last executing test programs: 3.993248382s ago: executing program 3 (id=1143): r0 = socket$inet6(0xa, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000004880)="3e9c8e78ab6bad29faf6b26a8c081d9f80d7045119f2e459045e545a0039610538e742e1df9014c6a7b3a70ad6e2cf83966777bc665af2399b648ffe7459462705154005e2bad724637802e7a8b37bacf617da93fe4510ec499c553ccb93ac8ed160fec6ae16e5655111cfb1808a631a2d7cf3710c20") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @mcast2, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev}) r9 = gettid() r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r11, 0x0) ftruncate(r11, 0x97a9) process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x700800}], 0x1, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000009000000850000009b00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000094ee3634bfaa653b0000000085000000720000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 3.124036574s ago: executing program 3 (id=1155): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x1, 0x3, 0x0) getpeername$netrom(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={0x0, 0x80}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 3.088651027s ago: executing program 0 (id=1156): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x6400c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 3.031967732s ago: executing program 3 (id=1157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x6, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000340)}) 2.867986674s ago: executing program 0 (id=1159): r0 = epoll_create1(0x0) io_setup(0x1, &(0x7f0000000000)=0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x10000004}) 1.887021335s ago: executing program 3 (id=1163): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000003c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@noenospc_debug}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0389424, &(0x7f00000000c0)={"00faff0000000000e51511034d2e45df"}) 1.632139346s ago: executing program 0 (id=1171): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000000)=0x3) 1.58431092s ago: executing program 0 (id=1173): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) ppoll(&(0x7f0000000280)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xb0, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @fda={0x66646185, 0x6, 0x0, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/87, 0x57, 0x0, 0x2a}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}, @acquire_done, @dead_binder_done], 0x20, 0x0, &(0x7f0000000380)="b659849d2d27bc3b89a6e93d24cbfd13c00293e70718ff3c0830304d5888ecde"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x62, 0x0, &(0x7f0000000280)) accept$alg(r4, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x68, r7, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}]}, 0x68}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x7, 0x1003, &(0x7f0000002e80)=""/4099}, 0x90) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2}}) socket$can_raw(0x1d, 0x3, 0x1) 1.46334666s ago: executing program 4 (id=1176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 1.363246148s ago: executing program 4 (id=1179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x1b8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x138, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xb8, 0x6, [@m_mirred={0x74, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "b394e1614d2e8dabdacbb8c23177a20ddaa9a749e22730ab9112685391e07e95ef59a6c81cae663516014fe4bb41a2cd4b2d2b1a732c4314f7b813e2e1a2f1f76b"}, {0xc}, {0xc}}}, @m_bpf={0x40, 0x0, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1b8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x94}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.260842066s ago: executing program 4 (id=1181): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x1, 0x3, 0x0) getpeername$netrom(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={0x0, 0x80}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 876.056429ms ago: executing program 1 (id=1188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x0, 0x100000000000000, 0x0}) 815.437673ms ago: executing program 1 (id=1189): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0x0, &(0x7f0000000280)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x82, 0x5, 0x51, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000400)={0x0, 0x1}) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000540), 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r9, 0x2}, 0x8) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 800.851594ms ago: executing program 4 (id=1190): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) dup(0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 612.832999ms ago: executing program 4 (id=1192): r0 = socket$inet6(0xa, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000004880)="3e9c8e78ab6bad29faf6b26a8c081d9f80d7045119f2e459045e545a0039610538e742e1df9014c6a7b3a70ad6e2cf83966777bc665af2399b648ffe7459462705154005e2bad724637802e7a8b37bacf617da93fe4510ec499c553ccb93ac8ed160fec6ae16e5655111cfb1808a631a2d7cf3710c20") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @mcast2, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev}) r9 = gettid() r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r11, 0x0) ftruncate(r11, 0x97a9) process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x700800}], 0x1, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000009000000850000009b00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000094ee3634bfaa653b0000000085000000720000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 583.391402ms ago: executing program 3 (id=1193): syz_mount_image$fuse(0x0, &(0x7f0000002780)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0) execve(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 571.644984ms ago: executing program 2 (id=1194): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x6400c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 480.821681ms ago: executing program 1 (id=1195): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 449.233323ms ago: executing program 0 (id=1196): r0 = epoll_create1(0x0) io_setup(0x1, &(0x7f0000000000)=0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x10000004}) 409.354477ms ago: executing program 2 (id=1197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@setneightbl={0x20, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x9, 0x1, '{\xf5\x9b,\x00'}]}, 0x20}}, 0x0) 350.408541ms ago: executing program 2 (id=1198): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000080)=@raw=[@generic={0x0, 0x0, 0x0, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9}, 0x8}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) 288.092786ms ago: executing program 1 (id=1199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002840)={{0x14, 0x10, 0x1, 0x0, 0x40000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x100, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xd8, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x174}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) 226.921082ms ago: executing program 1 (id=1200): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x1, 0x3, 0x0) getpeername$netrom(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={0x0, 0x80}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 197.336794ms ago: executing program 2 (id=1201): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x62, 0x5, 0x460, 0x190, 0x190, 0xffffffff, 0x190, 0xe8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'ipvlan0\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xe8, 0x0, {0x22e}, [@common=@unspec=@connlimit={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x2, {0x5, @multicast2, @loopback, @gre_key}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'bridge_slave_0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@broadcast, @multicast1=0xe0002600, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x7000, {0x0, @private, @local, @gre_key, @icmp_id}}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @loopback, @broadcast, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 182.480045ms ago: executing program 0 (id=1202): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYRES8=0x0], 0xa) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x5, 0x6, 0x8, 0xff}, &(0x7f0000000040)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x7, 0x6}}}, 0x7) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x1c, &(0x7f0000000340)}, &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000240)={r8, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x6}, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x3f00, 0x0, 0x0, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) chdir(&(0x7f0000000100)='./file0\x00') r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130400000000fcdbdf2500000000000000000000ffffffffffff200100000000000000000000000000000000000000000000000000000000000087b976a8ab6757805de422699836d2fea274299d4e6806566c130ce7bf6422869cc6fe91e87d8f3b64e022f4a7545c1b785340", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0x12) r12 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r12, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) 133.745149ms ago: executing program 1 (id=1203): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000003c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@noenospc_debug}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0389424, &(0x7f00000000c0)={"00faff0000000000e51511034d2e45df"}) 116.483321ms ago: executing program 2 (id=1204): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000e3af0018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000007a000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 115.221641ms ago: executing program 3 (id=1205): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_io_uring_setup(0x231b, &(0x7f0000000440), &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed, 0x5}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 71.498314ms ago: executing program 4 (id=1206): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0x0, &(0x7f0000000280)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x82, 0x5, 0x51, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000400)={0x0, 0x1}) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000540), 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r9, 0x2}, 0x8) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 0s ago: executing program 2 (id=1207): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) ppoll(&(0x7f0000000280)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xb0, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @fda={0x66646185, 0x6, 0x0, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/87, 0x57, 0x0, 0x2a}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}, @acquire_done, @dead_binder_done], 0x20, 0x0, &(0x7f0000000380)="b659849d2d27bc3b89a6e93d24cbfd13c00293e70718ff3c0830304d5888ecde"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x62, 0x0, &(0x7f0000000280)) accept$alg(r4, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x68, r7, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}]}, 0x68}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x7, 0x1003, &(0x7f0000002e80)=""/4099}, 0x90) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2}}) socket$can_raw(0x1d, 0x3, 0x1) kernel console output (not intermixed with test programs): vice [ 105.893713][ T1761] vhci_hcd: stop threads [ 105.894798][ T1761] vhci_hcd: release socket [ 105.901696][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.903530][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.063592][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 107.152820][ T1761] vhci_hcd: disconnect device [ 107.156839][ T1761] vhci_hcd: stop threads [ 107.157913][ T1761] vhci_hcd: release socket [ 107.159172][ T1761] vhci_hcd: disconnect device [ 107.160780][ T1761] vhci_hcd: stop threads [ 107.161754][ T1761] vhci_hcd: release socket [ 107.162933][ T1761] vhci_hcd: disconnect device [ 107.164625][ T5546] device bridge_slave_1 entered promiscuous mode [ 107.252831][ T5546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.276341][ T5546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.468410][ T5606] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 107.470757][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 108.158893][ T4345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.198978][ T5546] team0: Port device team_slave_0 added [ 108.226682][ T5546] team0: Port device team_slave_1 added [ 108.341524][ T4345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.373430][ T5622] overlayfs: missing 'lowerdir' [ 108.502257][ T5629] 9pnet: p9_errstr2errno: server reported unknown error œgnævÐ\=XT×ut† [ 108.541542][ T5546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.543413][ T5546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.550293][ T5546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.566645][ T5546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.568351][ T5546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.586249][ T5546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.728182][ T5546] device hsr_slave_0 entered promiscuous mode [ 108.777815][ T5546] device hsr_slave_1 entered promiscuous mode [ 108.816972][ T5546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.822222][ T5546] Cannot create hsr debugfs directory [ 108.904877][ T5643] loop3: detected capacity change from 0 to 128 [ 109.002580][ T5643] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.126369][ T4019] Bluetooth: hci5: command 0x041b tx timeout [ 109.235759][ T5645] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 109.239488][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 109.703220][ T5672] overlayfs: missing 'lowerdir' [ 109.847046][ T5681] 9pnet: p9_errstr2errno: server reported unknown error œgnævÐ\=XT×ut† [ 110.601154][ T5546] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.678906][ T5546] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.794737][ T5546] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.818419][ T5693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 110.820714][ T5546] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.886982][ T5247] vhci_hcd: vhci_device speed not set [ 110.893043][ T5698] tipc: Started in network mode [ 110.894329][ T5698] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 110.907114][ T5698] tipc: Enabling of bearer rejected, failed to enable media [ 110.974160][ T5704] overlayfs: missing 'lowerdir' [ 111.085438][ T5709] loop0: detected capacity change from 0 to 128 [ 111.207100][ T1528] Bluetooth: hci5: command 0x040f tx timeout [ 111.212180][ T5709] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.437750][ T5546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.520099][ T5546] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.548556][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.551260][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.553754][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.560635][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.565886][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.567841][ T4021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.583841][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.590765][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.596426][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.600151][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.602049][ T4021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.604436][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.726151][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.729199][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.735245][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.739727][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.742842][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.745577][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.748381][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.751581][ T4020] wlan0 speed is unknown, defaulting to 1000 [ 111.767702][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.823405][ T5546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.829412][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.926676][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.929343][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.615134][ T4345] device hsr_slave_0 left promiscuous mode [ 112.751171][ T4345] device hsr_slave_1 left promiscuous mode [ 112.795181][ T5737] udc-core: couldn't find an available UDC or it's busy [ 112.810992][ T5737] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.827157][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.829197][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.832754][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.840716][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.856409][ T4345] device bridge_slave_1 left promiscuous mode [ 112.859783][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.932721][ T4345] device bridge_slave_0 left promiscuous mode [ 112.934416][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.022454][ T4019] Bluetooth: hci5: command 0x0419 tx timeout [ 114.067419][ T4345] device veth1_macvtap left promiscuous mode [ 114.069527][ T4345] device veth0_macvtap left promiscuous mode [ 114.071409][ T4345] device veth1_vlan left promiscuous mode [ 114.093220][ T4345] device veth0_vlan left promiscuous mode [ 115.262083][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 115.280638][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 115.295612][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.337223][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.467524][ T5769] loop0: detected capacity change from 0 to 128 [ 115.482337][ T4345] bond0 (unregistering): Released all slaves [ 115.579981][ T5769] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.814291][ T5732] tipc: Enabling of bearer rejected, failed to enable media [ 115.820309][ T5755] netlink: 132 bytes leftover after parsing attributes in process `syz.4.561'. [ 115.929785][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.932072][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.941461][ T5546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.955071][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.957937][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.972485][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.975175][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.982046][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.984681][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.988524][ T5546] device veth0_vlan entered promiscuous mode [ 115.998876][ T5546] device veth1_vlan entered promiscuous mode [ 116.027924][ T5777] loop4: detected capacity change from 0 to 512 [ 116.080909][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.083574][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.087432][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.091507][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.095973][ T5546] device veth0_macvtap entered promiscuous mode [ 116.103048][ T5546] device veth1_macvtap entered promiscuous mode [ 116.114479][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.117193][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.120503][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.123222][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.125659][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.135999][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.266229][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.269242][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.286570][ T5546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.289464][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.291911][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.294212][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.307110][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.346593][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.349205][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.357704][ T5777] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 116.360231][ T5777] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 116.363849][ T5777] EXT4-fs (loop4): 1 truncate cleaned up [ 116.365243][ T5777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.393931][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.406080][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.408713][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.411332][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.413753][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.439327][ T5777] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 116.474874][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.499680][ T5546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.502514][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.505264][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.551938][ T5546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.554135][ T5546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.571625][ T5546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.573767][ T5546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.576597][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 116.578315][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 116.589510][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 116.622114][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 116.623887][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.625907][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 116.630896][ T5777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.678694][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13) [ 116.680500][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.682413][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 116.720650][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15) [ 116.722272][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.724086][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 116.728041][ T5790] vhci_hcd: connection closed [ 116.728707][ T148] vhci_hcd: stop threads [ 116.730915][ T148] vhci_hcd: release socket [ 116.732153][ T148] vhci_hcd: disconnect device [ 116.734273][ T5788] vhci_hcd: connection closed [ 116.734582][ T5786] vhci_hcd: connection closed [ 116.750664][ T4498] vhci_hcd: stop threads [ 116.753603][ T4498] vhci_hcd: release socket [ 116.754702][ T4498] vhci_hcd: disconnect device [ 116.758577][ T4498] vhci_hcd: stop threads [ 116.760300][ T5793] vhci_hcd: connection closed [ 116.760755][ T4498] vhci_hcd: release socket [ 116.762969][ T4498] vhci_hcd: disconnect device [ 116.764338][ T4498] vhci_hcd: stop threads [ 116.765415][ T4498] vhci_hcd: release socket [ 116.766823][ T4498] vhci_hcd: disconnect device [ 116.786022][ T5247] vhci_hcd: vhci_device speed not set [ 116.848372][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.850582][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.856683][ T3276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.909418][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.911636][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.916533][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.021108][ T5802] loop1: detected capacity change from 0 to 4096 [ 117.089840][ T5802] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 117.120000][ T5809] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 117.140274][ T5803] loop3: detected capacity change from 0 to 4096 [ 117.278309][ T5803] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 117.285550][ T5803] ntfs: (device loop3): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5. $MFT is corrupt. [ 117.333394][ T5803] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 121.797699][ T5827] loop2: detected capacity change from 0 to 128 [ 122.079100][ T5827] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.378665][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 122.428771][ T5839] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 122.457104][ T5842] loop0: detected capacity change from 0 to 256 [ 122.527891][ T5840] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 122.530708][ T5840] tipc: Enabled bearer , priority 10 [ 122.660819][ T5844] loop2: detected capacity change from 0 to 256 [ 122.724040][ T5844] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 123.030150][ T5822] loop4: detected capacity change from 0 to 32768 [ 123.052554][ T5854] loop0: detected capacity change from 0 to 4096 [ 123.170809][ T5822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.580 (5822) [ 123.208478][ T5854] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 123.285455][ T5822] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 123.287964][ T5822] BTRFS info (device loop4): using free space tree [ 123.289706][ T5822] BTRFS info (device loop4): has skinny extents [ 123.932020][ T5822] BTRFS info (device loop4): enabling ssd optimizations [ 123.965487][ T5822] BTRFS info (device loop4): scrub: started on devid 1 [ 124.018360][ T5822] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 124.303861][ T5893] loop2: detected capacity change from 0 to 256 [ 124.545281][ T5904] dlm: non-version read from control device 2 [ 125.000171][ T5921] syz.2.610 uses old SIOCAX25GETINFO [ 125.039803][ T5921] device wlan0 entered promiscuous mode [ 126.011619][ T5952] loop4: detected capacity change from 0 to 164 [ 126.072225][ T5952] rock: directory entry would overflow storage [ 126.073984][ T5952] rock: sig=0x5245, size=8, remaining=3 [ 126.219166][ T5954] netlink: 'syz.3.624': attribute type 2 has an invalid length. [ 126.227027][ T5946] loop2: detected capacity change from 0 to 32768 [ 126.319905][ T5946] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.621 (5946) [ 126.343942][ T5956] device wlan0 entered promiscuous mode [ 126.385566][ T5946] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 126.388302][ T5946] BTRFS info (device loop2): using free space tree [ 126.390056][ T5946] BTRFS info (device loop2): has skinny extents [ 126.746024][ T5946] BTRFS info (device loop2): enabling ssd optimizations [ 127.585302][ T5999] loop3: detected capacity change from 0 to 128 [ 127.665454][ T5999] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 127.676685][ T5999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.794410][ T6013] udc-core: couldn't find an available UDC or it's busy [ 128.799896][ T6013] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.814774][ T6013] loop3: detected capacity change from 0 to 512 [ 128.913064][ T6018] tmpfs: Bad value for 'mpol' [ 128.980365][ T6013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.414754][ T6008] loop4: detected capacity change from 0 to 32768 [ 129.530509][ T6008] XFS (loop4): Mounting V5 Filesystem [ 129.666185][ T6022] loop2: detected capacity change from 0 to 32768 [ 129.676183][ T6008] XFS (loop4): Ending clean mount [ 129.686842][ T6008] XFS (loop4): Quotacheck needed: Please wait. [ 129.815675][ T6008] XFS (loop4): Quotacheck: Done. [ 129.824108][ T6022] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 129.824108][ T6022] [ 129.861647][ T6022] ERROR: (device loop2): remounting filesystem as read-only [ 129.954907][ T3987] XFS (loop4): Unmounting Filesystem [ 130.207784][ T6041] loop2: detected capacity change from 0 to 128 [ 130.254343][ T6041] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 130.267647][ T6041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.533366][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.534977][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.625312][ T6052] tmpfs: Bad value for 'mpol' [ 131.945387][ T6059] loop3: detected capacity change from 0 to 2048 [ 132.006200][ T13] Bluetooth: hci5: command 0x0405 tx timeout [ 132.015363][ T6059] hpfs: Bad version 183,140. Mount readonly to go around [ 132.034778][ T6059] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 132.082452][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 132.196641][ T6074] loop2: detected capacity change from 0 to 2048 [ 132.400989][ T6080] tmpfs: Bad value for 'mpol' [ 132.658186][ T5602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.659307][ T6064] loop4: detected capacity change from 0 to 32768 [ 132.800663][ T6085] binder: 6081:6085 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 132.803072][ T6085] binder: 6081:6085 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 132.866183][ T6085] loop2: detected capacity change from 0 to 512 [ 133.024367][ T6085] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 133.422274][ T5602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.478853][ T6064] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 133.478853][ T6064] [ 133.482076][ T6064] ERROR: (device loop4): remounting filesystem as read-only [ 133.634631][ T5602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.693136][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.701014][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.706614][ T6058] device bridge_slave_0 entered promiscuous mode [ 133.734693][ T5602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.804095][ T4030] Bluetooth: hci3: command 0x0409 tx timeout [ 133.814386][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.817399][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.819882][ T6058] device bridge_slave_1 entered promiscuous mode [ 134.015428][ T6101] loop4: detected capacity change from 0 to 8 [ 134.713368][ T6078] loop3: detected capacity change from 0 to 40427 [ 134.735264][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.747005][ T6101] SQUASHFS error: xz decompression failed, data probably corrupt [ 134.749001][ T6101] SQUASHFS error: Failed to read block 0x91: -5 [ 134.750679][ T6101] SQUASHFS error: Unable to read metadata cache entry [8f] [ 134.752321][ T6101] SQUASHFS error: Unable to read inode 0x11f [ 134.757716][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.816219][ T6078] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.870837][ T6078] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.914196][ T6058] team0: Port device team_slave_0 added [ 134.953535][ T6058] team0: Port device team_slave_1 added [ 134.956661][ T6078] attempt to access beyond end of device [ 134.956661][ T6078] loop3: rw=2049, want=53384, limit=40427 [ 135.049922][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 135.069538][ T6078] attempt to access beyond end of device [ 135.069538][ T6078] loop3: rw=2049, want=53512, limit=40427 [ 135.103285][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.105135][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.132843][ T6116] tmpfs: Bad value for 'mpol' [ 135.137315][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.141658][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.143634][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.185040][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.193914][ T3974] attempt to access beyond end of device [ 135.193914][ T3974] loop3: rw=2049, want=45104, limit=40427 [ 135.209079][ T6091] chnl_net:caif_netlink_parms(): no params data found [ 135.258464][ T6113] loop2: detected capacity change from 0 to 2048 [ 135.294798][ T5602] tipc: Left network mode [ 135.309244][ T6113] hpfs: Bad version 183,140. Mount readonly to go around [ 135.311116][ T6113] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 135.518122][ T6058] device hsr_slave_0 entered promiscuous mode [ 135.624194][ T6122] binder: 6119:6122 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 135.626450][ T6122] binder: 6119:6122 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 135.674338][ T6122] loop4: detected capacity change from 0 to 512 [ 135.756999][ T6122] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 135.856997][ T3964] Bluetooth: hci3: command 0x041b tx timeout [ 136.138255][ T6058] device hsr_slave_1 entered promiscuous mode [ 136.330445][ T4022] Bluetooth: hci0: command 0x0409 tx timeout [ 136.396068][ T6058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.398082][ T6058] Cannot create hsr debugfs directory [ 136.456684][ T6124] 9pnet: p9_errstr2errno: server reported unknown error [ 136.780245][ T6134] loop2: detected capacity change from 0 to 512 [ 137.734748][ T6134] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.748599][ T6134] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz.2.678: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 137.872105][ T6134] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 137.882007][ T6134] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.896665][ T6134] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 137.898670][ T6134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.933798][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.946005][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.955421][ T6131] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz.2.678: 'file0' linked to parent dir [ 137.960228][ T6091] device bridge_slave_0 entered promiscuous mode [ 137.966910][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.968778][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.000102][ T6091] device bridge_slave_1 entered promiscuous mode [ 138.055543][ T6131] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz.2.678: 'file0' linked to parent dir [ 138.069595][ T3773] Bluetooth: hci3: command 0x040f tx timeout [ 138.114048][ T6091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.128385][ T6131] udc-core: couldn't find an available UDC or it's busy [ 138.130213][ T6131] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.292126][ T6158] loop3: detected capacity change from 0 to 8 [ 138.416378][ T3773] Bluetooth: hci0: command 0x041b tx timeout [ 138.521736][ T6158] SQUASHFS error: xz decompression failed, data probably corrupt [ 138.523965][ T6158] SQUASHFS error: Failed to read block 0x91: -5 [ 138.525573][ T6158] SQUASHFS error: Unable to read metadata cache entry [8f] [ 138.527600][ T6158] SQUASHFS error: Unable to read inode 0x11f [ 139.237776][ T6091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.358425][ T6091] team0: Port device team_slave_0 added [ 139.361850][ T6091] team0: Port device team_slave_1 added [ 139.651299][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.653261][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.674325][ T6091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.716432][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.718274][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.725025][ T6091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.818370][ T6157] loop4: detected capacity change from 0 to 32768 [ 139.847831][ T6091] device hsr_slave_0 entered promiscuous mode [ 139.886169][ T6091] device hsr_slave_1 entered promiscuous mode [ 139.944507][ T6091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.946562][ T6091] Cannot create hsr debugfs directory [ 139.968530][ T6157] XFS (loop4): Mounting V5 Filesystem [ 140.090288][ T3773] Bluetooth: hci3: command 0x0419 tx timeout [ 140.152812][ T6157] XFS (loop4): Ending clean mount [ 140.177173][ T6157] XFS (loop4): Quotacheck needed: Please wait. [ 140.196170][ T1745] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 140.199237][ T1745] XFS (loop4): Unmount and run xfs_repair [ 140.200781][ T1745] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 140.237443][ T1745] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 140.243170][ T1745] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 140.248900][ T1745] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 140.254655][ T1745] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 140.260391][ T1745] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.267439][ T1745] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.273105][ T1745] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.279008][ T1745] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.283876][ T1745] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 140.295581][ T6157] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 140.333265][ T6161] loop3: detected capacity change from 0 to 40427 [ 140.356095][ T6157] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 140.359239][ T6157] XFS (loop4): Unmount and run xfs_repair [ 140.360842][ T6157] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 140.363820][ T6157] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 140.370800][ T6157] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 140.379707][ T6157] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 140.392162][ T6157] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 140.401681][ T6157] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.411390][ T6157] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.418239][ T6157] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.433508][ T6157] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.455463][ T6157] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 140.486328][ T6157] XFS (loop4): page discard on page 00000000e0687f67, inode 0x2446, offset 20480. [ 140.493927][ T6161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.496046][ T4025] Bluetooth: hci0: command 0x040f tx timeout [ 140.592279][ T4025] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 140.595304][ T4025] XFS (loop4): Unmount and run xfs_repair [ 140.598577][ T6161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.606121][ T4025] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 140.608038][ T4025] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 140.610313][ T4025] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 140.618714][ T6189] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 140.623068][ T4025] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 140.625414][ T4025] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 140.631281][ T4025] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.633524][ T4025] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.635645][ T4025] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.644716][ T4025] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.648565][ T6182] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 140.651356][ T6182] XFS (loop4): page discard on page 00000000fd78889e, inode 0x2446, offset 2048. [ 140.651779][ T13] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 140.657307][ T13] XFS (loop4): Unmount and run xfs_repair [ 140.658780][ T13] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 140.665857][ T13] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 140.670678][ T6091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.670837][ T13] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 140.675381][ T13] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 140.678328][ T6161] attempt to access beyond end of device [ 140.678328][ T6161] loop3: rw=2049, want=53384, limit=40427 [ 140.705117][ T13] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 140.707580][ T13] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.709582][ T13] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.712014][ T6161] attempt to access beyond end of device [ 140.712014][ T6161] loop3: rw=2049, want=53512, limit=40427 [ 140.732252][ T13] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.734570][ T13] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.740491][ T6157] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 140.743410][ T6157] XFS (loop4): page discard on page 000000002dd00682, inode 0x2446, offset 24576. [ 140.748120][ T6189] netlink: 'syz.2.685': attribute type 4 has an invalid length. [ 140.753971][ T13] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 140.763600][ T13] XFS (loop4): Unmount and run xfs_repair [ 140.765017][ T13] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 140.773833][ T13] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 140.779997][ T13] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 140.794287][ T13] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 140.814668][ T13] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 140.831752][ T13] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.833987][ T13] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.845276][ T6091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.855685][ T13] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.857396][ T3974] attempt to access beyond end of device [ 140.857396][ T3974] loop3: rw=2049, want=45104, limit=40427 [ 140.867062][ T13] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.869376][ T6182] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 140.872110][ T6182] XFS (loop4): page discard on page 00000000d6a5d5e4, inode 0x2446, offset 4096. [ 140.884059][ T4025] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 140.886736][ T4025] XFS (loop4): Unmount and run xfs_repair [ 140.888271][ T4025] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 140.890031][ T4025] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 140.892178][ T4025] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 140.894328][ T4025] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 140.918241][ T6198] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 140.926069][ T4025] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 140.928462][ T4025] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.930664][ T4025] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.932861][ T4025] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.935094][ T4025] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 140.966560][ T6157] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 140.969543][ T6157] XFS (loop4): page discard on page 00000000260cb001, inode 0x2446, offset 28672. [ 140.969912][ T4030] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 140.974645][ T4030] XFS (loop4): Unmount and run xfs_repair [ 140.985771][ T4030] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 140.987632][ T4030] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 140.989822][ T4030] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 140.991922][ T4030] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 140.994575][ T4030] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.012729][ T4030] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.015195][ T4030] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.035506][ T4030] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.043790][ T4030] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.046304][ T6182] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 141.049219][ T6182] XFS (loop4): page discard on page 000000005797a0fd, inode 0x2446, offset 8192. [ 141.052458][ T4025] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.054928][ T4025] XFS (loop4): Unmount and run xfs_repair [ 141.057125][ T4025] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.058844][ T4025] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.061004][ T4025] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.063150][ T4025] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.065328][ T4025] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.071942][ T4025] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.074170][ T4025] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.078120][ T4025] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.080394][ T4025] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.082535][ T6157] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 141.085488][ T6157] XFS (loop4): page discard on page 000000009d97ca69, inode 0x2446, offset 32768. [ 141.092896][ T4030] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.095462][ T4030] XFS (loop4): Unmount and run xfs_repair [ 141.097504][ T4030] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.099285][ T4030] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.103699][ T6091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.131836][ T4030] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.134054][ T4030] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.145865][ T4030] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.148145][ T4030] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.150427][ T4030] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.152559][ T4030] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.154819][ T4030] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.176857][ T6182] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 141.179747][ T6182] XFS (loop4): page discard on page 000000009c9b10c4, inode 0x2446, offset 12288. [ 141.196753][ T3773] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.199592][ T3773] XFS (loop4): Unmount and run xfs_repair [ 141.201585][ T3773] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.203448][ T3773] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.205568][ T3773] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.216156][ T3773] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.218402][ T3773] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.220499][ T3773] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.222599][ T3773] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.224926][ T3773] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.256111][ T3773] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.258477][ T6157] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1c0/0x35c" at daddr 0x3 len 1 error 74 [ 141.261385][ T6157] XFS (loop4): page discard on page 0000000046807251, inode 0x2446, offset 36864. [ 141.261760][ T4025] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.276221][ T4025] XFS (loop4): Unmount and run xfs_repair [ 141.277626][ T4025] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.279404][ T4025] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.281643][ T4025] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.283864][ T4025] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.306260][ T4025] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.308619][ T4025] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.310671][ T4025] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.312852][ T4025] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.315016][ T4025] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.342667][ T6182] XFS (loop4): page discard on page 00000000dea63a87, inode 0x2446, offset 16384. [ 141.346417][ T4030] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.349171][ T4030] XFS (loop4): Unmount and run xfs_repair [ 141.350669][ T4030] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.352517][ T4030] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.354574][ T4030] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.378837][ T4030] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.381201][ T4030] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.383162][ T4030] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.385354][ T4030] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.406038][ T4030] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.408466][ T4030] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.429170][ T4030] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.435171][ T4030] XFS (loop4): Unmount and run xfs_repair [ 141.442421][ T4030] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.444565][ T4030] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.450857][ T4030] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.453113][ T4030] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.455515][ T4030] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.463339][ T4030] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.486692][ T4030] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.496098][ T4030] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.505260][ T4030] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.515181][ T13] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.517994][ T13] XFS (loop4): Unmount and run xfs_repair [ 141.519303][ T13] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.521039][ T13] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.535576][ T13] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.538175][ T13] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.540324][ T13] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.542599][ T13] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.556875][ T13] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.565226][ T13] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.575258][ T13] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.581653][ T13] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.581828][ T6091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.595119][ T13] XFS (loop4): Unmount and run xfs_repair [ 141.601558][ T13] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.607012][ T13] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.615190][ T13] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.623637][ T13] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.639635][ T13] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.644245][ T13] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.649159][ T13] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.654863][ T13] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.661046][ T13] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.666393][ T3773] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.669295][ T3773] XFS (loop4): Unmount and run xfs_repair [ 141.670731][ T3773] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.672571][ T3773] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.684377][ T3773] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.699579][ T3773] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.706618][ T3773] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.708981][ T3773] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.711177][ T3773] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.716097][ T3773] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.718418][ T3773] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.742865][ T3773] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.745549][ T3773] XFS (loop4): Unmount and run xfs_repair [ 141.752974][ T3773] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.754751][ T3773] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.767728][ T3773] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.769931][ T3773] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.772079][ T3773] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.774272][ T3773] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.794357][ T3773] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.797029][ T3773] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.809786][ T3773] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.810353][ T6213] loop3: detected capacity change from 0 to 2048 [ 141.814500][ T4939] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 141.820006][ T4939] XFS (loop4): Unmount and run xfs_repair [ 141.821469][ T4939] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 141.823316][ T4939] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 141.825361][ T4939] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 141.835394][ T4939] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 141.836620][ T3773] loop4: writeback error on inode 9286, offset 0, sector 18692 [ 141.838036][ T4939] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.846217][ T4939] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.848455][ T4939] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.850566][ T4939] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.852665][ T4939] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.884836][ T3987] XFS (loop4): Unmounting Filesystem [ 142.041271][ T6058] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.055962][ T6213] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.108127][ T6058] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.112130][ T6213] fs-verity: sha512 using implementation "sha512-arm64" [ 142.167865][ T6058] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.197726][ T6058] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.321021][ T5602] device hsr_slave_0 left promiscuous mode [ 142.373792][ T5602] device hsr_slave_1 left promiscuous mode [ 142.458065][ T6217] loop2: detected capacity change from 0 to 40427 [ 142.464326][ T5602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.466596][ T5602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.469460][ T5602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.471386][ T5602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.479267][ T5602] device bridge_slave_1 left promiscuous mode [ 142.480978][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.499326][ T6217] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 142.501260][ T6217] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.533739][ T6217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.543862][ T5602] device bridge_slave_0 left promiscuous mode [ 142.545497][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.565957][ T4022] Bluetooth: hci0: command 0x0419 tx timeout [ 143.223419][ T5602] device veth1_macvtap left promiscuous mode [ 143.225131][ T5602] device veth0_macvtap left promiscuous mode [ 143.322487][ T5602] device veth1_vlan left promiscuous mode [ 143.398631][ T5602] device veth0_vlan left promiscuous mode [ 143.410227][ T6232] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 143.430063][ T6217] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 143.431844][ T6217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.499033][ T6256] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 143.570695][ T6259] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 144.066618][ T5602] team0 (unregistering): Port device team_slave_1 removed [ 144.088590][ T5602] team0 (unregistering): Port device team_slave_0 removed [ 144.109287][ T5602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.153794][ T5602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.342766][ T5602] bond0 (unregistering): Released all slaves [ 144.457676][ T6091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.506101][ T6091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.513282][ T6283] loop3: detected capacity change from 0 to 512 [ 144.577177][ T6091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.626358][ T6091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.646399][ T4022] Bluetooth: hci0: command 0x0405 tx timeout [ 144.684301][ T6287] loop4: detected capacity change from 0 to 1024 [ 144.764671][ T6289] loop2: detected capacity change from 0 to 2048 [ 144.830334][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.854592][ T6289] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.869728][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.872072][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.882078][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.891914][ T6091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.896882][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.899457][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.901664][ T4937] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.903345][ T4937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.917476][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.958189][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 144.960035][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 144.970295][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.972583][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.990875][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.993366][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.995646][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.997449][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.020148][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.021939][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.039071][ T6091] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.055276][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.060726][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.078018][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.079939][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.095606][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.099523][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.100297][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.102276][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.111244][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.113755][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.116377][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.137637][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.140245][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.142744][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.145105][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.157038][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.158929][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.161760][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.164048][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.165873][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.176573][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.178441][ T6287] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.181084][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.194665][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.204935][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.206906][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.214774][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.237397][ T6058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.253361][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.300375][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.302182][ T6294] hfsplus: request for non-existent node 33423360 in B*Tree [ 145.350064][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.352645][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.357701][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.360536][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.376944][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.379451][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.381911][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.484031][ T6300] binder: 6295:6300 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 145.486287][ T6300] binder: 6295:6300 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 145.529954][ T6300] loop3: detected capacity change from 0 to 512 [ 145.789504][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.801011][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.812951][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.820526][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.885486][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.932598][ T6300] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 146.155709][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.176940][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.250147][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.266530][ T6304] loop2: detected capacity change from 0 to 256 [ 146.437999][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.439840][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.483923][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.492218][ T6312] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 146.539310][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.542078][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.565411][ T6058] device veth0_vlan entered promiscuous mode [ 146.608485][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.611210][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.614953][ T6312] netlink: 'syz.4.709': attribute type 4 has an invalid length. [ 146.615001][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.620690][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.641434][ T6058] device veth1_vlan entered promiscuous mode [ 146.737422][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.739902][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.742252][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.744695][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.784488][ T6058] device veth0_macvtap entered promiscuous mode [ 146.792794][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.795197][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.801328][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.812480][ T6058] device veth1_macvtap entered promiscuous mode [ 146.816980][ T6323] loop3: detected capacity change from 0 to 512 [ 146.838881][ T6091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.912199][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.914968][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.936155][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.938835][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.941245][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.959715][ T6323] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.961117][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.963269][ T6323] EXT4-fs error (device loop3): ext4_find_extent:929: inode #4: comm syz.3.710: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 146.965596][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.970953][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.987070][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.998065][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.000668][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.003268][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.006834][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.009163][ T6323] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 147.012045][ T6323] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.017357][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.019919][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.022286][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.024870][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.047159][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.049810][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.052297][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.052688][ T6323] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 147.054917][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.066122][ T6323] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.077065][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.084487][ T6091] device veth0_vlan entered promiscuous mode [ 147.087007][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.089625][ T6321] EXT4-fs error (device loop3): ext4_lookup:1852: inode #2: comm syz.3.710: 'file0' linked to parent dir [ 147.089683][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.095287][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.130607][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.139941][ T6058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.142201][ T6058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.144352][ T6058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.176026][ T6321] EXT4-fs error (device loop3): ext4_lookup:1852: inode #2: comm syz.3.710: 'file0' linked to parent dir [ 147.179404][ T6058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.184931][ T6321] udc-core: couldn't find an available UDC or it's busy [ 147.190036][ T6091] device veth1_vlan entered promiscuous mode [ 147.196161][ T6321] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.196345][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.200851][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.210892][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.235954][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.414535][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.418429][ T5892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.441157][ T6091] device veth0_macvtap entered promiscuous mode [ 147.518472][ T6091] device veth1_macvtap entered promiscuous mode [ 147.531263][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.533336][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.561372][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.563890][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.566796][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.609447][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.609745][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.611591][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.637036][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.646111][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.654932][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.660066][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.669182][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.680008][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.689564][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.696852][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.699577][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.729842][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.731997][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.734501][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.737769][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.767503][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.770161][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.772561][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.775214][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.785855][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.788515][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.790892][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.803820][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.845852][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.848659][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.859708][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.876362][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.879371][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.891298][ T6091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.893514][ T6091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.895604][ T6091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.906347][ T6334] loop3: detected capacity change from 0 to 2048 [ 147.926255][ T6091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.105398][ T6334] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.140549][ T6332] loop2: detected capacity change from 0 to 32768 [ 148.207712][ T6332] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.712 (6332) [ 148.275047][ T6332] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 148.283719][ T6332] BTRFS info (device loop2): using free space tree [ 148.287009][ T6332] BTRFS info (device loop2): has skinny extents [ 148.303666][ T1810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.317152][ T1810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.365642][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.370458][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 148.582131][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.586528][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.611868][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.658314][ T6374] netlink: 'syz.3.720': attribute type 1 has an invalid length. [ 148.660400][ T6374] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.720'. [ 148.668878][ T6332] BTRFS info (device loop2): enabling ssd optimizations [ 148.813022][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.814942][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.827099][ T6325] device bridge_slave_0 entered promiscuous mode [ 148.837732][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.843704][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.858474][ T6325] device bridge_slave_1 entered promiscuous mode [ 148.928400][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.962298][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.045824][ T4019] Bluetooth: hci6: command 0x0409 tx timeout [ 150.241612][ T6325] team0: Port device team_slave_0 added [ 150.245302][ T6325] team0: Port device team_slave_1 added [ 150.248998][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'. [ 151.126184][ T1528] Bluetooth: hci6: command 0x041b tx timeout [ 151.237665][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.239489][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.245719][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.263467][ T6388] loop3: detected capacity change from 0 to 32768 [ 151.310130][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.311939][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.320066][ T6388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.723 (6388) [ 151.344217][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.352593][ T6388] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 151.354835][ T6388] BTRFS info (device loop3): using free space tree [ 151.385785][ T6388] BTRFS info (device loop3): has skinny extents [ 151.447782][ T6325] device hsr_slave_0 entered promiscuous mode [ 151.527125][ T6325] device hsr_slave_1 entered promiscuous mode [ 151.601466][ T6388] BTRFS info (device loop3): enabling ssd optimizations [ 151.696942][ T6388] BTRFS info (device loop3): scrub: started on devid 1 [ 151.706243][ T6388] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 151.845007][ T6449] loop1: detected capacity change from 0 to 512 [ 151.987535][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 151.990319][ T6325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.057476][ T6449] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.738: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 152.063123][ T6449] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.738: couldn't read orphan inode 15 (err -117) [ 152.081922][ T6449] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.249953][ T6325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.347628][ T6325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.759260][ T6325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.841961][ T6445] loop2: detected capacity change from 0 to 40427 [ 152.881959][ T6445] F2FS-fs (loop2): invalid crc value [ 152.963818][ T6445] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.044868][ T6445] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 153.187059][ T6325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.191269][ T5546] attempt to access beyond end of device [ 153.191269][ T5546] loop2: rw=2049, want=45104, limit=40427 [ 153.205873][ T13] Bluetooth: hci6: command 0x040f tx timeout [ 153.240173][ T6325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.291811][ T6484] netlink: 'syz.1.749': attribute type 10 has an invalid length. [ 153.592185][ T6496] loop2: detected capacity change from 0 to 256 [ 153.914411][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.917704][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.585982][ T6484] device bridge_slave_0 left promiscuous mode [ 154.596339][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.674906][ T6484] device bridge_slave_1 left promiscuous mode [ 154.677186][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.767255][ T6484] bond0: (slave bond_slave_0): Releasing backup interface [ 154.850459][ T6484] bond0: (slave bond_slave_1): Releasing backup interface [ 154.944394][ T6484] team0: Port device team_slave_0 removed [ 154.975576][ T6484] team0: Port device team_slave_1 removed [ 154.980801][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.007342][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.042810][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.079534][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.308283][ T6457] Bluetooth: hci6: command 0x0419 tx timeout [ 155.710539][ T6484] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.712673][ T6484] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.714874][ T6484] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.717736][ T6484] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.987394][ T6325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.039458][ T6325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.212754][ T6515] loop1: detected capacity change from 0 to 512 [ 156.316050][ T6515] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.756: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 156.320925][ T6515] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.756: couldn't read orphan inode 15 (err -117) [ 156.345921][ T6515] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.662770][ T6528] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 158.484097][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.486288][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.574072][ T6533] loop2: detected capacity change from 0 to 40427 [ 158.641100][ T6533] F2FS-fs (loop2): invalid crc value [ 158.680460][ T6533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.704167][ T6533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.744197][ T6533] attempt to access beyond end of device [ 158.744197][ T6533] loop2: rw=2049, want=45200, limit=40427 [ 158.844272][ T5546] attempt to access beyond end of device [ 158.844272][ T5546] loop2: rw=2049, want=45216, limit=40427 [ 159.133237][ T6528] device bridge_slave_0 left promiscuous mode [ 159.135114][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.230293][ T6528] device bridge_slave_1 left promiscuous mode [ 159.232014][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.271397][ T6567] loop2: detected capacity change from 0 to 256 [ 159.331974][ T6528] bond0: (slave bond_slave_0): Releasing backup interface [ 159.333806][ T6567] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53478ea5, utbl_chksum : 0xe619d30d) [ 159.337680][ T6567] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 159.407802][ T6528] bond0: (slave bond_slave_1): Releasing backup interface [ 159.501558][ T6528] team0: Port device team_slave_0 removed [ 159.690028][ T6528] team0: Port device team_slave_1 removed [ 159.696666][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.619953][ T6528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.652877][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.677734][ T6528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.954795][ T6577] udc-core: couldn't find an available UDC or it's busy [ 160.957598][ T6577] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 161.351907][ T6528] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.354206][ T6528] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.361465][ T6528] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.363706][ T6528] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.649132][ T6528] device ip6tnl2 left promiscuous mode [ 161.852289][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.894566][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.897463][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.909810][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.930313][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.933290][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.936680][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.938464][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.996561][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.998869][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.001407][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.007130][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.008848][ T6454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.010988][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.024304][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.027560][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.031472][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.043633][ T6325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.053850][ T6325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.061621][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.064045][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.068173][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.070679][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.073127][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.085002][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.095255][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.114507][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.347808][ T6602] udc-core: couldn't find an available UDC or it's busy [ 163.349530][ T6602] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.402869][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.404833][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.437753][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.615459][ T6591] loop1: detected capacity change from 0 to 32768 [ 163.682953][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.687397][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.762846][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.765356][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.779838][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.793980][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.802786][ T6325] device veth0_vlan entered promiscuous mode [ 163.808829][ T6591] XFS (loop1): Mounting V5 Filesystem [ 163.865618][ T6325] device veth1_vlan entered promiscuous mode [ 163.869511][ T6627] netlink: 'syz.3.793': attribute type 10 has an invalid length. [ 163.984003][ T6591] XFS (loop1): Ending clean mount [ 164.002252][ T6591] XFS (loop1): Quotacheck needed: Please wait. [ 164.048341][ T6325] device veth0_macvtap entered promiscuous mode [ 164.052798][ T6325] device veth1_macvtap entered promiscuous mode [ 164.066920][ T6591] XFS (loop1): Quotacheck: Done. [ 164.070671][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.073260][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.075649][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.079437][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.082067][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.094104][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.097589][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.100399][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.102768][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.105173][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.108356][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.111239][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.113530][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.117165][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.120770][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.123211][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.133256][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.140603][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.153490][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.171877][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.182178][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.204404][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.217585][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.225692][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.273128][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.286258][ T6058] XFS (loop1): Unmounting Filesystem [ 165.173531][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.188854][ T6325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.191190][ T6325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.193161][ T6325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.195318][ T6325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.216439][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.219274][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.282389][ T6641] loop2: detected capacity change from 0 to 2048 [ 165.419618][ T6644] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.437425][ T5602] device wlan0 left promiscuous mode [ 165.733715][ T5602] device hsr_slave_0 left promiscuous mode [ 165.822230][ T5602] device hsr_slave_1 left promiscuous mode [ 165.987617][ T5602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.989876][ T5602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.993042][ T5602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.995194][ T5602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.998589][ T5602] device bridge_slave_1 left promiscuous mode [ 166.000542][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.027097][ T5602] device bridge_slave_0 left promiscuous mode [ 166.029059][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.146265][ T5602] device veth1_macvtap left promiscuous mode [ 166.153190][ T5602] device veth0_macvtap left promiscuous mode [ 166.156519][ T5602] device veth1_vlan left promiscuous mode [ 166.158932][ T5602] device veth0_vlan left promiscuous mode [ 166.635127][ T5602] team0 (unregistering): Port device team_slave_1 removed [ 166.655094][ T5602] team0 (unregistering): Port device team_slave_0 removed [ 166.674884][ T5602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.721334][ T5602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.712746][ T5602] bond0 (unregistering): Released all slaves [ 167.820041][ T6660] netlink: 'syz.0.804': attribute type 10 has an invalid length. [ 167.846089][ T1745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.852601][ T1745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.261522][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.264260][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.802849][ T6660] device bridge_slave_0 left promiscuous mode [ 168.804479][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.909758][ T6660] device bridge_slave_1 left promiscuous mode [ 168.911374][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.966120][ T6456] Bluetooth: hci1: command 0x0406 tx timeout [ 168.979579][ T6660] bond0: (slave bond_slave_0): Releasing backup interface [ 169.064416][ T6660] bond0: (slave bond_slave_1): Releasing backup interface [ 169.169118][ T6660] team0: Port device team_slave_0 removed [ 169.217413][ T6660] team0: Port device team_slave_1 removed [ 169.222281][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.240790][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.260011][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.278515][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.686583][ T6456] Bluetooth: hci2: command 0x0406 tx timeout [ 169.774150][ T6660] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.776796][ T6660] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.778870][ T6660] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.781703][ T6660] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.049422][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.052153][ T6669] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 170.117222][ T1810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.119911][ T1810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.141917][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.472118][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.477566][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.488106][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.492119][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.496927][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.500962][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.504275][ T6698] loop2: detected capacity change from 0 to 1024 [ 170.506855][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.508990][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.511075][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.514547][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.517333][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.519330][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.521247][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.523194][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.525066][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.527963][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.529925][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.531962][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.533890][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.536324][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.538485][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.540451][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.542519][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.544560][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.547308][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.549820][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.551757][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.553839][ T6454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.558947][ T6701] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 170.592827][ T6454] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 170.666194][ T6698] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 171.604370][ T6710] netlink: 'syz.3.821': attribute type 10 has an invalid length. [ 171.892172][ T6723] loop2: detected capacity change from 0 to 4096 [ 171.915304][ T6732] loop3: detected capacity change from 0 to 512 [ 171.953977][ T6716] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 171.963731][ T6723] ntfs: volume version 3.1. [ 171.990659][ T6723] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 172.014766][ T6723] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 172.031205][ T6723] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 172.033189][ T6723] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 172.035644][ T6723] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 172.226133][ T6723] ntfs: (device loop2): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 172.276013][ T6732] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.829: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 172.294797][ T6732] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.829: couldn't read orphan inode 15 (err -117) [ 172.327462][ T6732] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.922628][ T6748] loop2: detected capacity change from 0 to 256 [ 173.935351][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.937602][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.939601][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.941525][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.943393][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.945257][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.970379][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.972244][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.974125][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 173.978557][ T6753] loop4: detected capacity change from 0 to 1024 [ 173.981817][ T6748] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.012983][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.015079][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.024753][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.027257][ T6756] loop3: detected capacity change from 0 to 64 [ 174.028983][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.030790][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.032863][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.034802][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.042694][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.046772][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.050872][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.053920][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.057915][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.060985][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.064038][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.068311][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.072481][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.080180][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.084253][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.092306][ T6452] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 174.101647][ T6756] hfs: invalid gid -1 [ 174.103046][ T6756] hfs: unable to parse mount options [ 174.173027][ T6753] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 174.186677][ T6452] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 174.258678][ T6762] loop1: detected capacity change from 0 to 8 [ 174.763817][ T6762] squashfs image failed sanity check [ 175.252190][ T6776] loop3: detected capacity change from 0 to 64 [ 175.609572][ T6779] loop3: detected capacity change from 0 to 4096 [ 175.689765][ T6787] loop1: detected capacity change from 0 to 2048 [ 175.782516][ T6788] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.133352][ T6805] loop3: detected capacity change from 0 to 64 [ 177.216899][ T6805] hfs: invalid gid -1 [ 177.217960][ T6805] hfs: unable to parse mount options [ 177.249471][ T6809] loop2: detected capacity change from 0 to 64 [ 177.256171][ T6807] loop1: detected capacity change from 0 to 1764 [ 177.477354][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 178.010677][ T6818] loop2: detected capacity change from 0 to 128 [ 178.067265][ T6818] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.673440][ T6843] capability: warning: `syz.1.867' uses deprecated v2 capabilities in a way that may be insecure [ 180.840640][ T6849] loop3: detected capacity change from 0 to 512 [ 180.866905][ T6848] loop1: detected capacity change from 0 to 4096 [ 180.903529][ T6851] loop4: detected capacity change from 0 to 1024 [ 180.926635][ T6849] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.869: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 180.933871][ T6849] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.869: couldn't read orphan inode 15 (err -117) [ 180.946034][ T6849] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.957706][ T6845] device wlan0 left promiscuous mode [ 181.876951][ T6856] device syzkaller0 entered promiscuous mode [ 182.006496][ T6858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.332557][ T6882] loop3: detected capacity change from 0 to 1024 [ 182.699345][ T6897] loop3: detected capacity change from 0 to 8 [ 182.916996][ T6900] loop3: detected capacity change from 0 to 512 [ 182.938375][ T6900] EXT4-fs (loop3): Test dummy encryption mode enabled [ 182.956236][ T6900] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.888: casefold flag without casefold feature [ 182.968333][ T6900] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 183.002974][ T6900] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 183.149506][ T6895] chnl_net:caif_netlink_parms(): no params data found [ 183.374490][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.376739][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.389573][ T6895] device bridge_slave_0 entered promiscuous mode [ 183.406568][ T6900] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 183.406758][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.414653][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.422643][ T6895] device bridge_slave_1 entered promiscuous mode [ 183.486243][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.506460][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.627084][ T6895] team0: Port device team_slave_0 added [ 183.640875][ T6895] team0: Port device team_slave_1 added [ 183.705171][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.710813][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.725559][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.743767][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.747919][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.761994][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.867932][ T6895] device hsr_slave_0 entered promiscuous mode [ 183.906287][ T6895] device hsr_slave_1 entered promiscuous mode [ 183.946257][ T6895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.948253][ T6895] Cannot create hsr debugfs directory [ 184.624073][ T6976] loop4: detected capacity change from 0 to 1024 [ 184.726047][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 184.895144][ T6982] loop4: detected capacity change from 0 to 8 [ 184.977617][ T6895] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.038201][ T6895] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.146463][ T6895] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.192607][ T422] device hsr_slave_0 left promiscuous mode [ 185.208001][ T422] device hsr_slave_1 left promiscuous mode [ 185.881062][ T422] bond0 (unregistering): Released all slaves [ 185.992696][ T6895] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.069106][ T7005] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 186.070872][ T7005] netlink: 'syz.2.917': attribute type 2 has an invalid length. [ 186.217526][ T7013] xt_l2tp: v2 doesn't support IP mode [ 186.274414][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.325621][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.328353][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.333946][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.357069][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.359802][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.362384][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.364307][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.367444][ T7022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.918'. [ 186.393576][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.402547][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.405157][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.468913][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.470762][ T6456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.473189][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.475138][ T7020] loop4: detected capacity change from 0 to 4096 [ 187.112677][ T7030] loop3: detected capacity change from 0 to 256 [ 187.161834][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 187.356689][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.359453][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.362731][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.365275][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.368816][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.371397][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.373756][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.423443][ T7030] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.447386][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.450040][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.457758][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.472338][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.510737][ T7020] ntfs: volume version 3.1. [ 187.587483][ T7020] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 187.592515][ T7020] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 187.630517][ T7020] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 187.632849][ T7020] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 187.663263][ T7020] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 187.679459][ T7020] ntfs: (device loop4): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 189.923378][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.931905][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.933891][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.937300][ T7065] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 189.939178][ T7065] netlink: 'syz.1.928': attribute type 2 has an invalid length. [ 190.077987][ T3276] Bluetooth: hci4: command 0x040f tx timeout [ 190.147397][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.149944][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.221346][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.224032][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.227427][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.234089][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.245172][ T6895] device veth0_vlan entered promiscuous mode [ 190.298884][ T7081] xt_l2tp: v2 doesn't support IP mode [ 190.326106][ T6895] device veth1_vlan entered promiscuous mode [ 190.389235][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.391833][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.394633][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.406488][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.422127][ T6895] device veth0_macvtap entered promiscuous mode [ 190.429631][ T7089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.932'. [ 190.440503][ T6895] device veth1_macvtap entered promiscuous mode [ 190.599231][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.608910][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.611365][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.614015][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.616773][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.625829][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.629545][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.632970][ T3276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.635373][ T3276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.638070][ T3276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.640958][ T3276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.644885][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.647898][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.650309][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.660775][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.663857][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.675592][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.019577][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.022733][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.025578][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.041515][ T6895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.043949][ T6895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.057112][ T6895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.059217][ T6895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.108668][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 192.158202][ T7107] loop3: detected capacity change from 0 to 512 [ 192.205636][ T7107] EXT4-fs (loop3): Test dummy encryption mode enabled [ 192.220197][ T7107] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.936: casefold flag without casefold feature [ 192.245915][ T7105] loop4: detected capacity change from 0 to 4096 [ 192.266108][ T7107] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 192.381535][ T7105] ntfs: volume version 3.1. [ 192.426964][ T1639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.439347][ T1639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.453358][ T7107] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 192.487388][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.488971][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.532936][ T7105] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 193.430834][ T7105] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 193.436281][ T7105] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 193.438259][ T7105] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 193.441766][ T7105] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 193.447710][ T7105] ntfs: (device loop4): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 193.504037][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.511781][ T7126] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 193.514007][ T7126] netlink: 'syz.2.941': attribute type 2 has an invalid length. [ 193.536022][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.538330][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.564796][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.431023][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'. [ 196.433213][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 196.435423][ T7187] netlink: 5 bytes leftover after parsing attributes in process `syz.2.957'. [ 196.665147][ T7201] loop3: detected capacity change from 0 to 512 [ 196.825612][ T7201] EXT4-fs (loop3): 1 orphan inode deleted [ 196.827387][ T7201] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 198.093334][ T7227] device syzkaller0 entered promiscuous mode [ 202.093261][ T7272] loop4: detected capacity change from 0 to 8192 [ 202.120521][ T7272] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 202.123261][ T7272] REISERFS (device loop4): using ordered data mode [ 202.124945][ T7272] reiserfs: using flush barriers [ 202.145843][ T7272] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.156865][ T7272] REISERFS (device loop4): checking transaction log (loop4) [ 203.355441][ T7272] REISERFS (device loop4): Using tea hash to sort names [ 203.369418][ T7272] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 203.373070][ T7272] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 203.466578][ T7272] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 203.525216][ T7272] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 203.607098][ T7272] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 204.524455][ T7306] device syzkaller0 entered promiscuous mode [ 205.813886][ T7329] loop3: detected capacity change from 0 to 512 [ 205.842559][ T7329] EXT4-fs (loop3): Test dummy encryption mode enabled [ 205.879852][ T7331] input: syz0 as /devices/virtual/input/input2 [ 205.881844][ T7331] input: failed to attach handler leds to device input2, error: -6 [ 205.890391][ T7329] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.1000: casefold flag without casefold feature [ 205.908780][ T7329] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 206.078026][ T7329] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 208.238831][ T7357] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 208.266219][ T7359] loop4: detected capacity change from 0 to 512 [ 208.378554][ T7359] EXT4-fs (loop4): 1 orphan inode deleted [ 208.379918][ T7359] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 208.553735][ T7365] device syzkaller0 entered promiscuous mode [ 209.637647][ T7376] input: syz0 as /devices/virtual/input/input3 [ 209.639223][ T7376] input: failed to attach handler leds to device input3, error: -6 [ 210.119638][ T7395] loop4: detected capacity change from 0 to 8192 [ 211.117726][ T7395] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 211.120091][ T7395] REISERFS (device loop4): using ordered data mode [ 211.121740][ T7395] reiserfs: using flush barriers [ 211.148150][ T7409] input: syz0 as /devices/virtual/input/input4 [ 211.149751][ T7409] input: failed to attach handler leds to device input4, error: -6 [ 211.166037][ T7395] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.196239][ T7395] REISERFS (device loop4): checking transaction log (loop4) [ 212.399106][ T7429] rtc-efi rtc-efi.0: write status is 3 [ 212.454606][ T7395] REISERFS (device loop4): Using tea hash to sort names [ 212.456781][ T7395] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 212.460171][ T7395] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 212.547302][ T7395] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 212.675391][ T7395] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 213.733583][ T7395] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 213.762885][ T7445] loop3: detected capacity change from 0 to 1024 [ 213.790595][ T7445] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 213.803722][ T7445] EXT4-fs (loop3): invalid journal inode [ 213.803787][ T7445] EXT4-fs (loop3): can't get journal size [ 213.816912][ T7445] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 215.301245][ T7469] rtc-efi rtc-efi.0: write status is 3 [ 215.380200][ T7476] loop4: detected capacity change from 0 to 512 [ 215.423001][ T7479] loop3: detected capacity change from 0 to 64 [ 215.514189][ T7476] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 216.664566][ T7493] loop3: detected capacity change from 0 to 1024 [ 216.807123][ T7493] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 216.835068][ T7493] EXT4-fs (loop3): invalid journal inode [ 216.855401][ T7493] EXT4-fs (loop3): can't get journal size [ 217.294242][ T7493] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 218.036200][ T7518] rtc-efi rtc-efi.0: write status is 3 [ 220.723381][ T7550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1082'. [ 220.742333][ T7550] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1082'. [ 220.758889][ T7550] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1082'. [ 220.995110][ T7561] bpf_jit: unknown atomic op code 40 [ 221.165475][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 223.192007][ T7590] loop4: detected capacity change from 0 to 1024 [ 223.369872][ T4992] hfsplus: b-tree write err: -5, ino 4 [ 223.449016][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 224.456048][ T7609] netlink: 'syz.4.1103': attribute type 30 has an invalid length. [ 226.704821][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.707220][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.711544][ T25] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 226.919578][ T7659] sctp: [Deprecated]: syz.0.1119 (pid 7659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.919578][ T7659] Use struct sctp_sack_info instead [ 229.283558][ T7694] mkiss: ax0: crc mode is auto. [ 229.331824][ T7697] binder: 7696:7697 tried to acquire reference to desc 0, got 1 instead [ 229.334808][ T7697] binder: 7696:7697 got reply transaction with no transaction stack [ 229.341850][ T7697] binder: 7696:7697 transaction failed 29201/-71, size 96-24 line 2824 [ 229.365926][ T7704] 9pnet: Insufficient options for proto=fd [ 230.661931][ T5890] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.235901][ T6456] Bluetooth: hci5: command 0x0406 tx timeout [ 231.894717][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1145'. [ 232.020000][ T7748] binder: 7747:7748 BC_INCREFS_DONE u0000000000000000 no match [ 232.107998][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.368058][ T7771] binder: 7770:7771 BC_INCREFS_DONE u0000000000000000 no match [ 233.511798][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.819855][ T7800] binder: 7799:7800 BC_INCREFS_DONE u0000000000000000 no match [ 234.014548][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.029540][ T7805] process 'syz.1.1177' launched './bus' with NULL argv: empty string added [ 234.134014][ T7774] loop3: detected capacity change from 0 to 32768 [ 234.174361][ T7774] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1163 (7774) [ 234.203820][ T7774] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 234.211840][ T7774] BTRFS info (device loop3): setting nodatacow, compression disabled [ 234.218535][ T7774] BTRFS info (device loop3): setting datacow [ 234.222688][ T7774] BTRFS info (device loop3): doing ref verification [ 234.225596][ T7774] BTRFS info (device loop3): turning off barriers [ 234.230245][ T7774] BTRFS info (device loop3): enabling ssd optimizations [ 234.233177][ T7774] BTRFS info (device loop3): using spread ssd allocation scheme [ 234.252462][ T7774] BTRFS info (device loop3): not using ssd optimizations [ 234.261454][ T7774] BTRFS info (device loop3): not using spread ssd allocation scheme [ 234.268155][ T7774] BTRFS info (device loop3): using free space tree [ 234.275324][ T7774] BTRFS info (device loop3): has skinny extents [ 234.405252][ T7839] binder: 7836:7839 BC_INCREFS_DONE u0000000000000000 no match [ 234.536428][ T4024] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 234.538272][ T4024] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 234.543508][ T4024] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 234.602126][ T7844] sctp: [Deprecated]: syz.1.1189 (pid 7844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.602126][ T7844] Use struct sctp_sack_info instead [ 235.232069][ T6456] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 235.233845][ T6456] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 235.252747][ T6456] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 235.280406][ T7895] sctp: [Deprecated]: syz.4.1206 (pid 7895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.280406][ T7895] Use struct sctp_sack_info instead [ 235.303519][ T7900] [ 235.304137][ T7900] ====================================================== [ 235.305717][ T7900] WARNING: possible circular locking dependency detected [ 235.307462][ T7900] 5.15.163-syzkaller #0 Not tainted [ 235.308660][ T7900] ------------------------------------------------------ [ 235.310342][ T7900] syz.3.1205/7900 is trying to acquire lock: [ 235.311880][ T7900] ffff0000cda1f120 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x60/0x2c8 [ 235.314861][ T7900] [ 235.314861][ T7900] but task is already holding lock: [ 235.316718][ T7900] ffff0000e3c93d28 (&d->lock#2){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x200/0x634 [ 235.319057][ T7900] [ 235.319057][ T7900] which lock already depends on the new lock. [ 235.319057][ T7900] [ 235.321860][ T7900] [ 235.321860][ T7900] the existing dependency chain (in reverse order) is: [ 235.324106][ T7900] [ 235.324106][ T7900] -> #3 (&d->lock#2){+.+.}-{3:3}: [ 235.325943][ T7900] __mutex_lock_common+0x194/0x2154 [ 235.327376][ T7900] mutex_lock_nested+0xa4/0xf8 [ 235.328739][ T7900] __rfcomm_dlc_close+0x200/0x634 [ 235.330348][ T7900] rfcomm_dlc_close+0x100/0x194 [ 235.331862][ T7900] __rfcomm_sock_close+0x138/0x258 [ 235.333376][ T7900] rfcomm_sock_shutdown+0xa8/0x214 [ 235.334947][ T7900] rfcomm_sock_release+0x58/0x114 [ 235.336343][ T7900] sock_close+0xb8/0x1fc [ 235.337511][ T7900] __fput+0x1c4/0x800 [ 235.338675][ T7900] ____fput+0x20/0x30 [ 235.339750][ T7900] task_work_run+0x130/0x1e4 [ 235.341196][ T7900] do_exit+0x670/0x20bc [ 235.342530][ T7900] do_group_exit+0x110/0x268 [ 235.343999][ T7900] get_signal+0x634/0x1550 [ 235.345326][ T7900] do_notify_resume+0x3d0/0x32b8 [ 235.346688][ T7900] el0_svc+0xfc/0x1f0 [ 235.348037][ T7900] el0t_64_sync_handler+0x84/0xe4 [ 235.349442][ T7900] el0t_64_sync+0x1a0/0x1a4 [ 235.350685][ T7900] [ 235.350685][ T7900] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 235.352626][ T7900] __mutex_lock_common+0x194/0x2154 [ 235.354107][ T7900] mutex_lock_nested+0xa4/0xf8 [ 235.355497][ T7900] rfcomm_dlc_exists+0xb0/0x32c [ 235.356803][ T7900] rfcomm_dev_ioctl+0x938/0x2434 [ 235.358263][ T7900] rfcomm_sock_ioctl+0x98/0xf0 [ 235.359877][ T7900] sock_do_ioctl+0x134/0x2dc [ 235.361339][ T7900] sock_ioctl+0x4f0/0x8ac [ 235.362718][ T7900] __arm64_sys_ioctl+0x14c/0x1c8 [ 235.364218][ T7900] invoke_syscall+0x98/0x2b8 [ 235.365421][ T7900] el0_svc_common+0x138/0x258 [ 235.366767][ T7900] do_el0_svc+0x58/0x14c [ 235.368025][ T7900] el0_svc+0x7c/0x1f0 [ 235.369173][ T7900] el0t_64_sync_handler+0x84/0xe4 [ 235.370620][ T7900] el0t_64_sync+0x1a0/0x1a4 [ 235.371920][ T7900] [ 235.371920][ T7900] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 235.374106][ T7900] __mutex_lock_common+0x194/0x2154 [ 235.375687][ T7900] mutex_lock_nested+0xa4/0xf8 [ 235.376907][ T7900] rfcomm_dev_ioctl+0x258/0x2434 [ 235.378195][ T7900] rfcomm_sock_ioctl+0x98/0xf0 [ 235.379586][ T7900] sock_do_ioctl+0x134/0x2dc [ 235.380836][ T7900] sock_ioctl+0x4f0/0x8ac [ 235.382033][ T7900] __arm64_sys_ioctl+0x14c/0x1c8 [ 235.383390][ T7900] invoke_syscall+0x98/0x2b8 [ 235.384741][ T7900] el0_svc_common+0x138/0x258 [ 235.386151][ T7900] do_el0_svc+0x58/0x14c [ 235.387419][ T7900] el0_svc+0x7c/0x1f0 [ 235.388623][ T7900] el0t_64_sync_handler+0x84/0xe4 [ 235.390168][ T7900] el0t_64_sync+0x1a0/0x1a4 [ 235.391593][ T7900] [ 235.391593][ T7900] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 235.393908][ T7900] __lock_acquire+0x32d4/0x7638 [ 235.395279][ T7900] lock_acquire+0x240/0x77c [ 235.396561][ T7900] lock_sock_nested+0xec/0x1ec [ 235.397981][ T7900] rfcomm_sk_state_change+0x60/0x2c8 [ 235.399492][ T7900] __rfcomm_dlc_close+0x23c/0x634 [ 235.401003][ T7900] rfcomm_dlc_close+0x100/0x194 [ 235.402442][ T7900] __rfcomm_sock_close+0x138/0x258 [ 235.403941][ T7900] rfcomm_sock_shutdown+0xa8/0x214 [ 235.405362][ T7900] rfcomm_sock_release+0x58/0x114 [ 235.406814][ T7900] sock_close+0xb8/0x1fc [ 235.408055][ T7900] __fput+0x1c4/0x800 [ 235.409439][ T7900] ____fput+0x20/0x30 [ 235.410518][ T7900] task_work_run+0x130/0x1e4 [ 235.411835][ T7900] do_exit+0x670/0x20bc [ 235.412994][ T7900] do_group_exit+0x110/0x268 [ 235.414304][ T7900] get_signal+0x634/0x1550 [ 235.415642][ T7900] do_notify_resume+0x3d0/0x32b8 [ 235.417018][ T7900] el0_svc+0xfc/0x1f0 [ 235.418110][ T7900] el0t_64_sync_handler+0x84/0xe4 [ 235.419650][ T7900] el0t_64_sync+0x1a0/0x1a4 [ 235.420996][ T7900] [ 235.420996][ T7900] other info that might help us debug this: [ 235.420996][ T7900] [ 235.423752][ T7900] Chain exists of: [ 235.423752][ T7900] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock#2 [ 235.423752][ T7900] [ 235.427474][ T7900] Possible unsafe locking scenario: [ 235.427474][ T7900] [ 235.429424][ T7900] CPU0 CPU1 [ 235.430838][ T7900] ---- ---- [ 235.432281][ T7900] lock(&d->lock#2); [ 235.433249][ T7900] lock(rfcomm_mutex); [ 235.434869][ T7900] lock(&d->lock#2); [ 235.436517][ T7900] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 235.438185][ T7900] [ 235.438185][ T7900] *** DEADLOCK *** [ 235.438185][ T7900] [ 235.440198][ T7900] 3 locks held by syz.3.1205/7900: [ 235.441623][ T7900] #0: ffff0000dbd88810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 235.444126][ T7900] #1: ffff800016baa6e8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x44/0x194 [ 235.446627][ T7900] #2: ffff0000e3c93d28 (&d->lock#2){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x200/0x634 [ 235.449194][ T7900] [ 235.449194][ T7900] stack backtrace: [ 235.450709][ T7900] CPU: 0 PID: 7900 Comm: syz.3.1205 Not tainted 5.15.163-syzkaller #0 [ 235.452790][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 235.455487][ T7900] Call trace: [ 235.456183][ T7900] dump_backtrace+0x0/0x530 [ 235.457467][ T7900] show_stack+0x2c/0x3c [ 235.458560][ T7900] dump_stack_lvl+0x108/0x170 [ 235.459759][ T7900] dump_stack+0x1c/0x58 [ 235.460862][ T7900] print_circular_bug+0x150/0x1b8 [ 235.462260][ T7900] check_noncircular+0x2cc/0x378 [ 235.463641][ T7900] __lock_acquire+0x32d4/0x7638 [ 235.464915][ T7900] lock_acquire+0x240/0x77c [ 235.466074][ T7900] lock_sock_nested+0xec/0x1ec [ 235.467408][ T7900] rfcomm_sk_state_change+0x60/0x2c8 [ 235.468727][ T7900] __rfcomm_dlc_close+0x23c/0x634 [ 235.469830][ T7900] rfcomm_dlc_close+0x100/0x194 [ 235.471086][ T7900] __rfcomm_sock_close+0x138/0x258 [ 235.472429][ T7900] rfcomm_sock_shutdown+0xa8/0x214 [ 235.473684][ T7900] rfcomm_sock_release+0x58/0x114 [ 235.475194][ T7900] sock_close+0xb8/0x1fc [ 235.476327][ T7900] __fput+0x1c4/0x800 [ 235.477407][ T7900] ____fput+0x20/0x30 [ 235.478438][ T7900] task_work_run+0x130/0x1e4 [ 235.479721][ T7900] do_exit+0x670/0x20bc [ 235.480970][ T7900] do_group_exit+0x110/0x268 [ 235.482259][ T7900] get_signal+0x634/0x1550 [ 235.483551][ T7900] do_notify_resume+0x3d0/0x32b8 [ 235.484885][ T7900] el0_svc+0xfc/0x1f0 [ 235.486005][ T7900] el0t_64_sync_handler+0x84/0xe4 [ 235.487345][ T7900] el0t_64_sync+0x1a0/0x1a4 [ 237.286091][ T6456] Bluetooth: hci4: command 0x0405 tx timeout