e [ 70.614399][ T4375] ? show_regs_print_info+0x12/0x12 [ 70.619631][ T4375] ? load_image+0x410/0x410 [ 70.624174][ T4375] handle_userfault+0x108f/0x12d0 [ 70.629237][ T4375] ? free_unref_page+0x193/0x3f0 [ 70.634210][ T4375] ? do_raw_spin_trylock+0xae/0x190 [ 70.639409][ T4375] ? do_eventfd+0x2d0/0x2d0 [ 70.643924][ T4375] ? free_unref_page+0x19d/0x3f0 [ 70.648872][ T4375] handle_mm_fault+0x343a/0x3d40 [ 70.653818][ T4375] ? numa_migrate_prep+0x250/0x250 [ 70.658945][ T4375] __get_user_pages+0x40d/0xec0 [ 70.663803][ T4375] ? populate_vma_page_range+0x2b0/0x2b0 [ 70.669440][ T4375] ? tlb_remove_table_rcu+0xf0/0xf0 [ 70.674647][ T4375] populate_vma_page_range+0x214/0x2b0 [ 70.680126][ T4375] mprotect_fixup+0x788/0x840 [ 70.684815][ T4375] ? change_protection+0x3980/0x3980 [ 70.690103][ T4375] ? apparmor_file_mprotect+0xf4/0x110 [ 70.695567][ T4375] ? bpf_lsm_file_mprotect+0x5/0x10 [ 70.700765][ T4375] ? security_file_mprotect+0x7e/0xb0 [ 70.706136][ T4375] do_mprotect_pkey+0x7ff/0xba0 [ 70.710996][ T4375] ? do_futex+0x2e2/0x320 [ 70.715324][ T4375] ? prot_none_test+0x10/0x10 [ 70.720014][ T4375] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 70.726007][ T4375] __x64_sys_mprotect+0x7c/0x90 [ 70.730866][ T4375] do_syscall_64+0x4c/0xa0 [ 70.735287][ T4375] ? clear_bhb_loop+0x60/0xb0 [ 70.739965][ T4375] ? clear_bhb_loop+0x60/0xb0 [ 70.744641][ T4375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.750537][ T4375] RIP: 0033:0x7fc86e39e159 [ 70.754960][ T4375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.774561][ T4375] RSP: 002b:00007fc86f258028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 70.782977][ T4375] RAX: ffffffffffffffda RBX: 00007fc86e626090 RCX: 00007fc86e39e159 [ 70.790940][ T4375] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 70.798904][ T4375] RBP: 00007fc86e435024 R08: 0000000000000000 R09: 0000000000000000 [ 70.806865][ T4375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.814916][ T4375] R13: 00007fc86e626128 R14: 00007fc86e626090 R15: 00007ffe74ae4b88 [ 70.822895][ T4375] [ 70.827708][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d720c00: rx timeout, send abort [ 70.933958][ T4377] loop0: detected capacity change from 0 to 164 [ 71.025555][ T4377] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.095921][ T4377] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.145006][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d721800: rx timeout, send abort [ 71.251636][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.258282][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.653298][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d721800: abort rx timeout. Force session deactivation [ 71.688040][ T4400] loop4: detected capacity change from 0 to 16 [ 71.705826][ T4400] erofs: (device loop4): mounted with root inode @ nid 36. [ 71.858349][ T4314] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 72.081300][ T4314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.112010][ T4314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.127092][ T4407] netlink: 'syz.2.22': attribute type 4 has an invalid length. [ 72.174646][ T4314] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.194466][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.202995][ T4314] usb 4-1: Product: syz [ 72.211016][ T4410] netlink: 'syz.2.22': attribute type 4 has an invalid length. [ 72.227890][ T4314] usb 4-1: Manufacturer: syz [ 72.237630][ T4314] usb 4-1: SerialNumber: syz [ 72.351534][ T4414] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.479435][ T4314] usb 4-1: 0:2 : does not exist [ 72.485024][ T4314] usb 4-1: unit 9 not found! [ 72.528993][ T4314] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 72.553866][ T4314] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 72.571045][ T4314] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 72.583971][ T26] audit: type=1326 audit(1788528557.603:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.2.25" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7fc00000 [ 72.625817][ T4422] loop1: detected capacity change from 0 to 1024 [ 72.711175][ T4314] usb 4-1: USB disconnect, device number 2 [ 72.875486][ T4422] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.893648][ T4422] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.940984][ T4403] loop4: detected capacity change from 0 to 40427 [ 72.961690][ T4422] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.996382][ T4422] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.004048][ T4403] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 73.046122][ T4422] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.075228][ T4422] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.123210][ T4428] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.179992][ T4428] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.224112][ T4422] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.254240][ T26] audit: type=1326 audit(1788528558.273:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.2.25" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd06597ed7 code=0x7fc00000 [ 73.307190][ T4422] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.325781][ T26] audit: type=1326 audit(1788528558.273:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.2.25" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd0653f4d9 code=0x7fc00000 [ 73.400528][ T4431] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.446094][ T4431] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.722699][ T4443] Zero length message leads to an empty skb [ 74.209754][ T4451] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 75.046984][ T4472] process 'syz.4.42' launched './file0' with NULL argv: empty string added [ 75.464335][ T4477] loop2: detected capacity change from 0 to 512 [ 75.645064][ T4477] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.44: iget: bad i_size value: -1099511627766 [ 75.658841][ T4489] IPVS: persistence engine module ip_vs_pe_ not found [ 75.752179][ T4477] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.44: couldn't read orphan inode 15 (err -117) [ 75.784351][ T4477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.080097][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 76.417868][ T4315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.597912][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 76.608387][ T4315] usb 4-1: config 0 has no interfaces? [ 76.616552][ T4315] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.631451][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.640981][ T4315] usb 4-1: Product: syz [ 76.645445][ T4315] usb 4-1: Manufacturer: syz [ 76.650481][ T4315] usb 4-1: SerialNumber: syz [ 76.666490][ T4315] usb 4-1: config 0 descriptor?? [ 76.964925][ T4348] usb 4-1: USB disconnect, device number 3 [ 77.097479][ T4540] ip_tables: iptables: counters copy to user failed while replacing table [ 77.107992][ T4315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.308285][ T4315] usb 5-1: Using ep0 maxpacket: 16 [ 77.319648][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.357993][ T4315] usb 5-1: config 0 has no interfaces? [ 77.373385][ T4315] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 77.387831][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.398213][ T4315] usb 5-1: Product: syz [ 77.402415][ T4315] usb 5-1: Manufacturer: syz [ 77.407022][ T4315] usb 5-1: SerialNumber: syz [ 77.434310][ T4315] usb 5-1: config 0 descriptor?? [ 77.818236][ T4564] loop2: detected capacity change from 0 to 7 [ 77.854094][ T4355] Dev loop2: unable to read RDB block 7 [ 77.865210][ T4355] loop2: unable to read partition table [ 77.885871][ T4355] loop2: partition table beyond EOD, truncated [ 77.907981][ T4564] Dev loop2: unable to read RDB block 7 [ 77.913613][ T4564] loop2: unable to read partition table [ 77.950379][ T4564] loop2: partition table beyond EOD, truncated [ 77.956642][ T4564] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 77.996025][ T4348] usb 5-1: USB disconnect, device number 2 [ 78.233407][ T4572] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 78.653428][ T4581] syz.0.80 uses obsolete (PF_INET,SOCK_PACKET) [ 78.762844][ T4586] ======================================================= [ 78.762844][ T4586] WARNING: The mand mount option has been deprecated and [ 78.762844][ T4586] and is ignored by this kernel. Remove the mand [ 78.762844][ T4586] option from the mount to silence this warning. [ 78.762844][ T4586] ======================================================= [ 79.285599][ T4601] 9pnet_fd: p9_fd_create_tcp (4601): problem connecting socket to 127.0.0.1 [ 79.321506][ T4601] 9pnet_fd: p9_fd_create_tcp (4601): problem connecting socket to 127.0.0.1 [ 79.628480][ T4606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.713475][ T4606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.768247][ T26] audit: type=1326 audit(1788528564.793:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 79.815796][ T26] audit: type=1326 audit(1788528564.793:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 79.867803][ T26] audit: type=1326 audit(1788528564.793:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 79.943150][ T26] audit: type=1326 audit(1788528564.793:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 80.012049][ T26] audit: type=1326 audit(1788528564.813:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 80.060406][ T26] audit: type=1326 audit(1788528564.833:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 80.092870][ T26] audit: type=1326 audit(1788528564.833:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 80.157820][ T26] audit: type=1326 audit(1788528564.943:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 80.216863][ T26] audit: type=1326 audit(1788528564.943:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 80.299484][ T26] audit: type=1326 audit(1788528564.943:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.2.91" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd0659e159 code=0x7ffc0000 [ 80.527235][ T4643] loop0: detected capacity change from 0 to 2048 [ 80.580208][ T4643] loop0: p2 p3 < > p4 < p5 > [ 80.585071][ T4643] loop0: partition table partially beyond EOD, truncated [ 80.606141][ T4643] loop0: p2 start 53543428 is beyond EOD, truncated [ 80.635913][ T4643] loop0: p3 start 2147483648 is beyond EOD, truncated [ 80.658136][ T4643] loop0: p5 start 53543428 is beyond EOD, truncated [ 81.491790][ T22] cfg80211: failed to load regulatory.db [ 81.522054][ T4669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 82.785563][ T4699] loop1: detected capacity change from 0 to 512 [ 82.838795][ T4699] EXT4-fs: Ignoring removed bh option [ 82.879721][ T4699] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 82.952986][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.962268][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.964257][ T4699] EXT4-fs (loop1): 1 truncate cleaned up [ 82.981643][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.998297][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.013570][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.033756][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.042121][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.172809][ T4712] EXT4-fs error (device loop1): __ext4_new_inode:1083: comm syz.1.124: reserved inode found cleared - inode=1 [ 83.381064][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 83.390602][ T4704] chnl_net:caif_netlink_parms(): no params data found [ 83.624067][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.654436][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.705594][ T4704] device bridge_slave_0 entered promiscuous mode [ 83.714545][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 83.727250][ T4732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.134'. [ 83.742594][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.751231][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.767264][ T4704] device bridge_slave_1 entered promiscuous mode [ 83.779789][ T4735] loop3: detected capacity change from 0 to 512 [ 83.842723][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.887619][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.942830][ T4735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.042126][ T4704] team0: Port device team_slave_0 added [ 84.079662][ T4704] team0: Port device team_slave_1 added [ 84.095623][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 84.202726][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.238078][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.322315][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.370639][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.397962][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.461691][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.587604][ T4704] device hsr_slave_0 entered promiscuous mode [ 84.622376][ T4704] device hsr_slave_1 entered promiscuous mode [ 84.661745][ T4704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.705816][ T4704] Cannot create hsr debugfs directory [ 84.861097][ T4767] netlink: 'syz.1.148': attribute type 4 has an invalid length. [ 84.933768][ T4763] netlink: 'syz.1.148': attribute type 4 has an invalid length. [ 85.094195][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 85.188014][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.280758][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.300507][ T4704] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.310706][ T4704] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.322668][ T4704] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.332661][ T4704] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.374711][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.495913][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.652852][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.686612][ T4784] Illegal XDP return value 2086731832 on prog (id 16) dev syz_tun, expect packet loss! [ 85.740491][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.761301][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.761681][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.778756][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.786712][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.799063][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.799264][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.818662][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.825964][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.917824][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.926597][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.985145][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.992328][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.222905][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.245740][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.288629][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.346783][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.349901][ T4800] loop1: detected capacity change from 0 to 16 [ 86.354663][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.406131][ T4800] erofs: (device loop1): mounted with root inode @ nid 36. [ 86.423999][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.461485][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.471470][ T4800] syz.1.162: attempt to access beyond end of device [ 86.471470][ T4800] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 86.566487][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.605847][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.669961][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.699935][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.722037][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.800652][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.839344][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.875727][ T4704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.917614][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.985382][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.018665][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.167988][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 87.569318][ T4785] chnl_net:caif_netlink_parms(): no params data found [ 87.803798][ T4846] sctp: [Deprecated]: syz.4.170 (pid 4846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.803798][ T4846] Use struct sctp_sack_info instead [ 87.886305][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.898092][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 87.942294][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.959185][ T4785] device bridge_slave_0 entered promiscuous mode [ 87.982578][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.003472][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.024244][ T4785] device bridge_slave_1 entered promiscuous mode [ 88.083581][ T4853] fuse: Bad value for 'fd' [ 88.166509][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.207334][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.238220][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.247588][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.273861][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.538431][ T4785] team0: Port device team_slave_0 added [ 88.569630][ T4785] team0: Port device team_slave_1 added [ 88.685162][ T11] device hsr_slave_0 left promiscuous mode [ 88.735527][ T11] device hsr_slave_1 left promiscuous mode [ 88.762528][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.797573][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.822943][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.841214][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.873656][ T11] device bridge_slave_1 left promiscuous mode [ 88.883846][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.937530][ T11] device bridge_slave_0 left promiscuous mode [ 88.958939][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.030899][ T11] device veth1_macvtap left promiscuous mode [ 89.037451][ T11] device veth0_macvtap left promiscuous mode [ 89.075202][ T11] device veth1_vlan left promiscuous mode [ 89.081629][ T11] device veth0_vlan left promiscuous mode [ 89.247860][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 89.507907][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.708040][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 89.817215][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.856149][ T126] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 89.874193][ T126] usb 5-1: can't read configurations, error -71 [ 89.970031][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 90.264092][ T4899] loop0: detected capacity change from 0 to 2048 [ 90.305483][ T4899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.624423][ T11] team0 (unregistering): Port device team_slave_1 removed [ 90.689372][ T11] team0 (unregistering): Port device team_slave_0 removed [ 90.778647][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.848443][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.221708][ T11] bond0 (unregistering): Released all slaves [ 91.323289][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.338691][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 91.343449][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.406666][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.413016][ T4922] overlayfs: failed to clone upperpath [ 91.420976][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.430311][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.456940][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.538097][ T4785] device hsr_slave_0 entered promiscuous mode [ 91.561981][ T4785] device hsr_slave_1 entered promiscuous mode [ 91.581918][ T4785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.596264][ T4785] Cannot create hsr debugfs directory [ 92.056068][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 92.356229][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.384065][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.448833][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.464404][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.486584][ T4704] device veth0_vlan entered promiscuous mode [ 92.500298][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.516284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.558435][ T4704] device veth1_vlan entered promiscuous mode [ 92.605272][ T4933] loop4: detected capacity change from 0 to 32768 [ 92.647437][ T4933] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.195 (4933) [ 92.659394][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.669105][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.677375][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.720181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.766044][ T4704] device veth0_macvtap entered promiscuous mode [ 92.777513][ T4933] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 92.803654][ T4785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.808621][ T4933] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 92.837480][ T4704] device veth1_macvtap entered promiscuous mode [ 92.852758][ T4933] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 92.863270][ T4785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.894657][ T4785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.903686][ T4933] BTRFS info (device loop4): use zstd compression, level 3 [ 92.926192][ T4785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.934097][ T4933] BTRFS info (device loop4): using free space tree [ 92.977554][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.004924][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.029199][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.045476][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.056977][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.067917][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.082049][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.093280][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.105537][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.118764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.129033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.137266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.148113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.162217][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.174287][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.184747][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.195603][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.205796][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.217005][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.227706][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.228294][ T4933] BTRFS info (device loop4): enabling ssd optimizations [ 93.238361][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.239735][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.282517][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.329102][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.358684][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 93.358699][ T26] audit: type=1800 audit(1788528578.373:39): pid=4933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.195" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 93.400602][ T4704] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.428108][ T4704] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.437429][ T4704] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.488402][ T4704] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.766051][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.793010][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.837836][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.842886][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.888567][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.909125][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.943568][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.990011][ T4279] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.993003][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.049557][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.068299][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.075478][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.108446][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.127971][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 94.134387][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.178037][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.185227][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.258994][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.301650][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.356785][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.370985][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.394751][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.501433][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.569487][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.599608][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.639331][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.668676][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.708483][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.728213][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.749190][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.801033][ T4785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.829156][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.865758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.893112][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.279002][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.308430][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.408286][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.485998][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.498590][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.553061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.600223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.629117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.648228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.679373][ T4785] device veth0_vlan entered promiscuous mode [ 96.722800][ T5026] loop4: detected capacity change from 0 to 40427 [ 96.727044][ T4785] device veth1_vlan entered promiscuous mode [ 96.771163][ T5026] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 96.780282][ T5026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 96.879293][ T5026] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.904025][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.928985][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.975992][ T4785] device veth0_macvtap entered promiscuous mode [ 96.994759][ T4785] device veth1_macvtap entered promiscuous mode [ 97.057819][ T5026] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.073890][ T5026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.078970][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.133987][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.164362][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.197912][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.235334][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.292293][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.318929][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.360993][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.387044][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.415171][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.464173][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.484405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.527352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.569147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.606939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.646274][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.679831][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.714138][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.760388][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.780204][ T5078] overlayfs: failed to clone upperpath [ 97.806071][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.832708][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.863263][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.915732][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.956711][ T5066] syz.4.210: attempt to access beyond end of device [ 97.956711][ T5066] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 97.957091][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.030241][ T5066] syz.4.210: attempt to access beyond end of device [ 98.030241][ T5066] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.055111][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.083209][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.096694][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.213'. [ 98.129990][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.143606][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.196732][ T4785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.224704][ T4785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.272042][ T4785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.305106][ T4785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.607140][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.638412][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.683373][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.728925][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.747003][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.799741][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.476001][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.484504][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.575029][ T5172] device bridge_slave_1 left promiscuous mode [ 100.642899][ T5172] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.691327][ T5172] device bridge_slave_0 left promiscuous mode [ 100.711612][ T5153] loop5: detected capacity change from 0 to 32768 [ 100.716704][ T5172] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.771306][ T5153] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.231 (5153) [ 100.837321][ T5153] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.883780][ T5153] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 100.946057][ T5153] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 101.047994][ T5153] BTRFS info (device loop5): use zstd compression, level 3 [ 101.094766][ T5153] BTRFS info (device loop5): using free space tree [ 101.310977][ T5153] BTRFS info (device loop5): enabling ssd optimizations [ 101.328649][ T5124] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 101.400406][ T26] audit: type=1800 audit(1788528586.423:40): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.231" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 101.894055][ T4704] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.252437][ T5237] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 102.314784][ T4355] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (4355) [ 102.346901][ T5243] loop3: detected capacity change from 0 to 128 [ 102.414524][ T5243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.513953][ T5243] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.697790][ T5232] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 102.733163][ T5221] ceph: No mds server is up or the cluster is laggy [ 102.962996][ T5252] loop4: detected capacity change from 0 to 512 [ 103.150911][ T5252] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.246: inode #1: comm syz.4.246: iget: illegal inode # [ 103.218424][ T5252] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.246: error while reading EA inode 1 err=-117 [ 103.250542][ T5252] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.294735][ T5252] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.246: inode #1: comm syz.4.246: iget: illegal inode # [ 103.317841][ T5252] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.246: error while reading EA inode 1 err=-117 [ 103.372250][ T5252] EXT4-fs (loop4): 1 orphan inode deleted [ 103.381489][ T5252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.432960][ T4785] EXT4-fs (loop3): unmounting filesystem. [ 103.590023][ T5269] loop3: detected capacity change from 0 to 128 [ 103.652754][ T5269] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.692724][ T5269] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.768635][ T5252] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.246: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 104.015218][ T4785] EXT4-fs (loop3): unmounting filesystem. [ 104.105174][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 104.198945][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 104.234321][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 104.399090][ T5285] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.258'. [ 104.439436][ T5285] netlink: 24 bytes leftover after parsing attributes in process `syz.5.258'. [ 105.004344][ T5300] fuse: Bad value for 'fd' [ 105.306037][ T5309] xt_hashlimit: size too large, truncated to 1048576 [ 105.381046][ T5317] xt_hashlimit: size too large, truncated to 1048576 [ 105.756140][ T5331] tipc: Failed to remove unknown binding: 66,0,0/0:1058933665/1058933666 [ 106.918648][ T5349] 9pnet_fd: Insufficient options for proto=fd [ 108.203979][ T5356] overlayfs: failed to clone upperpath [ 109.502466][ T26] audit: type=1804 audit(1788528594.523:41): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.289" name="bus" dev="ramfs" ino=38364 res=1 errno=0 [ 110.950833][ T5412] netlink: 'syz.5.300': attribute type 4 has an invalid length. [ 111.006201][ T5413] netlink: 'syz.5.300': attribute type 4 has an invalid length. [ 112.677780][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880585d2c00: rx timeout, send abort [ 113.186055][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880585d2c00: abort rx timeout. Force session deactivation [ 113.641594][ T5498] loop4: detected capacity change from 0 to 1024 [ 113.752951][ T5498] hfsplus: request for non-existent node 33423360 in B*Tree [ 113.777010][ T5498] hfsplus: request for non-existent node 33423360 in B*Tree [ 113.820698][ T5498] hfsplus: request for non-existent node 33423360 in B*Tree [ 113.841355][ T5498] hfsplus: request for non-existent node 33423360 in B*Tree [ 113.874411][ T5498] hfsplus: request for non-existent node 33423360 in B*Tree [ 113.906780][ T5498] hfsplus: request for non-existent node 33423360 in B*Tree [ 113.978800][ T5505] hfsplus: request for non-existent node 33423360 in B*Tree [ 114.018649][ T5505] hfsplus: request for non-existent node 33423360 in B*Tree [ 114.048225][ T5498] hfsplus: request for non-existent node 33423360 in B*Tree [ 114.073516][ T5498] hfsplus: request for non-existent node 33423360 in B*Tree [ 114.121081][ T5506] hfsplus: request for non-existent node 33423360 in B*Tree [ 114.147849][ T5506] hfsplus: request for non-existent node 33423360 in B*Tree [ 114.427171][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 115.595182][ T5557] ip_tables: iptables: counters copy to user failed while replacing table [ 115.787946][ T5561] netlink: 'syz.3.351': attribute type 4 has an invalid length. [ 116.177090][ T5567] netlink: 'syz.3.351': attribute type 4 has an invalid length. [ 116.793493][ T5580] loop4: detected capacity change from 0 to 512 [ 116.993028][ T5580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.038107][ T5580] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.251059][ T5580] loop4: detected capacity change from 512 to 0 [ 117.310715][ C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 117.320332][ T5591] EXT4-fs error (device loop4): __ext4_find_entry:1685: inode #2: comm syz.4.358: reading directory lblock 0 [ 117.386699][ T5591] syz.4.358: attempt to access beyond end of device [ 117.386699][ T5591] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 117.409515][ T5595] FAULT_INJECTION: forcing a failure. [ 117.409515][ T5595] name failslab, interval 1, probability 0, space 0, times 1 [ 117.441194][ T5591] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 117.450122][ T5595] CPU: 0 PID: 5595 Comm: syz.3.362 Not tainted syzkaller #0 [ 117.457435][ T5595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.467501][ T5595] Call Trace: [ 117.470778][ T5595] [ 117.473703][ T5595] dump_stack_lvl+0x188/0x24e [ 117.478392][ T5595] ? show_regs_print_info+0x12/0x12 [ 117.483594][ T5595] ? load_image+0x410/0x410 [ 117.488141][ T5595] ? __might_sleep+0xd0/0xd0 [ 117.492730][ T5595] ? __lock_acquire+0x7c40/0x7c40 [ 117.497768][ T5595] should_fail_ex+0x390/0x4c0 [ 117.502453][ T5595] should_failslab+0x5/0x20 [ 117.506954][ T5595] slab_pre_alloc_hook+0x59/0x300 [ 117.511988][ T5595] ? resv_map_alloc+0x84/0x2b0 [ 117.516749][ T5595] __kmem_cache_alloc_node+0x4f/0x270 [ 117.522123][ T5595] ? resv_map_alloc+0x84/0x2b0 [ 117.526880][ T5595] kmalloc_trace+0x26/0xe0 [ 117.531305][ T5595] resv_map_alloc+0x84/0x2b0 [ 117.535900][ T5595] hugetlbfs_get_inode+0x64/0x510 [ 117.540926][ T5595] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.546907][ T5595] hugetlb_file_setup+0x211/0x610 [ 117.551941][ T5595] ksys_mmap_pgoff+0x1e2/0x720 [ 117.556708][ T5595] do_syscall_64+0x4c/0xa0 [ 117.561129][ T5595] ? clear_bhb_loop+0x60/0xb0 [ 117.565808][ T5595] ? clear_bhb_loop+0x60/0xb0 [ 117.570489][ T5595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.576393][ T5595] RIP: 0033:0x7fdbdf59e159 [ 117.580808][ T5595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.600417][ T5595] RSP: 002b:00007fdbe0497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 117.608826][ T5595] RAX: ffffffffffffffda RBX: 00007fdbdf825fa0 RCX: 00007fdbdf59e159 [ 117.616795][ T5595] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 117.624820][ T5595] RBP: 00007fdbdf635024 R08: ffffffffffffffff R09: 0000000000000000 [ 117.632796][ T5595] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 117.640762][ T5595] R13: 00007fdbdf826038 R14: 00007fdbdf825fa0 R15: 00007ffe67b920d8 [ 117.648753][ T5595] [ 117.683232][ T5591] EXT4-fs (loop4): I/O error while writing superblock [ 117.728109][ T5587] ext4lazyinit: attempt to access beyond end of device [ 117.728109][ T5587] loop4: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 117.746778][ T4279] syz-executor: attempt to access beyond end of device [ 117.746778][ T4279] loop4: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 117.765497][ T5587] ext4lazyinit: attempt to access beyond end of device [ 117.765497][ T5587] loop4: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 117.827813][ T5587] EXT4-fs error (device loop4): ext4_wait_block_bitmap:573: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 117.878672][ T5587] ext4lazyinit: attempt to access beyond end of device [ 117.878672][ T5587] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 117.917940][ T5587] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 117.936400][ T5587] EXT4-fs (loop4): I/O error while writing superblock [ 117.948430][ T4910] EXT4-fs (loop4): unmounting filesystem. [ 117.971544][ T4910] syz.4.187: attempt to access beyond end of device [ 117.971544][ T4910] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 117.996452][ T4910] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 118.009439][ T4910] EXT4-fs (loop4): I/O error while writing superblock [ 118.128186][ T5584] kmmpd-loop4: attempt to access beyond end of device [ 118.128186][ T5584] loop4: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 118.470789][ T5584] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 119.509083][ T5626] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.617181][ T5626] CIFS: Attempting to mount \\127.0.0.1\share [ 120.340462][ T5626] CIFS: VFS: cifs_mount failed w/return code = -512 [ 120.564863][ T4570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.711106][ T4570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.861962][ T4570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.990862][ T4570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.486078][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.498218][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.506345][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.515448][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.522936][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.531395][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.689219][ T5665] loop5: detected capacity change from 0 to 512 [ 121.708399][ T5665] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.383: iget: bad i_size value: 38620345925642 [ 121.742535][ T5665] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.383: couldn't read orphan inode 15 (err -117) [ 121.773564][ T5665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 122.029144][ T5655] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.383: bg 0: block 5: invalid block bitmap [ 122.092353][ T5655] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 122.108071][ T5655] EXT4-fs (loop5): This should not happen!! Data will be lost [ 122.108071][ T5655] [ 122.122973][ T5655] EXT4-fs (loop5): Total free blocks count 0 [ 122.135290][ T5655] EXT4-fs (loop5): Free/Dirty block details [ 122.165451][ T5655] EXT4-fs (loop5): free_blocks=0 [ 122.199209][ T5655] EXT4-fs (loop5): dirty_blocks=2 [ 122.245244][ T5655] EXT4-fs (loop5): Block reservation details [ 122.276268][ T5655] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 122.544606][ T5659] chnl_net:caif_netlink_parms(): no params data found [ 122.690389][ T4704] EXT4-fs (loop5): unmounting filesystem. [ 123.005998][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.008007][ T5708] overlayfs: failed to clone lowerpath [ 123.076624][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.094118][ T5659] device bridge_slave_0 entered promiscuous mode [ 123.232011][ T5715] overlayfs: failed to clone upperpath [ 123.352856][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.364190][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.387153][ T5659] device bridge_slave_1 entered promiscuous mode [ 123.577842][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 123.639668][ T5728] loop3: detected capacity change from 0 to 8 [ 123.766404][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.849246][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.912904][ T4570] device hsr_slave_0 left promiscuous mode [ 123.941109][ T4570] device hsr_slave_1 left promiscuous mode [ 123.972943][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.995120][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.067600][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.095844][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.268223][ T4570] device veth1_macvtap left promiscuous mode [ 124.287916][ T4570] device veth0_macvtap left promiscuous mode [ 124.294071][ T4570] device veth1_vlan left promiscuous mode [ 124.307062][ T5741] netlink: 156 bytes leftover after parsing attributes in process `syz.5.403'. [ 124.330519][ T4570] device veth0_vlan left promiscuous mode [ 125.422612][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 125.463268][ T26] audit: type=1326 audit(1788528610.483:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.492356][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 125.494217][ T26] audit: type=1326 audit(1788528610.493:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.510677][ T5775] overlayfs: failed to clone lowerpath [ 125.524491][ T26] audit: type=1326 audit(1788528610.503:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.553351][ T26] audit: type=1326 audit(1788528610.503:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.577499][ T26] audit: type=1326 audit(1788528610.503:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.612934][ T26] audit: type=1326 audit(1788528610.503:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.637305][ T26] audit: type=1326 audit(1788528610.503:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.654791][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 125.678175][ T26] audit: type=1326 audit(1788528610.503:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.703450][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.720815][ T26] audit: type=1326 audit(1788528610.503:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.764665][ T26] audit: type=1326 audit(1788528610.503:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.1.413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c439e159 code=0x7ffc0000 [ 125.801117][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.114711][ T4570] bond0 (unregistering): Released all slaves [ 126.278496][ T5768] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 126.324843][ T5769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.401029][ T5769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.415925][ T5769] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 126.436787][ T5769] bond0 (unregistering): Released all slaves [ 126.450601][ T5659] team0: Port device team_slave_0 added [ 126.528830][ T5659] team0: Port device team_slave_1 added [ 126.644495][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.667043][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.738464][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.771376][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.801036][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.912584][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.071700][ T5659] device hsr_slave_0 entered promiscuous mode [ 127.096144][ T5659] device hsr_slave_1 entered promiscuous mode [ 127.124620][ T5659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.150403][ T5659] Cannot create hsr debugfs directory [ 127.653888][ T5659] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.696172][ T5659] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.727986][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 127.743856][ T5659] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.777639][ T5659] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.827456][ T5820] fuse: Bad value for 'fd' [ 128.081058][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.128165][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.143414][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.181253][ T5659] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.212858][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.253366][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.266454][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.273640][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.302800][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.314791][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.332363][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.348481][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.355639][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.371801][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.407402][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.419804][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.441412][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.469497][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.485196][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.497323][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.515447][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.525865][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.554549][ T5659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.575245][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.598445][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.607078][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.831092][ T5842] batman_adv: batadv0: Adding interface: veth0 [ 128.857829][ T5842] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.934142][ T5842] batman_adv: batadv0: Interface activated: veth0 [ 128.967411][ T5844] batman_adv: batadv0: Interface deactivated: veth0 [ 129.001549][ T5844] batman_adv: batadv0: Removing interface: veth0 [ 129.019050][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.034986][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.053382][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.074350][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.194181][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 129.237307][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.433'. [ 129.582617][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.605986][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.641660][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.807868][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 130.946387][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.970931][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.052700][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.078314][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.150579][ T5659] device veth0_vlan entered promiscuous mode [ 131.174368][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.190820][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.213432][ T5659] device veth1_vlan entered promiscuous mode [ 131.235696][ T5904] batman_adv: batadv0: Adding interface: veth0 [ 131.279319][ T5904] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.317473][ T5921] loop3: detected capacity change from 0 to 256 [ 131.366504][ T5904] batman_adv: batadv0: Interface activated: veth0 [ 131.422816][ T5911] batman_adv: batadv0: Interface deactivated: veth0 [ 131.433292][ T5921] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.449718][ T5911] batman_adv: batadv0: Removing interface: veth0 [ 131.482006][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.504164][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.520171][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.542407][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.695986][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.717585][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.739210][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.758848][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.050690][ T5659] device veth0_macvtap entered promiscuous mode [ 132.124047][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.153151][ T5659] device veth1_macvtap entered promiscuous mode [ 132.201204][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.237498][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.248651][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.267831][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.287533][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.301380][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.313072][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.323688][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.334655][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.346436][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.365682][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.391604][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.419600][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.482330][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.508003][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.526986][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.541908][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 132.566606][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.577002][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.588975][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 132.611147][ T5659] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.641950][ T5659] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.655743][ T5659] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.669886][ T5659] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.690157][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.696490][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.715605][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.460'. [ 132.728062][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.460'. [ 133.035348][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.063649][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.099472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.175354][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.193610][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.214840][ T5972] loop5: detected capacity change from 0 to 2048 [ 133.217104][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.343733][ T5972] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 133.415955][ T5981] batman_adv: batadv0: Adding interface: veth0 [ 133.469614][ T5981] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.534750][ T4704] EXT4-fs (loop5): unmounting filesystem. [ 133.541038][ T5981] batman_adv: batadv0: Interface activated: veth0 [ 133.590415][ T5983] batman_adv: batadv0: Interface deactivated: veth0 [ 133.610606][ T5991] overlayfs: failed to clone upperpath [ 133.653327][ T5983] batman_adv: batadv0: Removing interface: veth0 [ 133.689805][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.714347][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.745372][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.762033][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.885345][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'. [ 134.562732][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 134.562753][ T26] audit: type=1804 audit(1788528619.583:62): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.471" name="bus" dev="ramfs" ino=40404 res=1 errno=0 [ 134.698248][ T6022] ip_tables: iptables: counters copy to user failed while replacing table [ 134.881254][ T6027] loop6: detected capacity change from 0 to 1024 [ 134.913069][ T6027] EXT4-fs: Ignoring removed bh option [ 134.964616][ T6027] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 135.544792][ C0] Unknown status report in ack skb [ 135.738829][ T6058] ceph: No mds server is up or the cluster is laggy [ 136.273397][ T5659] EXT4-fs (loop6): unmounting filesystem. [ 136.478118][ T6076] loop5: detected capacity change from 0 to 40427 [ 136.495150][ T6076] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 136.502969][ T6076] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 136.576261][ T6076] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.634189][ T6076] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 136.641387][ T6076] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 136.756404][ T6076] syz.5.488: attempt to access beyond end of device [ 136.756404][ T6076] loop5: rw=2049, sector=77824, nr_sectors = 1600 limit=40427 [ 137.714647][ T6120] batman_adv: batadv0: Adding interface: veth0 [ 137.731379][ T6120] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.800819][ T6120] batman_adv: batadv0: Interface activated: veth0 [ 137.820050][ T6124] batman_adv: batadv0: Interface deactivated: veth0 [ 137.835344][ T6124] batman_adv: batadv0: Removing interface: veth0 [ 137.908641][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.937435][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.960448][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.988426][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.295691][ T6134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.503'. [ 138.333978][ T6134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.503'. [ 138.426689][ T26] audit: type=1804 audit(1788528623.443:63): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.504" name="bus" dev="ramfs" ino=40518 res=1 errno=0 [ 139.102401][ T6162] 9pnet: p9_errstr2errno: server reported unknown error @c [ 139.457871][ T4311] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.649697][ T4311] usb 7-1: config 0 has no interfaces? [ 139.655423][ T4311] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 139.700575][ T4311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.750867][ T4311] usb 7-1: config 0 descriptor?? [ 140.129251][ T4994] usb 7-1: USB disconnect, device number 2 [ 140.670519][ T6203] netlink: 156 bytes leftover after parsing attributes in process `syz.1.520'. [ 140.686293][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 140.701340][ T26] audit: type=1804 audit(1788528625.723:64): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.522" name="bus" dev="ramfs" ino=40590 res=1 errno=0 [ 140.978335][ T6214] netlink: 'syz.1.527': attribute type 4 has an invalid length. [ 140.997017][ T6214] netlink: 'syz.1.527': attribute type 4 has an invalid length. [ 141.095872][ T6218] netlink: 'syz.6.529': attribute type 4 has an invalid length. [ 141.118955][ T6218] netlink: 'syz.6.529': attribute type 4 has an invalid length. [ 141.768136][ T4994] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 141.879697][ T26] audit: type=1804 audit(1788528626.903:65): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.539" name="bus" dev="ramfs" ino=39711 res=1 errno=0 [ 141.959630][ T4994] usb 7-1: config index 0 descriptor too short (expected 1572, got 36) [ 141.972959][ T4994] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.997854][ T4994] usb 7-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 142.014623][ T4994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.032209][ T4994] usb 7-1: Product: syz [ 142.037350][ T4994] usb 7-1: Manufacturer: syz [ 142.049955][ T4994] usb 7-1: SerialNumber: syz [ 142.089116][ T4994] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input5 [ 142.114374][ T6260] Set syz1 is full, maxelem 14 reached [ 142.265649][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 142.307334][ T3623] bcm5974 7-1:1.0: could not read from device [ 142.314019][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 142.314047][ T6263] netlink: 'syz.0.545': attribute type 15 has an invalid length. [ 142.326041][ T6263] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 142.340869][ T6263] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 142.349595][ T6263] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 142.358309][ T6263] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 142.374249][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 142.394324][ T4994] bcm5974 7-1:1.0: could not read from device [ 142.404182][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 142.420470][ T3623] bcm5974 7-1:1.0: could not read from device [ 142.443456][ T4994] input: failed to attach handler mousedev to device input5, error: -5 [ 142.454991][ T6263] netlink: 'syz.0.545': attribute type 15 has an invalid length. [ 142.470329][ T3623] bcm5974 7-1:1.0: could not read from device [ 142.497958][ T4994] usb 7-1: USB disconnect, device number 3 [ 142.512684][ T6263] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 142.521631][ T6263] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 142.530757][ T6263] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 142.539654][ T6263] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 143.710454][ T6305] netlink: 264 bytes leftover after parsing attributes in process `syz.0.558'. [ 144.694295][ T6354] No such timeout policy "syz1" [ 145.052437][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.578'. [ 145.099778][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 145.160142][ T6372] netlink: 'syz.5.578': attribute type 15 has an invalid length. [ 145.216317][ T6372] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 145.225255][ T6372] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 145.234038][ T6372] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 145.242714][ T6372] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 145.274102][ T6378] device sit0 entered promiscuous mode [ 145.322222][ T6378] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 145.348134][ T6378] netlink: 1 bytes leftover after parsing attributes in process `syz.3.579'. [ 145.376928][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.578'. [ 145.400210][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 145.428657][ T6372] netlink: 'syz.5.578': attribute type 15 has an invalid length. [ 145.452043][ T6372] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 145.460959][ T6372] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 145.469900][ T6372] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 145.478806][ T6372] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 146.092594][ T26] audit: type=1804 audit(1788528631.113:66): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.589" name="bus" dev="ramfs" ino=39890 res=1 errno=0 [ 146.347068][ T6402] syz.3.588 (6402) used greatest stack depth: 17840 bytes left [ 146.809113][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 146.835684][ T6423] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.844712][ T6423] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.853470][ T6423] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.862244][ T6423] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.906568][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 147.678336][ T6444] ceph: No mds server is up or the cluster is laggy [ 147.877146][ T26] audit: type=1804 audit(1788528632.893:67): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.606" name="bus" dev="ramfs" ino=40978 res=1 errno=0 [ 148.852061][ C1] [ 148.854440][ C1] ================================ [ 148.859551][ C1] WARNING: inconsistent lock state [ 148.864673][ C1] syzkaller #0 Not tainted [ 148.869086][ C1] -------------------------------- [ 148.874191][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 148.881039][ C1] ksoftirqd/1/21 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 148.887288][ C1] ffff88805718a130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x109/0x250 [ 148.896617][ C1] {SOFTIRQ-ON-W} state was registered at: [ 148.902334][ C1] lock_acquire+0x1bb/0x4a0 [ 148.906946][ C1] lock_sock_nested+0x44/0x100 [ 148.911819][ C1] x25_bind+0x1aa/0x3e0 [ 148.916076][ C1] __sys_bind+0x2e9/0x3e0 [ 148.920506][ C1] __x64_sys_bind+0x76/0x80 [ 148.925114][ C1] do_syscall_64+0x4c/0xa0 [ 148.929634][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.935642][ C1] irq event stamp: 828094 [ 148.939969][ C1] hardirqs last enabled at (828094): [] __local_bh_enable_ip+0x136/0x1c0 [ 148.950053][ C1] hardirqs last disabled at (828093): [] __local_bh_enable_ip+0xd7/0x1c0 [ 148.960047][ C1] softirqs last enabled at (828036): [] run_ksoftirqd+0xa4/0x100 [ 148.969435][ C1] softirqs last disabled at (828041): [] run_ksoftirqd+0xa4/0x100 [ 148.978819][ C1] [ 148.978819][ C1] other info that might help us debug this: [ 148.986879][ C1] Possible unsafe locking scenario: [ 148.986879][ C1] [ 148.994335][ C1] CPU0 [ 148.997626][ C1] ---- [ 149.000911][ C1] lock(sk_lock-AF_X25); [ 149.005255][ C1] [ 149.008715][ C1] lock(sk_lock-AF_X25); [ 149.013226][ C1] [ 149.013226][ C1] *** DEADLOCK *** [ 149.013226][ C1] [ 149.021376][ C1] 1 lock held by ksoftirqd/1/21: [ 149.026314][ C1] #0: ffffffff8cb2dc20 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x30/0x230 [ 149.036349][ C1] [ 149.036349][ C1] stack backtrace: [ 149.042246][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 149.049536][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.059604][ C1] Call Trace: [ 149.062895][ C1] [ 149.065831][ C1] dump_stack_lvl+0x188/0x24e [ 149.070531][ C1] ? show_regs_print_info+0x12/0x12 [ 149.075755][ C1] valid_state+0x13b/0x1d0 [ 149.080190][ C1] mark_lock_irq+0xa9/0x900 [ 149.084715][ C1] ? stack_trace_save+0xa6/0xf0 [ 149.089583][ C1] ? save_trace+0xbb0/0xbb0 [ 149.094101][ C1] ? mark_lock+0x94/0x320 [ 149.098450][ C1] ? save_trace+0x5a/0xbb0 [ 149.102913][ C1] mark_lock+0x208/0x320 [ 149.107164][ C1] __lock_acquire+0xce0/0x7c40 [ 149.111947][ C1] ? debug_objects_fill_pool+0x87/0x780 [ 149.117505][ C1] ? verify_lock_unused+0x140/0x140 [ 149.122724][ C1] ? verify_lock_unused+0x140/0x140 [ 149.127946][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.133948][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 149.138997][ C1] ? lock_chain_count+0x20/0x20 [ 149.143871][ C1] lock_acquire+0x1bb/0x4a0 [ 149.148385][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 149.153511][ C1] ? x25_kill_by_neigh+0xff/0x250 [ 149.158552][ C1] ? read_lock_is_recursive+0x10/0x10 [ 149.163948][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 149.169338][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 149.174550][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 149.179931][ C1] ? _local_bh_enable+0xa0/0xa0 [ 149.184797][ C1] lock_sock_nested+0x44/0x100 [ 149.189580][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 149.194710][ C1] x25_kill_by_neigh+0x109/0x250 [ 149.199670][ C1] x25_lapb_receive_frame+0x1a3/0xf20 [ 149.205066][ C1] ? netif_receive_skb_core+0x30/0x230 [ 149.210545][ C1] ? netif_receive_skb_core+0x30/0x230 [ 149.216027][ C1] ? x25_device_event+0x250/0x250 [ 149.221069][ C1] netif_receive_skb_core+0x166/0x230 [ 149.226461][ C1] lapbeth_napi_poll+0x3e/0x80 [ 149.231249][ C1] __napi_poll+0xbb/0x460 [ 149.235603][ C1] net_rx_action+0x622/0xbc0 [ 149.240207][ C1] ? net_tx_action+0x930/0x930 [ 149.244988][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.250983][ C1] ? __bpf_trace_tasklet+0x10/0x10 [ 149.256107][ C1] ? lock_chain_count+0x20/0x20 [ 149.260973][ C1] ? finish_task_switch+0x262/0x8e0 [ 149.266188][ C1] handle_softirqs+0x291/0x910 [ 149.270965][ C1] ? run_ksoftirqd+0xa4/0x100 [ 149.275652][ C1] ? do_softirq+0x210/0x210 [ 149.280171][ C1] run_ksoftirqd+0xa4/0x100 [ 149.284682][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 149.289893][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 149.295282][ C1] ? takeover_tasklets+0x770/0x770 [ 149.300400][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 149.305608][ C1] smpboot_thread_fn+0x667/0xa30 [ 149.310559][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 149.315601][ C1] kthread+0x29d/0x330 [ 149.319677][ C1] ? cpu_report_death+0x250/0x250 [ 149.324713][ C1] ? kthread_blkcg+0xd0/0xd0 [ 149.329310][ C1] ret_from_fork+0x1f/0x30 [ 149.333746][ C1] [ 149.336841][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3506 [ 149.345632][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 21, name: ksoftirqd/1 [ 149.354619][ C1] preempt_count: 100, expected: 0 [ 149.359680][ C1] RCU nest depth: 1, expected: 0 [ 149.364629][ C1] INFO: lockdep is turned off. [ 149.369413][ C1] Preemption disabled at: [ 149.369423][ C1] [] handle_softirqs+0xfd/0x910 [ 149.380201][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 149.387497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.397562][ C1] Call Trace: [ 149.400849][ C1] [ 149.403785][ C1] dump_stack_lvl+0x188/0x24e [ 149.408483][ C1] ? show_regs_print_info+0x12/0x12 [ 149.413699][ C1] ? load_image+0x410/0x410 [ 149.418218][ C1] ? handle_softirqs+0xfd/0x910 [ 149.423079][ C1] __might_resched+0x489/0x5f0 [ 149.427854][ C1] ? handle_softirqs+0xfd/0x910 [ 149.432715][ C1] ? __might_sleep+0xd0/0xd0 [ 149.437311][ C1] ? read_lock_is_recursive+0x10/0x10 [ 149.442699][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 149.448091][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 149.453301][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 149.458668][ C1] ? _local_bh_enable+0xa0/0xa0 [ 149.463512][ C1] lock_sock_nested+0x59/0x100 [ 149.468271][ C1] x25_kill_by_neigh+0x109/0x250 [ 149.473200][ C1] x25_lapb_receive_frame+0x1a3/0xf20 [ 149.478562][ C1] ? netif_receive_skb_core+0x30/0x230 [ 149.484009][ C1] ? netif_receive_skb_core+0x30/0x230 [ 149.489465][ C1] ? x25_device_event+0x250/0x250 [ 149.494478][ C1] netif_receive_skb_core+0x166/0x230 [ 149.499840][ C1] lapbeth_napi_poll+0x3e/0x80 [ 149.504592][ C1] __napi_poll+0xbb/0x460 [ 149.508917][ C1] net_rx_action+0x622/0xbc0 [ 149.513497][ C1] ? net_tx_action+0x930/0x930 [ 149.518246][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.524218][ C1] ? __bpf_trace_tasklet+0x10/0x10 [ 149.529323][ C1] ? lock_chain_count+0x20/0x20 [ 149.534162][ C1] ? finish_task_switch+0x262/0x8e0 [ 149.539353][ C1] handle_softirqs+0x291/0x910 [ 149.544105][ C1] ? run_ksoftirqd+0xa4/0x100 [ 149.548772][ C1] ? do_softirq+0x210/0x210 [ 149.553266][ C1] run_ksoftirqd+0xa4/0x100 [ 149.557758][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 149.562944][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 149.568309][ C1] ? takeover_tasklets+0x770/0x770 [ 149.573405][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 149.578594][ C1] smpboot_thread_fn+0x667/0xa30 [ 149.583524][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 149.588549][ C1] kthread+0x29d/0x330 [ 149.592610][ C1] ? cpu_report_death+0x250/0x250 [ 149.597624][ C1] ? kthread_blkcg+0xd0/0xd0 [ 149.602226][ C1] ret_from_fork+0x1f/0x30 [ 149.606639][ C1]