last executing test programs: 7.263661403s ago: executing program 0 (id=1271): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)={0x28, r0, 0x1, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}}, 0x0) 7.005105333s ago: executing program 4 (id=1274): open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6.968563164s ago: executing program 4 (id=1275): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) 6.736967597s ago: executing program 0 (id=1277): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000980), 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 6.736597199s ago: executing program 4 (id=1278): dup(0xffffffffffffffff) memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x22) socket$packet(0x11, 0x3, 0x300) 6.732279321s ago: executing program 1 (id=1279): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x104001, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0xfffffd0c) 4.989037093s ago: executing program 2 (id=1282): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x0, 0x7fffffff}]}) r1 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='posixacl\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.988424187s ago: executing program 4 (id=1283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x800) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2c, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@nested={0x18, 0x6c, 0x0, 0x1, [@nested={0x14, 0x3e, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x11d, 0x0, 0x0, @uid}]}, @generic]}]}, 0x2c}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup(r3) syz_open_dev$tty20(0xc, 0x4, 0x0) inotify_rm_watch(r6, r4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 4.628324435s ago: executing program 1 (id=1284): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff, 0x5}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 4.627695259s ago: executing program 5 (id=1285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) creat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 4.625566778s ago: executing program 0 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 4.51465753s ago: executing program 2 (id=1287): mount$overlay(0x0, &(0x7f0000000140)='\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[], [], 0x2f}) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pipe2$9p(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.442458614s ago: executing program 3 (id=1288): r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.45376053s ago: executing program 2 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 3.452293323s ago: executing program 4 (id=1290): syz_mount_image$jfs(&(0x7f0000001cc0), &(0x7f0000001c80)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5dce, &(0x7f0000013b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x200) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(0x0) 3.424290433s ago: executing program 1 (id=1291): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='nv\x00', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 3.404737058s ago: executing program 3 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.296882627s ago: executing program 3 (id=1293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, r4, 0x2f, 0x2030, 0x4, @void, @void, @value=r5}, 0x20) 3.296480559s ago: executing program 5 (id=1294): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp}, 0x20) 3.082313916s ago: executing program 0 (id=1295): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x8001, 0x7, 0x4, 0x20, 0x6, {0x0, 0x2710}, {0x5, 0x0, 0x3, 0x1, 0x3, 0x40, "4baa7e25"}, 0xe3, 0x4, {}, 0x8001}) 3.004324611s ago: executing program 1 (id=1296): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.916947478s ago: executing program 2 (id=1297): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x24020400) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1000000009, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x80000001, 0x1}) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x4b}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 2.916578643s ago: executing program 0 (id=1298): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000980), 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 2.827912541s ago: executing program 5 (id=1299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ftruncate(0xffffffffffffffff, 0x0) 2.812259326s ago: executing program 1 (id=1300): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x24020400) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1000000009, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x4b}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 2.596534944s ago: executing program 3 (id=1301): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x48, 0x0, 0x34, 0xfffff001}, {0x6, 0x8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r0, &(0x7f00000010c0)="1e", 0x1) 1.771664275s ago: executing program 2 (id=1302): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58030000170001000000000000000000e00000020000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000ac1414aa000000000000000000000000000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e0000000000000000000000000000000000000000000000000014000d00ac1e000100"/147], 0x358}}, 0x0) 662.487159ms ago: executing program 0 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) 549.927104ms ago: executing program 5 (id=1304): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff, 0x5}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 352.97613ms ago: executing program 3 (id=1305): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010006", 0x4d}], 0x1) 325.093117ms ago: executing program 1 (id=1306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000040)={0x17}) 324.180775ms ago: executing program 2 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 323.051547ms ago: executing program 5 (id=1308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b70200001000b15cbfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b252a37ff7e0d45728fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 172.318855ms ago: executing program 3 (id=1309): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}, {&(0x7f0000000140)="38281e932360f69c70b7e193", 0xc}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000000800)=""/257, 0x101}, {&(0x7f0000002e80)=""/4052, 0xfd4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000ac0)=""/207, 0xcf}, {&(0x7f0000000700)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/188, 0xbc}, {&(0x7f0000000a40)=""/113, 0x71}, {&(0x7f0000001e40)=""/4105, 0x1009}, {&(0x7f0000005680)=""/4094, 0xffe}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000680)=""/99, 0x63}], 0xe}, 0x0) 530.098µs ago: executing program 4 (id=1310): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 5 (id=1311): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}, {&(0x7f0000000140)="38281e932360f69c70b7e193", 0xc}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)}, 0x0) kernel console output (not intermixed with test programs): rformance. Setting the MTU to 1560 would solve the problem. [ 86.518618][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.531269][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.538437][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.564553][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.640724][ T5826] hsr_slave_0: entered promiscuous mode [ 86.648712][ T5826] hsr_slave_1: entered promiscuous mode [ 86.655297][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.663099][ T5826] Cannot create hsr debugfs directory [ 86.764186][ T5828] hsr_slave_0: entered promiscuous mode [ 86.770606][ T5828] hsr_slave_1: entered promiscuous mode [ 86.777723][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.785621][ T5828] Cannot create hsr debugfs directory [ 87.046363][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.071065][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.080469][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.109551][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.163055][ T5825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.181259][ T5825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.201057][ T5825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.217718][ T5825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.245878][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.256669][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.276126][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.288537][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.369871][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.400782][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.432240][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.449337][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.458611][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.469279][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.496572][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.509086][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.604708][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.619803][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.632931][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.667807][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.678142][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.705203][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.733556][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.760540][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.767772][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.785669][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.797604][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.804773][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.840482][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.847626][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.852533][ T53] Bluetooth: hci3: command tx timeout [ 87.860688][ T5137] Bluetooth: hci2: command tx timeout [ 87.869383][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.876589][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.921837][ T53] Bluetooth: hci5: command tx timeout [ 87.932504][ T5137] Bluetooth: hci0: command tx timeout [ 87.937939][ T5137] Bluetooth: hci4: command tx timeout [ 87.944079][ T53] Bluetooth: hci1: command tx timeout [ 87.970096][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.065104][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.077290][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.097717][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.110732][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.117891][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.148058][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.155202][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.165895][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.173027][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.195736][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.224608][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.254752][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.261904][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.349156][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.369900][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.415195][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.422456][ T3937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.439513][ T3937] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.446662][ T3937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.459883][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.467019][ T3937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.521312][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.528491][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.576925][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.658405][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.714658][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.844014][ T5841] veth0_vlan: entered promiscuous mode [ 88.905213][ T5841] veth1_vlan: entered promiscuous mode [ 89.005197][ T5841] veth0_macvtap: entered promiscuous mode [ 89.073458][ T5841] veth1_macvtap: entered promiscuous mode [ 89.087271][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.137578][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.166470][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.193894][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.204909][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.218986][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.228019][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.409980][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.417486][ T5827] veth0_vlan: entered promiscuous mode [ 89.439116][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.468097][ T3937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.490611][ T3937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.529505][ T5826] veth0_vlan: entered promiscuous mode [ 89.535880][ T5827] veth1_vlan: entered promiscuous mode [ 89.560483][ T3937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.570435][ T3937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.577699][ T5826] veth1_vlan: entered promiscuous mode [ 89.691029][ T5828] veth0_vlan: entered promiscuous mode [ 89.707469][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.734467][ T5826] veth0_macvtap: entered promiscuous mode [ 89.743432][ T5826] veth1_macvtap: entered promiscuous mode [ 89.758265][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.769443][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.780640][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.794713][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.805258][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.817118][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.829987][ T5829] veth0_vlan: entered promiscuous mode [ 89.855049][ T5825] veth0_vlan: entered promiscuous mode [ 89.865959][ T5827] veth0_macvtap: entered promiscuous mode [ 89.876833][ T5827] veth1_macvtap: entered promiscuous mode [ 89.894156][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.905507][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.915027][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.924421][ T5137] Bluetooth: hci3: command tx timeout [ 89.930097][ T5137] Bluetooth: hci2: command tx timeout [ 89.936260][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.958712][ T5828] veth1_vlan: entered promiscuous mode [ 89.968702][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.979683][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.991505][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.004672][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.013207][ T53] Bluetooth: hci4: command tx timeout [ 90.014754][ T5137] Bluetooth: hci1: command tx timeout [ 90.020199][ T5836] Bluetooth: hci0: command tx timeout [ 90.026561][ T5137] Bluetooth: hci5: command tx timeout [ 90.032835][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.046855][ T5829] veth1_vlan: entered promiscuous mode [ 90.074124][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.085498][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.096101][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.106749][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.117911][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.126337][ T5825] veth1_vlan: entered promiscuous mode [ 90.146233][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.155207][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.165300][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.174335][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.288172][ T5825] veth0_macvtap: entered promiscuous mode [ 90.318079][ T5829] veth0_macvtap: entered promiscuous mode [ 90.340102][ T5825] veth1_macvtap: entered promiscuous mode [ 90.349686][ T5829] veth1_macvtap: entered promiscuous mode [ 90.357420][ T5828] veth0_macvtap: entered promiscuous mode [ 90.359269][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.374632][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.387059][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.396590][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.428243][ T5828] veth1_macvtap: entered promiscuous mode [ 90.443943][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.455405][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.465646][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.476468][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.487722][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.498343][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.514236][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.550419][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.561351][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.572193][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.582738][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.592793][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.604061][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.616571][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.633564][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.640093][ T5825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.653668][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.664294][ T5825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.673185][ T5825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.682058][ T5825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.697234][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.708463][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.733437][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.745434][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.755483][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.766265][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.776442][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.786962][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.798706][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.808577][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.813487][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.828324][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.839394][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.846352][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.853716][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.867858][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.878422][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.889292][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.900020][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.910668][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.928276][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.939361][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.005834][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.022484][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.044700][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.055457][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.065666][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.076371][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.086436][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.097511][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.109791][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.125022][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.135811][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.147547][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.158471][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.168408][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.178904][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.188868][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.199376][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.209381][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.220304][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.232132][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.273616][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.301802][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.310736][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.345715][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.410057][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.410819][ T5947] loop0: detected capacity change from 0 to 64 [ 91.426240][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.438768][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.453868][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.550147][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.571828][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.756550][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.782329][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.992256][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.006247][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.014329][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.039564][ T5137] Bluetooth: hci2: command tx timeout [ 92.045295][ T5137] Bluetooth: hci3: command tx timeout [ 92.052630][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.120693][ T53] Bluetooth: hci4: command tx timeout [ 92.127381][ T53] Bluetooth: hci0: command tx timeout [ 92.134397][ T53] Bluetooth: hci5: command tx timeout [ 92.139825][ T53] Bluetooth: hci1: command tx timeout [ 92.195731][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.212402][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.045181][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.091708][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.353166][ T5964] loop5: detected capacity change from 0 to 1024 [ 93.410452][ T5967] capability: warning: `syz.3.14' uses deprecated v2 capabilities in a way that may be insecure [ 93.696887][ T5974] hfsplus: found bad thread record in catalog [ 93.782565][ T5967] loop3: detected capacity change from 0 to 4096 [ 93.790166][ T5967] ======================================================= [ 93.790166][ T5967] WARNING: The mand mount option has been deprecated and [ 93.790166][ T5967] and is ignored by this kernel. Remove the mand [ 93.790166][ T5967] option from the mount to silence this warning. [ 93.790166][ T5967] ======================================================= [ 94.056913][ T5977] befs: (nbd0): No write support. Marking filesystem read-only [ 94.067055][ T5977] syz.0.16: attempt to access beyond end of device [ 94.067055][ T5977] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 94.080471][ T5977] befs: (nbd0): unable to read superblock [ 95.138201][ T51] hfsplus: b-tree write err: -5, ino 4 [ 96.102564][ T5936] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.110737][ T306] tipc: Subscription rejected, illegal request [ 96.193738][ T5994] loop2: detected capacity change from 0 to 64 [ 96.281973][ T5936] usb 6-1: Using ep0 maxpacket: 16 [ 96.324393][ T5936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.351783][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 96.365429][ T5973] loop1: detected capacity change from 0 to 32768 [ 96.373693][ T5936] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 96.399341][ T5973] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [ 96.437510][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.471822][ T5936] usb 6-1: Product: syz [ 96.476104][ T5936] usb 6-1: Manufacturer: syz [ 96.480777][ T5936] usb 6-1: SerialNumber: syz [ 96.490339][ T5936] usb 6-1: config 0 descriptor?? [ 96.499652][ T5936] hub 6-1:0.0: bad descriptor, ignoring hub [ 96.505832][ T5936] hub 6-1:0.0: probe with driver hub failed with error -5 [ 96.568931][ T5936] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 96.591351][ T5995] loop0: detected capacity change from 0 to 1764 [ 96.704299][ T12] usb 6-1: Failed to submit usb control message: -71 [ 96.724550][ T6007] loop2: detected capacity change from 0 to 64 [ 96.731151][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 96.742664][ T5973] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,version_upgrade=none [ 96.765837][ T12] usb 6-1: unable to get target info from device [ 96.776784][ T12] usb 6-1: could not get target info (-71) [ 96.785076][ T5973] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 96.795685][ T12] usb 6-1: could not probe fw (-71) [ 96.803374][ T5973] bcachefs (loop1): insufficient writeable journal devices available: have 0, need 1 [ 96.803374][ T5973] rw journal devs: [ 96.817297][ T5973] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 96.828250][ T5973] bcachefs (loop1): bch2_fs_recovery(): error EINTR [ 96.834996][ T5973] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 96.843308][ T5973] bcachefs (loop1): shutting down [ 96.843752][ T5995] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 96.894764][ T5980] loop4: detected capacity change from 0 to 32768 [ 97.074264][ T5973] bcachefs (loop1): shutdown complete [ 97.104227][ T5980] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 97.816572][ T5936] usb 6-1: USB disconnect, device number 2 [ 97.962357][ T5980] XFS (loop4): Ending clean mount [ 98.275759][ T6029] loop3: detected capacity change from 0 to 256 [ 98.330706][ T6029] exfat: Deprecated parameter 'utf8' [ 98.336833][ T6029] exfat: Deprecated parameter 'utf8' [ 98.371188][ T5828] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 98.440480][ T6029] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 100.302143][ T6037] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 100.352021][ T6037] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 100.789874][ T6048] loop5: detected capacity change from 0 to 1764 [ 100.960871][ T6050] loop3: detected capacity change from 0 to 1024 [ 101.040728][ T6045] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 101.129381][ T6053] loop0: detected capacity change from 0 to 512 [ 101.195573][ T6053] EXT4-fs: quotafile must be on filesystem root [ 101.462278][ T6041] loop4: detected capacity change from 0 to 32768 [ 101.515993][ T6041] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.27 (6041) [ 101.594725][ T6041] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 102.462239][ T6041] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 102.471044][ T6041] BTRFS info (device loop4): using free-space-tree [ 102.730255][ T6066] loop0: detected capacity change from 0 to 256 [ 102.853420][ T6066] FAT-fs (loop0): Directory bread(block 64) failed [ 102.860111][ T6066] FAT-fs (loop0): Directory bread(block 65) failed [ 102.902238][ T6066] FAT-fs (loop0): Directory bread(block 66) failed [ 102.908814][ T6066] FAT-fs (loop0): Directory bread(block 67) failed [ 102.982015][ T6066] FAT-fs (loop0): Directory bread(block 68) failed [ 102.988621][ T6066] FAT-fs (loop0): Directory bread(block 69) failed [ 103.007249][ T6075] loop5: detected capacity change from 0 to 1764 [ 103.071197][ T6066] FAT-fs (loop0): Directory bread(block 70) failed [ 103.108767][ T6066] FAT-fs (loop0): Directory bread(block 71) failed [ 103.134135][ T6066] FAT-fs (loop0): Directory bread(block 72) failed [ 103.140727][ T6066] FAT-fs (loop0): Directory bread(block 73) failed [ 103.314865][ T6068] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 103.324150][ T33] hfsplus: b-tree write err: -5, ino 3 [ 103.401077][ T5973] bcachefs: bch2_fs_get_tree() error: EINTR [ 103.565391][ T969] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.761878][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 103.770845][ T969] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 103.780573][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.788878][ T969] usb 1-1: Product: syz [ 103.811786][ T969] usb 1-1: Manufacturer: syz [ 103.817214][ T969] usb 1-1: SerialNumber: syz [ 103.863544][ T969] r8152-cfgselector 1-1: Unknown version 0x0000 [ 103.869872][ T969] r8152-cfgselector 1-1: config 0 descriptor?? [ 104.300810][ T6095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.393557][ T6099] netlink: 'syz.5.43': attribute type 10 has an invalid length. [ 104.515866][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.43'. [ 105.086049][ T5892] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 105.158922][ T6099] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.412215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.656880][ T5828] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 105.702168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.711250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.720415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.765563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.969298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.073064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.083435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.092611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.849954][ T6123] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.53'. [ 106.899471][ T6123] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.53'. [ 106.945030][ T6123] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.53'. [ 106.977663][ T5936] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 107.473758][ T6126] loop0: detected capacity change from 0 to 32768 [ 107.784200][ T5936] usb 6-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 107.801757][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.872782][ T5936] usb 6-1: config 0 descriptor?? [ 107.974193][ T6126] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 107.983242][ T6126] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.280028][ T6126] XFS (loop0): Ending clean mount [ 108.295747][ T6126] XFS (loop0): Quotacheck needed: Please wait. [ 108.362645][ T5936] wacom 0003:056A:0028.0001: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 108.393677][ T5936] wacom 0003:056A:0028.0001: hidraw0: USB HID v1.01 Device [HID 056a:0028] on usb-dummy_hcd.5-1/input0 [ 108.435690][ T5936] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0028.0001/input/input5 [ 108.489227][ T6126] XFS (loop0): Quotacheck: Done. [ 108.591982][ T5936] usb 6-1: USB disconnect, device number 3 [ 108.885991][ T5826] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.220334][ T6202] netlink: 'syz.2.83': attribute type 3 has an invalid length. [ 109.283185][ T6202] netlink: 'syz.2.83': attribute type 2 has an invalid length. [ 109.290810][ T6202] netlink: 'syz.2.83': attribute type 5 has an invalid length. [ 109.331858][ T6202] netlink: 'syz.2.83': attribute type 6 has an invalid length. [ 109.360123][ T6202] netlink: 198124 bytes leftover after parsing attributes in process `syz.2.83'. [ 109.414873][ T6207] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 109.753847][ T6207] veth0_vlan: left promiscuous mode [ 109.781323][ T6207] veth0_vlan: entered promiscuous mode [ 109.827743][ T6207] team0: Device veth0_vlan failed to register rx_handler [ 109.957070][ T6230] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 109.965912][ T6230] netlink: 164 bytes leftover after parsing attributes in process `syz.0.95'. [ 110.213788][ T6228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.94'. [ 110.316010][ T6207] syz.3.85 (6207) used greatest stack depth: 18320 bytes left [ 110.356850][ T6226] netlink: 60 bytes leftover after parsing attributes in process `syz.2.94'. [ 110.374488][ T6233] netlink: 60 bytes leftover after parsing attributes in process `syz.2.94'. [ 110.451902][ T6242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.100'. [ 110.519914][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 110.582621][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 110.836279][ T6252] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 110.912381][ T6252] syzkaller0: entered promiscuous mode [ 110.927628][ T6252] syzkaller0: entered allmulticast mode [ 110.954634][ T6260] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 110.972138][ T6262] netlink: 'syz.2.109': attribute type 10 has an invalid length. [ 111.092408][ T6268] netlink: 164 bytes leftover after parsing attributes in process `syz.1.112'. [ 111.111113][ T6264] netlink: 'syz.5.110': attribute type 29 has an invalid length. [ 111.126683][ T6260] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 111.136744][ T6269] cgroup: fork rejected by pids controller in /syz3 [ 111.148333][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.156614][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.178071][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.185321][ T6262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.193765][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.200935][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.234486][ T6262] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 112.106344][ T6279] loop1: detected capacity change from 0 to 32768 [ 114.464216][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 115.190466][ T6265] netlink: 'syz.5.110': attribute type 29 has an invalid length. [ 115.407238][ T5827] syz-executor (5827) used greatest stack depth: 16784 bytes left [ 115.512434][ T6321] netlink: 14 bytes leftover after parsing attributes in process `syz.4.135'. [ 115.590270][ T6316] netlink: 32 bytes leftover after parsing attributes in process `syz.5.131'. [ 115.600377][ T6316] bridge: RTM_NEWNEIGH with invalid ether address [ 115.830952][ T6329] netlink: 'syz.1.137': attribute type 39 has an invalid length. [ 117.600183][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.003230][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.030687][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.042125][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.050069][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 118.058917][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.538254][ T6353] loop4: detected capacity change from 0 to 128 [ 118.547135][ T6356] loop0: detected capacity change from 0 to 16 [ 118.617661][ T6356] erofs (device loop0): mounted with root inode @ nid 36. [ 118.635943][ T6356] erofs (device loop0): bogus dirent @ nid 36 [ 118.649318][ T6353] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.722693][ T6353] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.808263][ T6340] loop5: detected capacity change from 0 to 32768 [ 118.810779][ T6361] loop1: detected capacity change from 0 to 256 [ 118.893080][ T6361] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 119.145487][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 119.190944][ T6377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.692099][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.708888][ T5828] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.709596][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.733757][ T6333] bridge_slave_0: entered allmulticast mode [ 119.740870][ T6333] bridge_slave_0: entered promiscuous mode [ 119.748719][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.756161][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.763469][ T6333] bridge_slave_1: entered allmulticast mode [ 119.770499][ T6333] bridge_slave_1: entered promiscuous mode [ 119.936055][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.983671][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.081976][ T53] Bluetooth: hci2: command tx timeout [ 120.273930][ T6333] team0: Port device team_slave_0 added [ 121.219183][ T6333] team0: Port device team_slave_1 added [ 121.374257][ T6408] pimreg: entered allmulticast mode [ 122.161945][ T53] Bluetooth: hci2: command tx timeout [ 122.189438][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.231732][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.279787][ T6426] Zero length message leads to an empty skb [ 122.315784][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.356593][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.383586][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.487705][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.641757][ T6333] hsr_slave_0: entered promiscuous mode [ 122.662743][ T6333] hsr_slave_1: entered promiscuous mode [ 122.671262][ T6333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.690888][ T6333] Cannot create hsr debugfs directory [ 123.118782][ T6425] loop4: detected capacity change from 0 to 32768 [ 123.119731][ T6417] loop1: detected capacity change from 0 to 32768 [ 123.145792][ T6425] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.170 (6425) [ 123.157652][ T6333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.164004][ T6417] BTRFS: device /dev/loop1 (7:1) using temp-fsid 63909e05-d330-4c50-8647-9bd91a094a04 [ 123.164074][ T6417] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.167 (6417) [ 123.174879][ T6425] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.174971][ T6425] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 123.180896][ T6417] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.180960][ T6417] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 123.323512][ T6333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.516656][ T6333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.689711][ T6333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.753496][ T6417] BTRFS info (device loop1): rebuilding free space tree [ 123.762162][ T6425] BTRFS info (device loop4): rebuilding free space tree [ 123.873666][ T6425] BTRFS info (device loop4): disabling free space tree [ 123.880640][ T6425] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.902614][ T6417] BTRFS info (device loop1): disabling free space tree [ 123.909782][ T6417] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.931933][ T6425] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.941978][ T6417] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.990658][ T6333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.197667][ T6333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.302666][ T53] Bluetooth: hci2: command tx timeout [ 125.017120][ T6333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.224647][ T6333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.345836][ T5829] BTRFS info (device loop1): last unmount of filesystem 63909e05-d330-4c50-8647-9bd91a094a04 [ 125.406004][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.423065][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.456786][ T6333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.467319][ T6333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.492858][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.499998][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.545753][ T5828] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.613447][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.620730][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.889591][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.975527][ T6333] veth0_vlan: entered promiscuous mode [ 125.996935][ T6333] veth1_vlan: entered promiscuous mode [ 126.027720][ T6333] veth0_macvtap: entered promiscuous mode [ 126.050933][ T6333] veth1_macvtap: entered promiscuous mode [ 126.219010][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.242135][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.261752][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.291763][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.311803][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.329825][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.339773][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.340077][ T53] Bluetooth: hci2: command tx timeout [ 126.351092][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.366875][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.377413][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.387445][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.397959][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.413838][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.423821][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.434499][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.444393][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.455622][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.466133][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.476719][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.486742][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.497252][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.507168][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.517829][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.527717][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.538177][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.549711][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.721263][ T6333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.730571][ T6333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.739417][ T6333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.748263][ T6333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.961735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.176742][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.256695][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.423383][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.431254][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.719066][ T6546] loop4: detected capacity change from 0 to 4096 [ 128.763810][ T6546] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 128.949424][ T6560] loop3: detected capacity change from 0 to 64 [ 129.313503][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 129.826600][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 130.985238][ T6596] syz.5.220 uses obsolete (PF_INET,SOCK_PACKET) [ 131.680472][ T6596] loop5: detected capacity change from 0 to 8 [ 131.715315][ T6596] SQUASHFS error: Unable to read inode 0x11f [ 132.261229][ T6593] loop0: detected capacity change from 0 to 4096 [ 132.506811][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.513638][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.548882][ T6593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.731846][ T5892] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 132.958915][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.081740][ T5892] usb 4-1: config 2 has an invalid interface number: 108 but max is 0 [ 133.094933][ T5892] usb 4-1: config 2 has no interface number 0 [ 133.111784][ T5892] usb 4-1: config 2 interface 108 has no altsetting 0 [ 133.174562][ T5892] usb 4-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8 [ 133.253820][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.356912][ T5892] usb 4-1: Product: syz [ 133.361236][ T5892] usb 4-1: Manufacturer: syz [ 133.432298][ T5892] usb 4-1: SerialNumber: syz [ 133.696425][ T5892] usb 4-1: Could not find all expected endpoints [ 133.696705][ T6625] loop5: detected capacity change from 0 to 4096 [ 133.759464][ T5892] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.767047][ T6625] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 133.792297][ T5892] usb 4-1: MIDIStreaming interface descriptor not found [ 133.804020][ T6625] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 133.916176][ T6625] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 133.918264][ T5892] usb 4-1: USB disconnect, device number 2 [ 134.006063][ T6619] loop1: detected capacity change from 0 to 32768 [ 134.387530][ T6642] loop4: detected capacity change from 0 to 1024 [ 134.425739][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.108/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.511973][ T6642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.766857][ T6619] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 135.819911][ T6619] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 135.830966][ T6619] bcachefs (loop1): Version upgrade required: [ 135.830966][ T6619] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 135.830966][ T6619] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 135.830966][ T6619] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 135.980097][ T6619] bcachefs (loop1): dropping and reconstructing all alloc info [ 136.145016][ T6619] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 136.159992][ T6619] bcachefs (loop1): bch2_fs_recovery(): error EINTR [ 136.168477][ T6619] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 136.189478][ T6619] bcachefs (loop1): shutting down [ 136.272771][ T6619] bcachefs (loop1): shutdown complete [ 136.316649][ T6689] netlink: 165 bytes leftover after parsing attributes in process `syz.2.258'. [ 137.029902][ T6716] loop5: detected capacity change from 0 to 64 [ 139.110313][ T6727] fuse: Bad value for 'fd' [ 139.147668][ T6731] netlink: 165 bytes leftover after parsing attributes in process `syz.0.275'. [ 139.643652][ T6755] loop3: detected capacity change from 0 to 256 [ 139.670029][ T6755] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 139.709078][ T6756] loop0: detected capacity change from 0 to 512 [ 140.012600][ T6756] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.286: invalid indirect mapped block 4294967295 (level 1) [ 140.161516][ T6756] EXT4-fs (loop0): Remounting filesystem read-only [ 140.182298][ T6756] EXT4-fs (loop0): 2 truncates cleaned up [ 140.195969][ T6756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.637320][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.639951][ T6619] bcachefs: bch2_fs_get_tree() error: EINTR [ 142.721413][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 146.800632][ T6912] loop3: detected capacity change from 0 to 2048 [ 146.900897][ T6912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.475729][ T6915] loop4: detected capacity change from 0 to 4096 [ 147.506268][ T6915] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 147.635667][ T6915] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 147.697578][ T6915] ntfs3(loop4): ino=1e, "file1" encrypted i/o not supported [ 147.706636][ T6915] ntfs3(loop4): ino=1e, "file1" encrypted i/o not supported [ 147.722000][ T29] audit: type=1800 audit(1734737914.315:2): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.355" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 147.746573][ T6928] loop3: detected capacity change from 0 to 16 [ 147.813951][ T6928] erofs (device loop3): mounted with root inode @ nid 36. [ 149.141443][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 149.154843][ T6980] netlink: 'syz.0.386': attribute type 12 has an invalid length. [ 149.311225][ T6960] loop4: detected capacity change from 0 to 40427 [ 149.362886][ T6960] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 149.385129][ T6960] F2FS-fs (loop4): invalid crc value [ 149.469147][ T6985] loop3: detected capacity change from 0 to 1024 [ 149.497226][ T6960] F2FS-fs (loop4): Found nat_bits in checkpoint [ 149.523550][ T6985] EXT4-fs: Ignoring removed i_version option [ 149.529919][ T6985] EXT4-fs: Ignoring removed bh option [ 149.631643][ T6985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.742183][ T6960] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 149.873201][ T6989] f2fs_ckpt-7:4: attempt to access beyond end of device [ 149.873201][ T6989] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.921515][ T6989] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 149.971811][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 150.232563][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 150.297177][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 150.305888][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 150.317069][ T5892] usb 4-1: can't read configurations, error -71 [ 151.021054][ T6333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.263013][ T7052] netlink: 'syz.4.418': attribute type 10 has an invalid length. [ 152.323022][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.330524][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.360204][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.367377][ T7052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.375941][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.383121][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.395937][ T7052] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 154.080063][ T7085] netlink: 184 bytes leftover after parsing attributes in process `syz.0.432'. [ 154.277786][ T7085] bond0: entered allmulticast mode [ 154.283050][ T7085] bond_slave_0: entered allmulticast mode [ 154.288794][ T7085] bond_slave_1: entered allmulticast mode [ 154.608450][ T7101] loop1: detected capacity change from 0 to 1024 [ 154.665465][ T7101] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.889107][ T7101] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.442: Invalid block bitmap block 0 in block_group 0 [ 154.948724][ T7101] Quota error (device loop1): write_blk: dquota write failed [ 154.956463][ T7101] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 154.974606][ T7101] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.442: Failed to acquire dquot type 0 [ 154.999757][ T7101] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.442: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.409780][ T7101] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.442: Invalid inode bitmap blk 0 in block_group 0 [ 155.596601][ T3937] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 155.657777][ T3937] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 0 [ 155.724618][ T7101] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 155.799264][ T7101] EXT4-fs (loop1): 1 orphan inode deleted [ 155.807042][ T7101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.583024][ T7121] loop4: detected capacity change from 0 to 32768 [ 156.785912][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.889093][ T7137] loop3: detected capacity change from 0 to 32768 [ 157.005546][ T7137] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 157.098121][ T7121] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=gzip,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 157.174908][ T7137] XFS (loop3): Ending clean mount [ 157.228488][ T7121] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 157.302047][ T7121] bcachefs (loop4): Version upgrade required: [ 157.302047][ T7121] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 157.302047][ T7121] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 157.302047][ T7121] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 157.508859][ T7121] bcachefs (loop4): dropping and reconstructing all alloc info [ 157.672239][ T7121] bcachefs (loop4): error validating btree node on loop4 at btree extents level 0/0 [ 157.672345][ T7121] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 157.672407][ T7121] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 158.145477][ T7171] mac80211_hwsim hwsim12 : renamed from wlan1 (while UP) [ 158.196670][ T7121] bcachefs (loop4): flagging btree extents lost data [ 158.419182][ T7121] error reading btree root extents l=0: btree_node_read_error, fixing [ 158.459527][ T7121] bcachefs (loop4): will run btree node scan [ 158.524585][ T7121] bcachefs (loop4): scan_for_btree_nodes... [ 158.546375][ T7177] loop0: detected capacity change from 0 to 512 [ 158.594878][ T7177] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 158.687280][ T7121] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 158.687318][ T7121] extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 158.687337][ T7121] inodes l=0 seq=1 journal_seq=5 cookie=7589ab5e0c11cc7a POS_MIN-SPOS_MAX ptr: 0:38:0 gen 0 [ 158.687355][ T7121] dirents l=0 seq=1 journal_seq=4 cookie=9aa2895aefce4bdf POS_MIN-SPOS_MAX ptr: 0:41:0 gen 0 [ 158.687373][ T7121] xattrs l=0 seq=1 journal_seq=4 cookie=2285c34bed0abe32 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0 [ 158.687391][ T7121] subvolumes l=0 seq=1 journal_seq=1 cookie=c0bef60d07ceb940 POS_MIN-SPOS_MAX ptr: 0:35:0 gen 0 [ 158.687410][ T7121] snapshots l=0 seq=1 journal_seq=1 cookie=ebb8d5a9e3463bdb POS_MIN-SPOS_MAX ptr: 0:32:0 gen 0 [ 158.687428][ T7121] lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 158.687446][ T7121] deleted_inodes l=0 seq=1 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 158.687465][ T7121] [ 158.698003][ T7177] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.741101][ T7177] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.741546][ T7177] EXT4-fs (loop0): 1 truncate cleaned up [ 158.742848][ T7177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.807188][ T6333] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 160.169737][ T7121] done [ 160.174937][ T7121] bcachefs (loop4): check_topology... [ 160.175068][ T7121] bcachefs (loop4): btree root extents unreadable, must recover from scan [ 160.190969][ T7121] bcachefs (loop4): bch2_get_scanned_nodes(): recovering extents l=0 POS_MIN - SPOS_MAX [ 160.201029][ T7121] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 160.239920][ T7121] done [ 160.249431][ T7121] bcachefs (loop4): accounting_read... done [ 160.298699][ T7121] bcachefs (loop4): alloc_read... done [ 160.342931][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.365267][ T7121] bcachefs (loop4): stripes_read... done [ 160.391838][ T7121] bcachefs (loop4): snapshots_read... done [ 160.405644][ T7121] bcachefs (loop4): check_allocations... [ 160.857566][ T5137] Bluetooth: hci4: command 0x0406 tx timeout [ 161.310450][ T7121] done [ 161.362667][ T7121] bcachefs (loop4): going read-write [ 161.716597][ T7121] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR [ 161.827610][ T7121] bcachefs (loop4): error starting copygc thread [ 161.956216][ T7213] sp0: Synchronizing with TNC [ 161.963289][ T7121] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 161.971428][ T7121] bcachefs (loop4): shutting down [ 162.062528][ T7121] bcachefs (loop4): going read-only [ 162.160362][ T7121] bcachefs (loop4): finished waiting for writes to stop [ 162.199820][ T7121] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 162.232012][ T7121] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 162.298648][ T7121] bcachefs (loop4): unshutdown complete, journal seq 12 [ 162.364078][ T7121] bcachefs (loop4): done going read-only, filesystem not clean [ 162.422961][ T7121] bcachefs (loop4): shutdown complete [ 162.806003][ T7211] loop3: detected capacity change from 0 to 40427 [ 162.817727][ T7211] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 162.826833][ T7211] F2FS-fs (loop3): Image doesn't support compression [ 162.840085][ T7211] F2FS-fs (loop3): invalid crc value [ 162.870751][ T7211] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.428290][ T7211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.529417][ T6333] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x595/0x1de0 [ 165.555148][ T6333] F2FS-fs (loop3): invalid blkaddr: 1028, type: 10, run fsck to fix. [ 165.748567][ T7262] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 166.540874][ T7260] loop1: detected capacity change from 0 to 32768 [ 166.615091][ T7260] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.497 (7260) [ 166.638195][ T7260] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 166.641233][ T7121] bcachefs: bch2_fs_get_tree() error: EINTR [ 166.673449][ T7260] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 166.775342][ T7260] BTRFS info (device loop1): using free-space-tree [ 167.443023][ T7320] netlink: 'syz.0.516': attribute type 6 has an invalid length. [ 168.451108][ T5829] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 170.046858][ T7326] loop3: detected capacity change from 0 to 32768 [ 170.109320][ T7355] fuse: Bad value for 'fd' [ 170.367388][ T7326] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 170.477321][ T7363] loop1: detected capacity change from 0 to 40427 [ 170.709873][ T7363] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.667778][ T7363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.723363][ T6333] ocfs2: Unmounting device (7,3) on (node local) [ 171.833489][ T5829] syz-executor: attempt to access beyond end of device [ 171.833489][ T5829] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.884366][ T5829] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.245936][ T7354] loop4: detected capacity change from 0 to 32768 [ 172.355979][ T7392] loop3: detected capacity change from 0 to 4096 [ 172.363528][ T7392] ntfs3: Bad value for 'dmask' [ 172.612258][ T7354] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 172.688706][ T7354] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 173.447027][ T7388] loop0: detected capacity change from 0 to 32768 [ 173.641153][ T5828] ocfs2: Unmounting device (7,4) on (node local) [ 173.680761][ T7388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.543 (7388) [ 173.963412][ T7388] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.973929][ T7388] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 174.026709][ T7388] BTRFS error (device loop0): superblock checksum mismatch [ 174.058386][ T7388] BTRFS error (device loop0): open_ctree failed [ 174.975290][ T7423] loop4: detected capacity change from 0 to 4096 [ 175.019721][ T7423] ntfs3: Bad value for 'dmask' [ 176.654248][ T7454] loop0: detected capacity change from 0 to 512 [ 176.720814][ T7454] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1283)! [ 176.776818][ T7454] EXT4-fs (loop0): group descriptors corrupted! [ 177.050284][ T7467] loop1: detected capacity change from 0 to 2048 [ 177.514325][ T7473] netlink: 56 bytes leftover after parsing attributes in process `syz.1.573'. [ 177.681169][ T7473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.573'. [ 177.772379][ T7467] loop1: p3 < > p4 < > [ 177.793396][ T7467] loop1: partition table partially beyond EOD, truncated [ 177.851645][ T7467] loop1: p3 start 4284289 is beyond EOD, truncated [ 178.034209][ T5198] loop1: p3 < > p4 < > [ 178.052954][ T5198] loop1: partition table partially beyond EOD, truncated [ 178.116156][ T5198] loop1: p3 start 4284289 is beyond EOD, truncated [ 178.952080][ T5839] udevd[5839]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 179.163374][ T5839] udevd[5839]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 179.784066][ T7475] loop4: detected capacity change from 0 to 32768 [ 180.803090][ T7475] read_mapping_page failed! [ 180.808036][ T7475] diRead: diIAGRead returned -5 [ 181.534030][ T7547] loop3: detected capacity change from 0 to 512 [ 181.573130][ T7547] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 181.613915][ T7547] EXT4-fs (loop3): invalid journal inode [ 181.651963][ T7547] EXT4-fs (loop3): can't get journal size [ 181.749872][ T7547] EXT4-fs (loop3): 1 truncate cleaned up [ 181.791109][ T7547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.215668][ T6333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.311334][ T7545] loop0: detected capacity change from 0 to 40427 [ 182.469101][ T7545] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 182.537924][ T7545] F2FS-fs (loop0): invalid crc value [ 182.878625][ T7586] loop4: detected capacity change from 0 to 4096 [ 183.044751][ T7545] F2FS-fs (loop0): Found nat_bits in checkpoint [ 183.143217][ T7586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.460164][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.731817][ T7545] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.777568][ T7603] loop3: detected capacity change from 0 to 512 [ 184.064370][ T7603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.309558][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.5.619'. [ 184.426910][ T7603] EXT4-fs (loop3): 1 truncate cleaned up [ 184.439327][ T7603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.541821][ T5826] syz-executor: attempt to access beyond end of device [ 184.541821][ T5826] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 184.839730][ T5826] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 185.306080][ T5826] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 185.648518][ T6333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.420518][ T7638] loop4: detected capacity change from 0 to 4096 [ 186.638429][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.179046][ T7618] loop1: detected capacity change from 0 to 32768 [ 187.213877][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.393875][ T7618] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.624 (7618) [ 187.980582][ T7645] loop3: detected capacity change from 0 to 4096 [ 188.088012][ T7645] ntfs3: Bad value for 'dmask' [ 188.279968][ T7618] BTRFS error (device loop1): open_ctree failed [ 190.610535][ T7669] loop4: detected capacity change from 0 to 512 [ 190.938624][ T7669] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.591612][ T7669] EXT4-fs (loop4): 1 truncate cleaned up [ 191.598492][ T7669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.051526][ T7693] loop0: detected capacity change from 0 to 4096 [ 192.313725][ T7693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.648546][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.670187][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.888635][ T7696] loop3: detected capacity change from 0 to 4096 [ 192.898474][ T7703] netlink: 108 bytes leftover after parsing attributes in process `syz.5.653'. [ 192.916980][ T7696] ntfs3: Bad value for 'dmask' [ 195.170616][ T7715] loop4: detected capacity change from 0 to 40427 [ 196.111813][ T7715] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 196.120326][ T7715] F2FS-fs (loop4): Image doesn't support compression [ 196.127123][ T7715] F2FS-fs (loop4): Image doesn't support compression [ 196.134135][ T7715] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 196.344559][ T7715] F2FS-fs (loop4): invalid crc value [ 196.383906][ T7715] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 196.440220][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.447304][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.612358][ T5892] IPVS: starting estimator thread 0... [ 196.706046][ T7731] loop3: detected capacity change from 0 to 512 [ 196.722786][ T7724] IPVS: using max 18 ests per chain, 43200 per kthread [ 196.774300][ T7730] loop1: detected capacity change from 0 to 512 [ 196.813747][ T7731] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.866931][ T7730] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.868610][ T7735] loop4: detected capacity change from 0 to 512 [ 196.913653][ T7735] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1283)! [ 196.932058][ T7731] EXT4-fs (loop3): 1 truncate cleaned up [ 196.992780][ T7731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.011751][ T7735] EXT4-fs (loop4): group descriptors corrupted! [ 197.668930][ T7730] EXT4-fs (loop1): 1 truncate cleaned up [ 197.803391][ T7730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.045293][ T5137] Bluetooth: hci3: link tx timeout [ 198.050613][ T5137] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.128309][ T7758] loop0: detected capacity change from 0 to 4096 [ 198.138689][ T7758] ntfs3: Bad value for 'dmask' [ 198.159411][ T6333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.854001][ T7769] syz.4.675: attempt to access beyond end of device [ 199.854001][ T7769] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 199.961340][ T7771] loop3: detected capacity change from 0 to 4096 [ 200.019153][ T7771] ntfs3: Bad value for 'dmask' [ 200.024513][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.101995][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 201.245805][ T7791] loop3: detected capacity change from 0 to 512 [ 201.281959][ T7791] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.426177][ T7791] EXT4-fs (loop3): 1 truncate cleaned up [ 201.445966][ T7791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.843155][ T7800] input: syz1 as /devices/virtual/input/input8 [ 203.252193][ T7785] loop0: detected capacity change from 0 to 32768 [ 203.291945][ T7785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.681 (7785) [ 203.333098][ T6333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.362102][ T7785] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.429373][ T7785] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 203.445388][ T7785] BTRFS info (device loop0): using free-space-tree [ 203.622832][ T7814] loop3: detected capacity change from 0 to 512 [ 203.648635][ T7814] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1283)! [ 203.668652][ T7818] loop4: detected capacity change from 0 to 512 [ 203.693215][ T7814] EXT4-fs (loop3): group descriptors corrupted! [ 203.811872][ T7818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.875252][ T7818] EXT4-fs (loop4): 1 truncate cleaned up [ 203.882226][ T7818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.205953][ T7785] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 205.579073][ T7805] loop1: detected capacity change from 0 to 32768 [ 205.826902][ T7805] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.885223][ T7785] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 205.885500][ T7785] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 205.895993][ T7785] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 205.906054][ T7785] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 206.227290][ T7805] XFS (loop1): Ending clean mount [ 206.253143][ T7785] BTRFS error (device loop0): open_ctree failed [ 206.297052][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.758758][ T5829] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.982932][ T7858] loop4: detected capacity change from 0 to 128 [ 207.033966][ T7858] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 207.686246][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 207.692379][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 207.698401][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 207.913646][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 208.134152][ T7867] loop0: detected capacity change from 0 to 512 [ 208.274155][ T7867] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1283)! [ 208.287717][ T7867] EXT4-fs (loop0): group descriptors corrupted! [ 208.651579][ T7878] netlink: 308 bytes leftover after parsing attributes in process `syz.5.706'. [ 209.629471][ T7883] loop3: detected capacity change from 0 to 2048 [ 209.723488][ T7883] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 210.551114][ T7893] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.472485][ T7882] loop1: detected capacity change from 0 to 32768 [ 211.479737][ T7882] XFS: attr2 mount option is deprecated. [ 211.496813][ T7882] XFS: ikeep mount option is deprecated. [ 211.502603][ T7882] XFS: noikeep mount option is deprecated. [ 211.561564][ T7882] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 211.714122][ T7882] XFS (loop1): Ending clean mount [ 211.724900][ T7890] loop0: detected capacity change from 0 to 32768 [ 211.726543][ T7882] XFS (loop1): Quotacheck needed: Please wait. [ 211.765413][ T7890] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.710 (7890) [ 211.864915][ T7890] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 211.866747][ T7882] XFS (loop1): Quotacheck: Done. [ 211.896477][ T7890] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 211.905847][ T7890] BTRFS info (device loop0): using free-space-tree [ 212.058231][ T7946] netlink: 277 bytes leftover after parsing attributes in process `syz.4.728'. [ 212.113369][ T7890] BTRFS info (device loop0): rebuilding free space tree [ 212.246947][ T5829] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 212.488982][ T5826] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 213.608750][ T7966] loop1: detected capacity change from 0 to 16 [ 213.720710][ T7966] erofs (device loop1): mounted with root inode @ nid 36. [ 215.438201][ T7982] loop3: detected capacity change from 0 to 40427 [ 215.446620][ T7982] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 215.454757][ T7982] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 215.464011][ T7982] F2FS-fs (loop3): Unrecognized mount option "ÿÿÿÿ00000000000000000000000" or missing value [ 216.165148][ T7995] loop3: detected capacity change from 0 to 2048 [ 216.853268][ T7995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.126532][ T7998] loop0: detected capacity change from 0 to 1024 [ 217.134991][ T7999] netlink: 'syz.2.747': attribute type 10 has an invalid length. [ 217.257632][ T7990] loop1: detected capacity change from 0 to 40427 [ 217.296674][ T7990] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 217.304732][ T7990] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 217.314154][ T7990] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿ00000000000000000000000" or missing value [ 217.401863][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.409247][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.473748][ T7998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.787103][ T8006] loop1: detected capacity change from 0 to 2048 [ 217.927139][ T8006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.572850][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.017907][ T8017] loop3: detected capacity change from 0 to 4096 [ 219.225655][ T8017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.647283][ T6333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.155623][ T8063] loop1: detected capacity change from 0 to 512 [ 225.241561][ T8063] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 226.756533][ T8063] EXT4-fs (loop1): 1 truncate cleaned up [ 226.764301][ T8063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.044449][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.610536][ T8120] loop4: detected capacity change from 0 to 4096 [ 229.223771][ T8120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.584425][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.419790][ T8135] loop3: detected capacity change from 0 to 256 [ 230.574789][ T8137] loop1: detected capacity change from 0 to 512 [ 230.738494][ T8137] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 230.772190][ T8137] EXT4-fs (loop1): invalid journal inode [ 230.777918][ T8137] EXT4-fs (loop1): can't get journal size [ 230.809156][ T8137] EXT4-fs (loop1): 1 truncate cleaned up [ 230.818186][ T8137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.017697][ T8119] loop0: detected capacity change from 0 to 32768 [ 231.089261][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.139822][ T8119] workqueue: Failed to create a rescuer kthread for wq "bcachefs_copygc": -EINTR [ 231.139997][ T8119] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 231.143555][ T8156] loop4: detected capacity change from 0 to 2048 [ 231.177220][ T8119] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 231.180746][ T8163] loop3: detected capacity change from 0 to 2048 [ 231.426194][ T8163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.655568][ T8156] hpfs: filesystem error: improperly stopped; already mounted read-only [ 231.699896][ T8156] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 231.738248][ T8156] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 233.463886][ T5836] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 235.796927][ T8216] loop4: detected capacity change from 0 to 1024 [ 235.899628][ T8216] EXT4-fs: Ignoring removed i_version option [ 236.022049][ T8216] ext2: Unknown parameter 'nouser_xattr' [ 236.150616][ T8219] loop0: detected capacity change from 0 to 512 [ 236.158848][ T8219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.203521][ T8219] EXT4-fs (loop0): 1 truncate cleaned up [ 236.247021][ T8219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.571356][ T8235] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 237.843857][ T8236] trusted_key: syz.5.831 sent an empty control message without MSG_MORE. [ 237.893555][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.256915][ T8255] loop4: detected capacity change from 0 to 40427 [ 239.604084][ T8255] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 239.611276][ T8255] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 239.695926][ T8255] F2FS-fs (loop4): invalid crc value [ 239.773673][ T8255] F2FS-fs (loop4): Found nat_bits in checkpoint [ 240.045371][ T8255] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 240.052900][ T8255] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.011894][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 242.459442][ T8305] netlink: 'syz.3.858': attribute type 10 has an invalid length. [ 242.513280][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.520762][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.552913][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.560087][ T8305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.567629][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.574796][ T8305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.709134][ T8305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 244.102938][ T8327] loop0: detected capacity change from 0 to 512 [ 244.141905][ T8327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 244.276222][ T8327] EXT4-fs (loop0): 1 truncate cleaned up [ 244.283118][ T8327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.779053][ T8347] input: syz1 as /devices/virtual/input/input9 [ 245.715243][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.682487][ T8381] loop4: detected capacity change from 0 to 512 [ 248.941554][ T8381] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.094191][ T8381] EXT4-fs (loop4): 1 truncate cleaned up [ 249.127820][ T8381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.723529][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.895550][ T8413] loop3: detected capacity change from 0 to 1024 [ 249.902890][ T8413] EXT4-fs: Ignoring removed i_version option [ 249.909000][ T8413] ext2: Unknown parameter 'nouser_xattr' [ 250.115448][ T8415] netlink: 44 bytes leftover after parsing attributes in process `syz.4.896'. [ 252.229966][ T8449] mac80211_hwsim hwsim13 : renamed from wlan1 (while UP) [ 252.495115][ T8458] loop3: detected capacity change from 0 to 16 [ 252.631202][ T8458] erofs (device loop3): mounted with root inode @ nid 36. [ 253.718431][ T8474] bridge1: entered allmulticast mode [ 253.881633][ T8478] loop3: detected capacity change from 0 to 2048 [ 254.000855][ T8484] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.101338][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 254.110460][ T8489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.927'. [ 254.542861][ T8506] loop4: detected capacity change from 0 to 164 [ 254.569120][ T8505] netlink: 44 bytes leftover after parsing attributes in process `syz.3.932'. [ 254.577176][ T8506] iso9660: Bad value for 'session' [ 255.048436][ T8521] loop3: detected capacity change from 0 to 2048 [ 255.272134][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.287684][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.367070][ T8521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.520930][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 255.982311][ T29] audit: type=1804 audit(1734738022.545:3): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.940" name="/newroot/125/file0/file2" dev="loop3" ino=16 res=1 errno=0 [ 256.162509][ T29] audit: type=1800 audit(1734738022.775:4): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.940" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 256.291762][ T29] audit: type=1800 audit(1734738022.795:5): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.940" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 256.312271][ T8545] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 256.354090][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.361605][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.415202][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.422605][ T8545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.430702][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.437932][ T8545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.466396][ T8545] bridge0: entered allmulticast mode [ 256.472416][ T8545] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 256.473309][ T6333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.595684][ T5846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 258.607088][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/u9:7 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 258.617969][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.628048][ T5846] Workqueue: hci0 hci_rx_work [ 258.632808][ T5846] Call Trace: [ 258.636104][ T5846] [ 258.639050][ T5846] dump_stack_lvl+0x241/0x360 [ 258.643772][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.649008][ T5846] ? __pfx__printk+0x10/0x10 [ 258.653641][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.659300][ T5846] ? __kmalloc_cache_noprof+0x243/0x390 [ 258.664878][ T5846] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 258.670194][ T5846] sysfs_create_dir_ns+0x2ce/0x3a0 [ 258.675333][ T5846] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 258.680988][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.686663][ T5846] kobject_add_internal+0x435/0x8d0 [ 258.691896][ T5846] kobject_add+0x152/0x220 [ 258.696354][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.702015][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 258.707238][ T5846] ? device_add+0x3e7/0xbf0 [ 258.711763][ T5846] ? __pfx_kobject_add+0x10/0x10 [ 258.716737][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.722438][ T5846] ? _raw_spin_unlock+0x28/0x50 [ 258.727332][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.733081][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.736521][ T8568] loop3: detected capacity change from 0 to 4096 [ 258.738975][ T5846] ? get_device_parent+0x165/0x410 [ 258.750528][ T5846] device_add+0x4e5/0xbf0 [ 258.754896][ T5846] hci_conn_add_sysfs+0xe8/0x200 [ 258.759875][ T5846] le_conn_complete_evt+0xc9f/0x12e0 [ 258.765205][ T5846] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 258.770953][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.776611][ T5846] ? __mutex_unlock_slowpath+0x21e/0x790 [ 258.782312][ T5846] ? __pfx___mutex_lock+0x10/0x10 [ 258.787378][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.793034][ T5846] ? skb_pull_data+0x112/0x230 [ 258.797827][ T5846] hci_le_enh_conn_complete_evt+0x185/0x420 [ 258.803741][ T5846] hci_event_packet+0xa57/0x1540 [ 258.808706][ T5846] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 258.814009][ T5846] ? __pfx_hci_event_packet+0x10/0x10 [ 258.819602][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 258.824851][ T5846] ? hci_send_to_monitor+0xd8/0x7f0 [ 258.830060][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.835704][ T5846] ? kcov_remote_start+0x97/0x7d0 [ 258.840745][ T5846] hci_rx_work+0x3f3/0xdb0 [ 258.845190][ T5846] ? process_scheduled_works+0x976/0x1840 [ 258.850919][ T5846] process_scheduled_works+0xa68/0x1840 [ 258.856772][ T5846] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.862781][ T5846] ? assign_work+0x364/0x3d0 [ 258.867388][ T5846] worker_thread+0x870/0xd30 [ 258.872005][ T5846] ? __kthread_parkme+0x169/0x1d0 [ 258.877044][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 258.882166][ T5846] kthread+0x2f2/0x390 [ 258.886249][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 258.891368][ T5846] ? __pfx_kthread+0x10/0x10 [ 258.895977][ T5846] ret_from_fork+0x4d/0x80 [ 258.900402][ T5846] ? __pfx_kthread+0x10/0x10 [ 258.905008][ T5846] ret_from_fork_asm+0x1a/0x30 [ 258.909797][ T5846] [ 258.920034][ T5846] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 258.934231][ T5846] Bluetooth: hci0: failed to register connection device [ 258.950122][ T8568] ntfs3: Bad value for 'dmask' [ 260.731378][ T8592] loop4: detected capacity change from 0 to 164 [ 260.738966][ T8592] iso9660: Bad value for 'session' [ 261.100559][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 261.740401][ T8609] netlink: 560 bytes leftover after parsing attributes in process `syz.3.970'. [ 265.758863][ T8646] loop1: detected capacity change from 0 to 512 [ 265.785831][ T8642] loop0: detected capacity change from 0 to 164 [ 265.801130][ T8642] iso9660: Bad value for 'session' [ 265.979259][ T8646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 266.107776][ T8646] EXT4-fs (loop1): 1 truncate cleaned up [ 266.144944][ T8646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.568463][ T8657] netlink: 560 bytes leftover after parsing attributes in process `syz.5.985'. [ 266.580424][ T8655] loop4: detected capacity change from 0 to 512 [ 266.612516][ T8655] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.081935][ T8662] warning: `syz.0.986' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 267.655438][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.983136][ T8655] EXT4-fs (loop4): 1 truncate cleaned up [ 268.020308][ T8655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.430556][ T8670] loop0: detected capacity change from 0 to 64 [ 268.480797][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.755117][ T8674] loop1: detected capacity change from 0 to 4096 [ 268.813987][ T8674] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 268.853501][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 269.315991][ T5836] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 269.319437][ T8697] loop0: detected capacity change from 0 to 512 [ 269.351932][ T8697] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.478850][ T8674] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 269.528976][ T8697] EXT4-fs (loop0): 1 truncate cleaned up [ 269.537354][ T8697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.615123][ T8707] loop4: detected capacity change from 0 to 4096 [ 269.755969][ T8707] NILFS (loop4): invalid segment: Checksum error in segment payload [ 269.764831][ T8707] NILFS (loop4): trying rollback from an earlier position [ 269.825780][ T8711] loop1: detected capacity change from 0 to 2048 [ 269.858840][ T8707] NILFS (loop4): recovery complete [ 269.910503][ T8712] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.958070][ T8711] loop1: p1 < > p2 p3 < p5 > p4 [ 269.963222][ T8711] loop1: partition table partially beyond EOD, truncated [ 269.978572][ T8711] loop1: p1 start 4278190080 is beyond EOD, truncated [ 269.992949][ T8711] loop1: p2 start 16908800 is beyond EOD, truncated [ 270.016644][ T8711] loop1: p4 start 11326 is beyond EOD, truncated [ 270.032951][ T8711] loop1: p5 start 16908800 is beyond EOD, truncated [ 270.353393][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.413733][ T8722] netlink: 173 bytes leftover after parsing attributes in process `syz.0.1011'. [ 270.606676][ T8728] loop4: detected capacity change from 0 to 512 [ 270.783670][ T8728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.816464][ T8728] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.014552][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.219884][ T8747] loop4: detected capacity change from 0 to 164 [ 271.290138][ T8747] isofs_fill_super: root inode is not a directory. Corrupted media? [ 271.385491][ T8749] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1022'. [ 272.708220][ T8760] loop4: detected capacity change from 0 to 32768 [ 273.402488][ T8760] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.039040][ T8760] XFS (loop4): Ending clean mount [ 274.214986][ T9] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 274.263891][ T9] XFS (loop4): Unmount and run xfs_repair [ 274.294198][ T9] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 274.341291][ T8794] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1037'. [ 274.371424][ T9] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 274.420477][ T9] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 274.460281][ T9] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 275.206446][ T9] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 275.215466][ T9] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 275.224689][ T9] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 275.233635][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 275.244087][ T9] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 275.255237][ T8760] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 275.294159][ T8760] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 275.309000][ T8760] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 275.372561][ T5828] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.696161][ T8848] loop1: detected capacity change from 0 to 1024 [ 278.994752][ T8848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.606754][ T8864] loop4: detected capacity change from 0 to 164 [ 279.704905][ T8864] isofs_fill_super: root inode is not a directory. Corrupted media? [ 280.880690][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.971159][ T29] audit: type=1326 audit(1734738049.575:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.5.1070" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c98985d29 code=0x0 [ 283.421985][ T8902] loop4: detected capacity change from 0 to 512 [ 283.732829][ T8902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.746750][ T8902] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.642462][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 285.654093][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.809002][ T5891] usb 1-1: too many configurations: 219, using maximum allowed: 8 [ 285.818237][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.842968][ T8933] loop3: detected capacity change from 0 to 256 [ 285.879084][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.883402][ T8933] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 285.940460][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.975797][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.028534][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.053340][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.099749][ T8935] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 286.108496][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.123966][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.152794][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.173442][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.221269][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.272073][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.323636][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.331194][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.386171][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.410581][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.417876][ T8935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.425391][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.432545][ T8935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.046219][ T8935] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 287.222859][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.237202][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.257801][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.293979][ T5891] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 287.305094][ T5891] usb 1-1: New USB device strings: Mfr=175, Product=252, SerialNumber=211 [ 287.317224][ T5891] usb 1-1: Product: syz [ 287.343561][ T5891] usb 1-1: Manufacturer: syz [ 287.352900][ T5891] usb 1-1: SerialNumber: syz [ 287.407997][ T5891] usb 1-1: config 0 descriptor?? [ 287.809991][ T5891] usb 1-1: can't set config #0, error -71 [ 287.863760][ T5891] usb 1-1: USB disconnect, device number 3 [ 287.973841][ T8954] tmpfs: Bad value for 'mpol' [ 290.479763][ T8967] loop4: detected capacity change from 0 to 4096 [ 292.066609][ T8967] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 292.108529][ T8967] UDF-fs: Scanning with blocksize 512 failed [ 292.112058][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 292.385324][ T8990] 9pnet_fd: Insufficient options for proto=fd [ 293.450587][ T8967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.679547][ T8998] loop3: detected capacity change from 0 to 1024 [ 293.851418][ T9002] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 294.045595][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.052947][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.095469][ T6350] hfsplus: b-tree write err: -5, ino 4 [ 294.227443][ T9011] input: syz1 as /devices/virtual/input/input10 [ 294.261893][ T5932] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 294.906401][ T5932] usb 6-1: too many configurations: 219, using maximum allowed: 8 [ 294.925930][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.951629][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.966861][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.987249][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.013731][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.051593][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.070233][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.080754][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.359847][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.370640][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.813943][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.825265][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.838753][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 297.006006][ T5932] usb 6-1: unable to read config index 6 descriptor/start: -71 [ 297.013991][ T5932] usb 6-1: can't read configurations, error -71 [ 297.219496][ T5836] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 297.229393][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: kworker/u9:3 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 297.240356][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.250436][ T5836] Workqueue: hci2 hci_rx_work [ 297.255183][ T5836] Call Trace: [ 297.258477][ T5836] [ 297.261696][ T5836] dump_stack_lvl+0x241/0x360 [ 297.266419][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.271657][ T5836] ? __pfx__printk+0x10/0x10 [ 297.276291][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.281963][ T5836] ? __kmalloc_cache_noprof+0x243/0x390 [ 297.287545][ T5836] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 297.293036][ T5836] sysfs_create_dir_ns+0x2ce/0x3a0 [ 297.298267][ T5836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 297.303924][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.309596][ T5836] kobject_add_internal+0x435/0x8d0 [ 297.314830][ T5836] kobject_add+0x152/0x220 [ 297.319373][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.325030][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 297.330253][ T5836] ? device_add+0x3e7/0xbf0 [ 297.334787][ T5836] ? __pfx_kobject_add+0x10/0x10 [ 297.339766][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.345428][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 297.350314][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.356064][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.361724][ T5836] ? get_device_parent+0x165/0x410 [ 297.366863][ T5836] device_add+0x4e5/0xbf0 [ 297.371226][ T5836] hci_conn_add_sysfs+0xe8/0x200 [ 297.376211][ T5836] le_conn_complete_evt+0xc9f/0x12e0 [ 297.381889][ T5836] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 297.387905][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.393566][ T5836] ? __mutex_unlock_slowpath+0x21e/0x790 [ 297.399245][ T5836] ? __pfx___mutex_lock+0x10/0x10 [ 297.404307][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.409967][ T5836] ? skb_pull_data+0x112/0x230 [ 297.414773][ T5836] hci_le_enh_conn_complete_evt+0x185/0x420 [ 297.420830][ T5836] hci_event_packet+0xa57/0x1540 [ 297.425819][ T5836] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 297.431141][ T5836] ? __pfx_hci_event_packet+0x10/0x10 [ 297.436554][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 297.441789][ T5836] ? hci_send_to_monitor+0xd8/0x7f0 [ 297.447016][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.452687][ T5836] ? kcov_remote_start+0x97/0x7d0 [ 297.457749][ T5836] hci_rx_work+0x3f3/0xdb0 [ 297.462220][ T5836] ? process_scheduled_works+0x976/0x1840 [ 297.467972][ T5836] process_scheduled_works+0xa68/0x1840 [ 297.473579][ T5836] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.479602][ T5836] ? assign_work+0x364/0x3d0 [ 297.484226][ T5836] worker_thread+0x870/0xd30 [ 297.488858][ T5836] ? __kthread_parkme+0x169/0x1d0 [ 297.493918][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 297.494966][ T9043] loop1: detected capacity change from 0 to 512 [ 297.499032][ T5836] kthread+0x2f2/0x390 [ 297.509519][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 297.514683][ T5836] ? __pfx_kthread+0x10/0x10 [ 297.519308][ T5836] ret_from_fork+0x4d/0x80 [ 297.523758][ T5836] ? __pfx_kthread+0x10/0x10 [ 297.528380][ T5836] ret_from_fork_asm+0x1a/0x30 [ 297.533183][ T5836] [ 297.543728][ T5836] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 297.564533][ T5836] Bluetooth: hci2: failed to register connection device [ 297.609367][ T9043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 298.600707][ T9043] EXT4-fs (loop1): 1 truncate cleaned up [ 298.753749][ T9043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.661243][ T9075] evm: overlay not supported [ 299.668087][ T9075] Invalid ELF header magic: != ELF [ 299.689818][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 300.351786][ T29] audit: type=1804 audit(1734738066.265:7): pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1132" name="/newroot/193/bus/bus" dev="overlay" ino=1023 res=1 errno=0 [ 300.563569][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 301.695533][ T5846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 301.705618][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/u9:7 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 301.716668][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.726743][ T5846] Workqueue: hci1 hci_rx_work [ 301.731474][ T5846] Call Trace: [ 301.734770][ T5846] [ 301.737718][ T5846] dump_stack_lvl+0x241/0x360 [ 301.742441][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.747684][ T5846] ? __pfx__printk+0x10/0x10 [ 301.752396][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.758058][ T5846] ? __kmalloc_cache_noprof+0x243/0x390 [ 301.763637][ T5846] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 301.768959][ T5846] sysfs_create_dir_ns+0x2ce/0x3a0 [ 301.774098][ T5846] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 301.779751][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.785421][ T5846] kobject_add_internal+0x435/0x8d0 [ 301.790653][ T5846] kobject_add+0x152/0x220 [ 301.795139][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.800795][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.806105][ T5846] ? device_add+0x3e7/0xbf0 [ 301.810633][ T5846] ? __pfx_kobject_add+0x10/0x10 [ 301.815615][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.821276][ T5846] ? _raw_spin_unlock+0x28/0x50 [ 301.826154][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.831821][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.837478][ T5846] ? get_device_parent+0x165/0x410 [ 301.842621][ T5846] device_add+0x4e5/0xbf0 [ 301.846988][ T5846] hci_conn_add_sysfs+0xe8/0x200 [ 301.851966][ T5846] le_conn_complete_evt+0xc9f/0x12e0 [ 301.857298][ T5846] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 301.863051][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.868710][ T5846] ? __mutex_unlock_slowpath+0x21e/0x790 [ 301.874387][ T5846] ? __pfx___mutex_lock+0x10/0x10 [ 301.879459][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.885121][ T5846] ? skb_pull_data+0x112/0x230 [ 301.889930][ T5846] hci_le_enh_conn_complete_evt+0x185/0x420 [ 301.895862][ T5846] hci_event_packet+0xa57/0x1540 [ 301.900840][ T5846] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 301.906155][ T5846] ? __pfx_hci_event_packet+0x10/0x10 [ 301.911560][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.916795][ T5846] ? hci_send_to_monitor+0xd8/0x7f0 [ 301.922017][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.927765][ T5846] ? kcov_remote_start+0x97/0x7d0 [ 301.933082][ T5846] hci_rx_work+0x3f3/0xdb0 [ 301.937543][ T5846] ? process_scheduled_works+0x976/0x1840 [ 301.943285][ T5846] process_scheduled_works+0xa68/0x1840 [ 301.948894][ T5846] ? __pfx_process_scheduled_works+0x10/0x10 [ 301.954911][ T5846] ? assign_work+0x364/0x3d0 [ 301.959530][ T5846] worker_thread+0x870/0xd30 [ 301.964166][ T5846] ? __kthread_parkme+0x169/0x1d0 [ 301.969223][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 301.974361][ T5846] kthread+0x2f2/0x390 [ 301.978465][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 301.983609][ T5846] ? __pfx_kthread+0x10/0x10 [ 301.988234][ T5846] ret_from_fork+0x4d/0x80 [ 301.992676][ T5846] ? __pfx_kthread+0x10/0x10 [ 301.997295][ T5846] ret_from_fork_asm+0x1a/0x30 [ 302.002094][ T5846] [ 302.058643][ T5846] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 302.073712][ T5846] Bluetooth: hci1: failed to register connection device [ 303.438306][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.820345][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 304.863620][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 304.995388][ T9123] loop1: detected capacity change from 0 to 2048 [ 305.653102][ T9133] netlink: 'syz.4.1156': attribute type 10 has an invalid length. [ 305.683911][ T5846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 305.692054][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.693619][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/u9:7 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 305.700830][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.711422][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 305.711446][ T5846] Workqueue: hci4 hci_rx_work [ 305.711493][ T5846] Call Trace: [ 305.711504][ T5846] [ 305.711517][ T5846] dump_stack_lvl+0x241/0x360 [ 305.711565][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.711606][ T5846] ? __pfx__printk+0x10/0x10 [ 305.753981][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.759636][ T5846] ? __kmalloc_cache_noprof+0x243/0x390 [ 305.765205][ T5846] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 305.770764][ T5846] sysfs_create_dir_ns+0x2ce/0x3a0 [ 305.775890][ T5846] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 305.781533][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.787187][ T5846] kobject_add_internal+0x435/0x8d0 [ 305.792406][ T5846] kobject_add+0x152/0x220 [ 305.796848][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.802491][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 305.807700][ T5846] ? device_add+0x3e7/0xbf0 [ 305.812210][ T5846] ? __pfx_kobject_add+0x10/0x10 [ 305.817166][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.822895][ T5846] ? _raw_spin_unlock+0x28/0x50 [ 305.827763][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.833409][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.839049][ T5846] ? get_device_parent+0x165/0x410 [ 305.844174][ T5846] device_add+0x4e5/0xbf0 [ 305.848524][ T5846] hci_conn_add_sysfs+0xe8/0x200 [ 305.853484][ T5846] le_conn_complete_evt+0xc9f/0x12e0 [ 305.858799][ T5846] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 305.864625][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.870267][ T5846] ? __mutex_unlock_slowpath+0x21e/0x790 [ 305.875929][ T5846] ? __pfx___mutex_lock+0x10/0x10 [ 305.880970][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.886611][ T5846] ? skb_pull_data+0x112/0x230 [ 305.891397][ T5846] hci_le_enh_conn_complete_evt+0x185/0x420 [ 305.897310][ T5846] hci_event_packet+0xa57/0x1540 [ 305.902304][ T5846] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 305.907601][ T5846] ? __pfx_hci_event_packet+0x10/0x10 [ 305.912992][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 305.918203][ T5846] ? hci_send_to_monitor+0xd8/0x7f0 [ 305.923411][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.929050][ T5846] ? kcov_remote_start+0x97/0x7d0 [ 305.934088][ T5846] hci_rx_work+0x3f3/0xdb0 [ 305.938534][ T5846] ? process_scheduled_works+0x976/0x1840 [ 305.944264][ T5846] process_scheduled_works+0xa68/0x1840 [ 305.949881][ T5846] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.955883][ T5846] ? assign_work+0x364/0x3d0 [ 305.960492][ T5846] worker_thread+0x870/0xd30 [ 305.965109][ T5846] ? __kthread_parkme+0x169/0x1d0 [ 305.970233][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 305.975382][ T5846] kthread+0x2f2/0x390 [ 305.979463][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 305.984589][ T5846] ? __pfx_kthread+0x10/0x10 [ 305.989195][ T5846] ret_from_fork+0x4d/0x80 [ 305.993619][ T5846] ? __pfx_kthread+0x10/0x10 [ 305.998229][ T5846] ret_from_fork_asm+0x1a/0x30 [ 306.003017][ T5846] [ 306.007916][ T5846] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 306.022650][ T5846] Bluetooth: hci4: failed to register connection device [ 306.232539][ T9141] tmpfs: Bad value for 'mpol' [ 308.111848][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 309.966440][ T9182] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1173'. [ 311.184520][ T9192] tipc: Started in network mode [ 311.247308][ T9192] tipc: Node identity 963427b4d2ec, cluster identity 4711 [ 311.312441][ T9192] tipc: Enabled bearer , priority 31 [ 311.361975][ T9194] ªªªªªª: renamed from syzkaller0 [ 311.413323][ T9194] tipc: Disabling bearer [ 311.458411][ T9203] loop1: detected capacity change from 0 to 512 [ 311.511835][ T9203] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 311.735005][ T9203] EXT4-fs (loop1): 1 truncate cleaned up [ 311.742546][ T9203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.250102][ T9216] loop0: detected capacity change from 0 to 1024 [ 313.593461][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.378609][ T9237] loop4: detected capacity change from 0 to 40427 [ 315.404261][ T9228] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1192'. [ 315.433804][ T9237] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 315.443643][ T9237] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 315.460461][ T9237] F2FS-fs (loop4): Unrecognized mount option "ÿÿÿÿ00000000000000000000000" or missing value [ 316.788788][ T9259] loop3: detected capacity change from 0 to 2048 [ 317.520801][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.527236][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.109911][ T9265] loop3: detected capacity change from 0 to 512 [ 318.294686][ T9265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 318.578487][ T9273] input: syz1 as /devices/virtual/input/input11 [ 319.383886][ T9277] loop1: detected capacity change from 0 to 64 [ 319.385222][ T9265] EXT4-fs (loop3): 1 truncate cleaned up [ 319.569284][ T9265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.855498][ T6333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.876900][ T9295] loop6: detected capacity change from 0 to 524287999 [ 322.205433][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.215038][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.269215][ T9307] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1210'. [ 322.423447][ T9298] loop6: detected capacity change from 524287999 to 524287952 [ 322.553669][ T9295] loop6: unable to read partition table [ 322.643488][ T9295] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´8ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 322.873539][ T9314] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 323.187301][ T9323] loop1: detected capacity change from 0 to 4096 [ 323.194664][ T9323] ntfs3: Bad value for 'dmask' [ 326.171870][ T9356] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 326.179708][ T9356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1224'. [ 331.698185][ T9344] syz.1.1223 (9344): drop_caches: 1 [ 333.030185][ T9414] netlink: 'syz.2.1243': attribute type 29 has an invalid length. [ 333.039196][ T9414] netlink: 'syz.2.1243': attribute type 29 has an invalid length. [ 333.327531][ T9412] loop4: detected capacity change from 0 to 40427 [ 333.346065][ T9412] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 333.397420][ T9412] F2FS-fs (loop4): invalid crc value [ 333.509379][ T9412] F2FS-fs (loop4): Found nat_bits in checkpoint [ 333.629551][ T9412] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 333.673521][ T9412] F2FS-fs (loop4): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xd20/0x1bd0 [ 333.696189][ T9412] syz.4.1241: attempt to access beyond end of device [ 333.696189][ T9412] loop4: rw=2049, sector=77824, nr_sectors = 2064 limit=40427 [ 333.716143][ T9412] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x595/0x1de0 [ 333.721917][ T5936] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 333.727608][ T9412] F2FS-fs (loop4): invalid blkaddr: 10017, type: 7, run fsck to fix. [ 333.744760][ T9412] syz.4.1241: attempt to access beyond end of device [ 333.744760][ T9412] loop4: rw=2049, sector=79888, nr_sectors = 504 limit=40427 [ 333.764334][ T29] audit: type=1800 audit(1734738100.255:8): pid=9412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1241" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 333.891902][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 333.913701][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.146156][ T5936] usb 4-1: config 0 has no interfaces? [ 334.397709][ T5936] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 334.438345][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 334.492059][ T5936] usb 4-1: Product: syz [ 334.496284][ T5936] usb 4-1: Manufacturer: syz [ 334.542886][ T5828] syz-executor: attempt to access beyond end of device [ 334.542886][ T5828] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 334.567555][ T5936] usb 4-1: SerialNumber: syz [ 334.603874][ T5936] usb 4-1: config 0 descriptor?? [ 334.626243][ T5828] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 334.902962][ T9406] ubi0: attaching mtd0 [ 334.934121][ T9406] ubi0: scanning is finished [ 334.957543][ T9406] ubi0: empty MTD device detected [ 335.313707][ T9440] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1253'. [ 335.398328][ T9406] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 335.406051][ T9406] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 335.433488][ T9406] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 335.445482][ T9406] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 335.454497][ T9406] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 335.461502][ T9406] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 335.469954][ T9406] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3317004320 [ 335.547148][ T9406] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 335.581872][ T9445] ubi0: background thread "ubi_bgt0d" started, PID 9445 [ 335.665995][ T9433] ubi0: detaching mtd0 [ 335.769191][ T9433] ubi0: mtd0 is detached [ 335.798373][ T9] usb 4-1: USB disconnect, device number 5 [ 336.982346][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1260'. [ 337.999852][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1268'. [ 338.062685][ T9475] bridge_slave_1: left allmulticast mode [ 338.095491][ T9475] bridge_slave_1: left promiscuous mode [ 338.134344][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.301390][ T9475] bridge_slave_0: left allmulticast mode [ 338.311385][ T9475] bridge_slave_0: left promiscuous mode [ 338.318946][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.564465][ T9488] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1273'. [ 338.859371][ T29] audit: type=1326 audit(1734738105.465:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a7585d29 code=0x7ffc0000 [ 338.905860][ T29] audit: type=1326 audit(1734738105.495:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a7585d29 code=0x7ffc0000 [ 339.038719][ T29] audit: type=1326 audit(1734738105.495:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f86a7585d29 code=0x7ffc0000 [ 339.061329][ T29] audit: type=1326 audit(1734738105.495:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a7585d29 code=0x7ffc0000 [ 339.304321][ T29] audit: type=1326 audit(1734738105.495:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a7585d29 code=0x7ffc0000 [ 340.001948][ T29] audit: type=1326 audit(1734738105.495:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f86a7585d29 code=0x7ffc0000 [ 340.661865][ T29] audit: type=1326 audit(1734738105.495:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a7585d29 code=0x7ffc0000 [ 340.684834][ T29] audit: type=1326 audit(1734738105.495:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a7585d29 code=0x7ffc0000 [ 342.061644][ T9530] netlink: 'syz.0.1286': attribute type 10 has an invalid length. [ 342.190917][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.198217][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.937680][ T9575] input: syz0 as /devices/virtual/input/input12 [ 344.753132][ T9546] loop4: detected capacity change from 0 to 32768 [ 344.922292][ T9577] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1302'. [ 344.931642][ T29] audit: type=1800 audit(1734738111.495:17): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1290" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 345.024979][ T9546] ERROR: (device loop4): diWrite: ixpxd invalid [ 345.024979][ T9546] [ 345.089747][ T9546] ERROR: (device loop4): remounting filesystem as read-only [ 345.111020][ T9546] ERROR: (device loop4): txCommit: [ 345.111020][ T9546] [ 345.489382][ T9591] netlink: 'syz.2.1307': attribute type 10 has an invalid length. [ 345.611428][ T114] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 345.622580][ T114] ------------[ cut here ]------------ [ 345.628172][ T114] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 345.634095][ T114] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 345.641226][ T114] CPU: 0 UID: 0 PID: 114 Comm: jfsCommit Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 345.651745][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.661819][ T114] RIP: 0010:txUnlock+0xd46/0xdb0 [ 345.666789][ T114] Code: e9 0e fe ff ff e8 1a e4 6a fe 48 c7 c7 00 8a 42 8c 48 c7 c6 f9 85 42 8c ba a3 03 00 00 48 c7 c1 00 97 42 8c e8 cb 76 d2 fd 90 <0f> 0b e8 f3 e3 6a fe 48 c7 c7 00 8a 42 8c 48 c7 c6 f9 85 42 8c ba [ 345.686411][ T114] RSP: 0018:ffffc90002d9fce8 EFLAGS: 00010246 [ 345.692495][ T114] RAX: 0000000000000037 RBX: 1ffff110477c7c15 RCX: 1b62750eb8bad000 [ 345.698211][ T9601] netlink: 'syz.5.1311': attribute type 29 has an invalid length. [ 345.700458][ T114] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 345.700481][ T114] RBP: 0000000000000000 R08: ffffffff817f0a4c R09: fffffbfff1cfa210 [ 345.722997][ T9601] netlink: 'syz.5.1311': attribute type 29 has an invalid length. [ 345.724415][ T114] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88805b6569d0 [ 345.740198][ T114] R13: ffffc90002912000 R14: ffff88823be3e0a8 R15: dffffc0000000000 [ 345.748186][ T114] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 345.757129][ T114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.763722][ T114] CR2: 000000110c40a773 CR3: 00000000342dc000 CR4: 0000000000350ef0 [ 345.771914][ T114] Call Trace: [ 345.775196][ T114] [ 345.778134][ T114] ? __die_body+0x5f/0xb0 [ 345.782490][ T114] ? die+0x9e/0xc0 [ 345.786235][ T114] ? do_trap+0x15a/0x3a0 [ 345.790495][ T114] ? txUnlock+0xd46/0xdb0 [ 345.794858][ T114] ? do_error_trap+0x1dc/0x2c0 [ 345.799637][ T114] ? txUnlock+0xd46/0xdb0 [ 345.803995][ T114] ? txUnlock+0xd46/0xdb0 [ 345.808374][ T114] ? __pfx_do_error_trap+0x10/0x10 [ 345.813500][ T114] ? report_bug+0x3e8/0x500 [ 345.818035][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.823695][ T114] ? handle_invalid_op+0x34/0x40 [ 345.828645][ T114] ? txUnlock+0xd46/0xdb0 [ 345.833028][ T114] ? exc_invalid_op+0x38/0x50 [ 345.837721][ T114] ? asm_exc_invalid_op+0x1a/0x20 [ 345.842778][ T114] ? __wake_up_klogd+0xcc/0x110 [ 345.847651][ T114] ? txUnlock+0xd46/0xdb0 [ 345.852015][ T114] ? txUnlock+0xd45/0xdb0 [ 345.856378][ T114] jfs_lazycommit+0x5f4/0xb80 [ 345.861092][ T114] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 345.867012][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.872666][ T114] ? lockdep_hardirqs_on+0x99/0x150 [ 345.877901][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 345.883138][ T114] ? __pfx_default_wake_function+0x10/0x10 [ 345.888980][ T114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.894629][ T114] ? __kthread_parkme+0x169/0x1d0 [ 345.899675][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 345.904905][ T114] kthread+0x2f2/0x390 [ 345.909001][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 345.914225][ T114] ? __pfx_kthread+0x10/0x10 [ 345.918836][ T114] ret_from_fork+0x4d/0x80 [ 345.923354][ T114] ? __pfx_kthread+0x10/0x10 [ 345.927977][ T114] ret_from_fork_asm+0x1a/0x30 [ 345.932850][ T114] [ 345.935875][ T114] Modules linked in: [ 345.948911][ T114] ---[ end trace 0000000000000000 ]--- [ 345.955880][ T114] RIP: 0010:txUnlock+0xd46/0xdb0 [ 345.960907][ T114] Code: e9 0e fe ff ff e8 1a e4 6a fe 48 c7 c7 00 8a 42 8c 48 c7 c6 f9 85 42 8c ba a3 03 00 00 48 c7 c1 00 97 42 8c e8 cb 76 d2 fd 90 <0f> 0b e8 f3 e3 6a fe 48 c7 c7 00 8a 42 8c 48 c7 c6 f9 85 42 8c ba [ 346.221765][ T114] RSP: 0018:ffffc90002d9fce8 EFLAGS: 00010246 [ 346.266217][ T114] RAX: 0000000000000037 RBX: 1ffff110477c7c15 RCX: 1b62750eb8bad000 [ 346.521165][ T114] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 346.557605][ T114] RBP: 0000000000000000 R08: ffffffff817f0a4c R09: fffffbfff1cfa210 [ 346.586784][ T114] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88805b6569d0 [ 346.599774][ T114] R13: ffffc90002912000 R14: ffff88823be3e0a8 R15: dffffc0000000000 [ 346.635552][ T114] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 346.656814][ T114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.670094][ T114] CR2: 0000000020141030 CR3: 0000000051996000 CR4: 0000000000350ef0 [ 346.693515][ T114] Kernel panic - not syncing: Fatal exception [ 346.700226][ T114] Kernel Offset: disabled [ 346.704539][ T114] Rebooting in 86400 seconds..