last executing test programs: 44.521992343s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 44.460405742s ago: executing program 4: syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) getpgrp(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000004080), 0x1, 0x762, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2Ch4oHESwU9GxdNttQs8mW7KY0IaAighdBxYOgl579UW/exB9X/S88SEvVtFjxIJHZzKbbZrfJpkmWup8PTPt9M7N5892Zee/tzrATQM8aTf/JRRyOiA+TiOFsfhIRA/WoP+Lk2no3V5aL6ZTE6uqrfyT1dW6sLBej6TWpg1nh0Yj48b2II7mN9VYXl2YK5XJpPiuP12bPj1cXl46emy1Ml6ZLc8cnJiePnXjmxPGdy/WvX5YOXf3opSe/PvnPu49c/uCnJE7GoWxZcx47ZTRGs/dkIH0Lb/PiTlfWZUm3N4BtSU/NvrWzPA7HcPTVIwDg/+ytiFgFAHpMov8HgB7T+B7gxspysTF19xuJvXXthYjYv5Z/4/rm2pL+7Jrd/vp10KEbyW1XRpKIGNmB+kcj4vNvX/8ynWKXrkMCtPL2d1mwof1PNtyz0KmntrDO6B1l7R/sne/T8c+zrcZ/ufXxT7QY/wy2OHe3Y/PzP3dlB6ppKx3/Pd90b9vNpvwzI31Z6YH6mG8gOXuuXErbtgcjYiwGBtPyxF3qGLv+7/V2y5rHf39+/OYXaf3p/7fWyF3pH7z9NVOFWuFecm527Z2Ix/pb5Z+s7/+kzfj39BbrePm59z9rtyzNP823MW3Mf3etXop4ouX+v3VHW3LX+xPH64fDeOOgaOGbXz8dald/8/5Pp7T+xmeBvZDu/6G75z+SNN+vWe28jp8vDf/Qbtnm+bc+/vclr9Xjfdm8i4VabX4iYl/yysb5x269tlFurJ/mP/Z4Pf8D2Sob2r9Wx3/6mfCNzRLPNqL/6u9fbT//3ZXmP9XR/u88uHxzpq9d/Vvb/5P1aCybs5X2b6sbeC/vHQAAAAAAAAAAAAAAAAAAAAAAAABsVS4iDkWSy6/HuVw+v/YM74djKFeuVGtHzlYW5qai/qzskRjINX7qcrjp91Anst/Db5SP3VF+OiIeiohPBg/Uy/lipTzV7eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHOwzfP/U78NdnvrAIBds7/bGwAA7Dn9PwD0nk77f+MFALj/6c8BoPfo/wGg9+j/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GWnT51Kp9W/V5aLaXnqwuLCTOXC0alSdSY/u1DMFyvz5/PTlcp0uZQvVmY3+3vlSuX8ZMwtXByvlaq18eri0pnZysJc7cy52cJ06UxpYE+yAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDOVBeXZgrlcmleIBAI1oNut0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA94f/AgAA///tuiN0") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x5626}, {0x30, 0x0, 0x0, 0xfffbf038}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$nl_route_sched(r2, &(0x7f0000007080)={0x0, 0x0, &(0x7f0000007040)={&(0x7f0000000440), 0x6bd4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000090000f8c77efde189f73b000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970766c616e3000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) 43.532768805s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x58}]}]}, 0x58}}, 0x0) 35.27956934s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 34.972236098s ago: executing program 2: writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000040)="9b06364b8587ec0a5c88a91a08636365e7f411cbbdf52b21d82d55d957a493346687f9de8c33b7c15f", 0x29}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60e87ef200380600fe8000000000000000000000000400bb000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e000000090780000040a0000000000000000051200"/36], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 34.860882055s ago: executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000380)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.690159206s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x7}) fcntl$lock(r0, 0x25, &(0x7f00000011c0)={0x0, 0x0, 0x6, 0xfffffffffffffffa}) 33.641463203s ago: executing program 1: r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1, &(0x7f0000000240)=""/45, 0x2d}, 0x0) 33.607045568s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "bda111c5b5ae6d92ae9ea8d0179bd00c0fae174cd7575228c0326ba91226d95963db44b11c55a2ad93c207d005e3b09c623ac941c2a4516f4b249ca0595794c271c52e503ab13a896438a2b3b8643b51"}, 0xd8) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x48, 0x0, "6afba69ff292f3ea05bcff1de335fb62fe0333b311700b245c7d8a551d17b813c170dea77aaa43e011c11c0a0303425d0b98e32b2098c16feaba4171575d7507b9d3ed416ed96731d8b17781f44fc01f"}, 0xd8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 33.579633043s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x81, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a573da8dd49c0c6d33f0a3898c315943f48") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}}) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x400445a0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x58, 0x1}}) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) 33.4691063s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f0000001940)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x100000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@initdev, @in=@empty}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f00000006c0)=0xe8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000014c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x3}) vmsplice(r3, &(0x7f0000001a40)=[{&(0x7f0000001800)="95bee663888d660aee2076456f0ad9cf7e15b14eb84271b5f1e3fc492c3b42eb1d23308f2c5771d3b4127eb29c6985ef6a9fd548748477edc27cd463f3163872a835ea8735448788a0f147169cc9c530cc94fdb466cea4c73903ded31861bf46f6f0afcf4f1b30b7cff15bcf9f6f58d6bfdbb1192b332b8c979e6a34546bd921917f79a2811ccf5d1d12c1ad808a1093bd4a8e26e4020e4566df2b895a2a1a5f06aab837dc7f5bdad40918726a2e5799e81f46056278627bffe973d472e1", 0xbe}, {&(0x7f00000018c0)="03cdf403710d13ca97de435cd033413b36e5b84e3d59e39725aa45fd6c3d9a1adf302772dad4733569a3588f212f3f9ba5ce112b0b2663bcdd381e00b9b595d189aad5e41cc0a1f9fba4fc2b0a877e6492b1bca2debba610e627f385cd941324558ca8acebeda13955f1fe17054ca2005482814483d1e3b2980c32d96b191eab695102438c1415ce34345851eb3258926a0d55e49c4b1d28cec2cdaa985caee87a82bf8378c54d0dd77ef8c7122052f5b8bc3a7fdb8627b83c330fddf14bed2118e3ed314c1f3bcc91b063ab453dad7d62db6b24d38d3f82ab364c94b4401320b614578487dee5f4f00032", 0xeb}, {&(0x7f00000019c0)="50baf25d38b9852db6a1e4f67097541898bf63cfdc60b9cb3fc407c1a8e8ac6ccba2935818064be81f07294fd8aeedf149178a17a5b0b15c11c1793b231435a96dcc1d956ad16e562ca5dda4e41e541e2606fe26c518bfecbfac94d97d63b1c0f7c67d2f1a5a", 0x66}], 0x3, 0x2) r5 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="1e005500", @ANYRES16=r6, @ANYRES16=r6], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x2000c000) gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="251632237281c7a83865e42df92cc7dc04559b938e506da2dc444205fad0f87479fdc491b555aac71679ce95e34aa6393d9e2b31d88368dbc499c83a01f52db6300920aa340afd3e762547e992f0ae3b3936efcf7862e1b58cf7605871a939e1b7a0f4a47ae4b8e6e368ea10b0ab5b2d31cac1d21559e40da81d6b7b26294e18e9d2c4199494085d416ac2ad53ea3dfca7fdb495e0", @ANYRES16=r6, @ANYRES8=r8, @ANYRESHEX=r7, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008c0004000000"], 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) userfaultfd(0x800) 33.366012036s ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 33.238242715s ago: executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b347fe68e9083d419f13de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300), 0x16) dup3(r2, r0, 0x0) sendfile(r2, r1, 0x0, 0x8038) sendfile(r0, r1, 0x0, 0xef84) 33.235855616s ago: executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r0, 0x8000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0xfea7) ftruncate(r1, 0xf88) 32.872433322s ago: executing program 2: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="28fcd10a872fce", 0x7, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.730761524s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r3, r2, 0x2, 0x0, 0x4000}, 0x10) 32.62378636s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0046686, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 32.592146356s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8f}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r2, 0x0, 0x0) recvmsg(r1, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) 31.813149826s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) 31.659298329s ago: executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) lseek(r0, 0x1c, 0x0) 31.620462185s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.343988508s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, r0, 0x24, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 31.228951796s ago: executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000500), 0x3, 0x434, &(0x7f0000000940)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x2, 0x0, 0x52, 0x401, r1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r3, 0xcb0d271aa640d665, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x9) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0xb, 0xe2, [@empty, @empty]}, @timestamp={0x44, 0x14, 0x8, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000040)=0xcbc, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x3ff}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x100}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x2}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5cfd}]}, 0x4c}}, 0x0) 30.762243778s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b00800008000300", @ANYRES32=r2, @ANYBLOB="20005080050002000000000009000100e59e75e84c0000000800070001"], 0x3c}}, 0x0) 30.066240236s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.021531183s ago: executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x12b}]]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$TCGETS2(r5, 0x541b, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x64, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x64}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r12, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r13, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x18, 0xa01, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 1.605361322s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x6) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000440)="b5", 0x1}], 0x1, 0x0) 1.208557063s ago: executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) accept4$unix(r2, 0xfffffffffffffffe, &(0x7f00000000c0), 0x0) 744.045395ms ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18}, 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2, 0x200000000}, 0x18) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x541b, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x0, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 0s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): ent! [ 189.699549][ T7429] Cannot create hsr debugfs directory [ 189.823558][ T5453] Bluetooth: hci4: command 0x040f tx timeout [ 189.854935][ T7452] loop4: detected capacity change from 0 to 2048 [ 189.899686][ T7452] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 189.936578][ T7363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.943610][ T7452] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 189.956261][ T7452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.985102][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.997562][ T7375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.008616][ T7363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.034202][ T7429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.062715][ T7375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.073555][ T7363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.095941][ T7375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.130443][ T3659] device hsr_slave_0 left promiscuous mode [ 190.140614][ T3659] device hsr_slave_1 left promiscuous mode [ 190.157943][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.174020][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.177515][ T7457] loop4: detected capacity change from 0 to 8192 [ 190.188791][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.197756][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.206146][ T3659] device bridge_slave_1 left promiscuous mode [ 190.212429][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.224586][ T5923] Bluetooth: hci2: command 0x0419 tx timeout [ 190.233029][ T7457] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 190.233621][ T3659] device bridge_slave_0 left promiscuous mode [ 190.242510][ T7457] REISERFS (device loop4): using ordered data mode [ 190.242528][ T7457] reiserfs: using flush barriers [ 190.244149][ T7457] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.258236][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.261048][ T7457] REISERFS (device loop4): checking transaction log (loop4) [ 190.295843][ T7457] REISERFS warning: reiserfs-5081 is_leaf: nr_item seems wrong: level=1, nr_items=65282, free_space=3 rdkey [ 190.307934][ T3659] device hsr_slave_0 left promiscuous mode [ 190.316204][ T3659] device hsr_slave_1 left promiscuous mode [ 190.317420][ T7457] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 190.333161][ T7457] REISERFS (device loop4): Remounting filesystem read-only [ 190.340388][ T7457] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 190.354266][ T7457] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 190.355964][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.372083][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.381811][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.389580][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.399747][ T3659] device bridge_slave_1 left promiscuous mode [ 190.406058][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.415230][ T3659] device bridge_slave_0 left promiscuous mode [ 190.421458][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.437018][ T3659] device hsr_slave_0 left promiscuous mode [ 190.446516][ T3659] device hsr_slave_1 left promiscuous mode [ 190.453535][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.460944][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.469673][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.477502][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.500561][ T3659] device bridge_slave_1 left promiscuous mode [ 190.506869][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.519977][ T3659] device bridge_slave_0 left promiscuous mode [ 190.526541][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.547854][ T5453] Bluetooth: hci0: command 0x040f tx timeout [ 190.554732][ T3659] device veth1_macvtap left promiscuous mode [ 190.560775][ T3659] device veth0_macvtap left promiscuous mode [ 190.567110][ T3659] device veth1_vlan left promiscuous mode [ 190.573008][ T3659] device veth0_vlan left promiscuous mode [ 190.580597][ T3659] device veth1_macvtap left promiscuous mode [ 190.586792][ T3659] device veth0_macvtap left promiscuous mode [ 190.595161][ T3659] device veth1_vlan left promiscuous mode [ 190.600954][ T3659] device veth0_vlan left promiscuous mode [ 190.609957][ T3659] device veth1_macvtap left promiscuous mode [ 190.616456][ T3659] device veth0_macvtap left promiscuous mode [ 190.622517][ T3659] device veth1_vlan left promiscuous mode [ 190.628422][ T3659] device veth0_vlan left promiscuous mode [ 190.702706][ T5453] Bluetooth: hci1: command 0x041b tx timeout [ 190.933064][ T7462] loop4: detected capacity change from 0 to 40427 [ 191.001562][ T7462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 191.043197][ T7462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 191.066486][ T7462] F2FS-fs (loop4): access invalid blkaddr:2048 [ 191.076382][ T7462] CPU: 1 PID: 7462 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 191.084897][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 191.094954][ T7462] Call Trace: [ 191.098230][ T7462] [ 191.101153][ T7462] dump_stack_lvl+0x1e3/0x2d0 [ 191.105826][ T7462] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 191.111454][ T7462] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 191.117247][ T7462] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 191.122616][ T7462] f2fs_map_blocks+0x159a/0x3720 [ 191.127587][ T7462] ? f2fs_force_buffered_io+0x630/0x630 [ 191.133166][ T7462] ? unlock_page+0x188/0x200 [ 191.137983][ T7462] f2fs_mpage_readpages+0xe98/0x27c0 [ 191.143316][ T7462] ? dquot_release_reservation_block+0x90/0x90 [ 191.149496][ T7462] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 191.155649][ T7462] ? f2fs_readahead+0x16e/0x310 [ 191.160508][ T7462] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 191.166230][ T7462] read_pages+0x159/0x8e0 [ 191.170831][ T7462] ? page_cache_ra_unbounded+0x930/0x930 [ 191.176452][ T7462] ? add_to_page_cache_locked+0x40/0x40 [ 191.182018][ T7462] ? down_read+0x1b3/0x2e0 [ 191.186431][ T7462] page_cache_ra_unbounded+0x7b0/0x930 [ 191.191909][ T7462] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 191.198410][ T7462] ? blk_cgroup_congested+0x30c/0x390 [ 191.203776][ T7462] f2fs_readdir+0x546/0xef0 [ 191.208301][ T7462] ? f2fs_fill_dentries+0xd60/0xd60 [ 191.213506][ T7462] ? f2fs_fill_dentries+0xd60/0xd60 [ 191.218795][ T7462] ? iterate_dir+0x10a/0x570 [ 191.223372][ T7462] ? fsnotify_perm+0x438/0x5a0 [ 191.228141][ T7462] iterate_dir+0x224/0x570 [ 191.233327][ T7462] ? f2fs_fill_dentries+0xd60/0xd60 [ 191.238870][ T7462] __se_sys_getdents64+0x209/0x4f0 [ 191.244032][ T7462] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 191.250164][ T7462] ? __x64_sys_getdents64+0x80/0x80 [ 191.255368][ T7462] ? filldir+0x720/0x720 [ 191.259669][ T7462] ? syscall_enter_from_user_mode+0x2e/0x240 [ 191.265645][ T7462] ? lockdep_hardirqs_on+0x94/0x130 [ 191.270862][ T7462] ? syscall_enter_from_user_mode+0x2e/0x240 [ 191.276850][ T7462] do_syscall_64+0x3b/0xb0 [ 191.281357][ T7462] ? clear_bhb_loop+0x15/0x70 [ 191.286019][ T7462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.291914][ T7462] RIP: 0033:0x7f5414e6fea9 [ 191.296317][ T7462] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 191.315928][ T7462] RSP: 002b:00007f54139e90c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 191.324436][ T7462] RAX: ffffffffffffffda RBX: 00007f5414fa6f80 RCX: 00007f5414e6fea9 [ 191.333323][ T7462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 191.342860][ T7462] RBP: 00007f5414edeff4 R08: 0000000000000000 R09: 0000000000000000 [ 191.350856][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.358834][ T7462] R13: 000000000000000b R14: 00007f5414fa6f80 R15: 00007ffe9ae774b8 [ 191.366812][ T7462] [ 191.373302][ T7462] attempt to access beyond end of device [ 191.373302][ T7462] loop4: rw=524288, want=45072, limit=40427 [ 191.384878][ T7462] attempt to access beyond end of device [ 191.384878][ T7462] loop4: rw=0, want=45072, limit=40427 [ 191.427753][ T6999] attempt to access beyond end of device [ 191.427753][ T6999] loop4: rw=2049, want=45104, limit=40427 [ 191.606899][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 191.646628][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 191.674683][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.697618][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.776182][ T3659] bond0 (unregistering): Released all slaves [ 191.892654][ T5365] Bluetooth: hci4: command 0x0419 tx timeout [ 191.947963][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 191.965694][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 191.983244][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.998265][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.066372][ T3659] bond0 (unregistering): Released all slaves [ 192.212096][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 192.227479][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 192.244060][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.260286][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.325006][ T3659] bond0 (unregistering): Released all slaves [ 192.379379][ T7363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.390228][ T7375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.410149][ T7329] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.440983][ T7429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.468436][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.477022][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.502775][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.511663][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.520411][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.527587][ T5796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.577882][ T7429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.600402][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.613112][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.718417][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.727218][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.736279][ T5365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.744126][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.753324][ T5365] Bluetooth: hci0: command 0x0419 tx timeout [ 192.772707][ T3567] Bluetooth: hci1: command 0x040f tx timeout [ 192.793042][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.812917][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.733471][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.744820][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.769788][ T7429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.819488][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.820114][ T7479] rtc_cmos 00:00: Alarms can be up to one day in the future [ 193.829924][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.852735][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.861250][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.870557][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.879139][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.888977][ T7329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.984287][ T7363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.015441][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.060923][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.080973][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.089762][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.111101][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.120195][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.128775][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.135876][ T4863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.144248][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.153748][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.162157][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.169213][ T4863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.177379][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.202732][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.218037][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.224797][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.233101][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.243695][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.254139][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.263224][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.271711][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.280191][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.288478][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.307199][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.324245][ T7329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.332858][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.342101][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.350383][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.358183][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.366251][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.392839][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.411925][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.422509][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.429628][ T5365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.441096][ T7375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.455813][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.493270][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.502207][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.510867][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.519328][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.529134][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.539401][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.546526][ T5365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.556052][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.564966][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.574047][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.583841][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.592447][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.601285][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.642892][ T7429] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.653348][ T7429] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.696215][ T7429] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.715034][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.723622][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.732941][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.744304][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.753457][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.761858][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.770418][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.780059][ T7363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.800314][ T7429] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.863143][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.863581][ T3568] Bluetooth: hci1: command 0x0419 tx timeout [ 194.893597][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.901911][ T7329] device veth0_vlan entered promiscuous mode [ 194.918525][ T7329] device veth1_vlan entered promiscuous mode [ 194.969769][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.986064][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.996489][ T26] audit: type=1804 audit(1718244356.255:1872): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir19503383/syzkaller.kTE4Tr/38/file1" dev="sda1" ino=1940 res=1 errno=0 [ 194.997665][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.078559][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.120593][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.131520][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.158622][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.200205][ T7329] device veth0_macvtap entered promiscuous mode [ 195.213326][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.221785][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.236124][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.259618][ T7329] device veth1_macvtap entered promiscuous mode [ 195.296149][ T7363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.343515][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.351872][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.360767][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.369976][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.377539][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.388851][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.442964][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.451518][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.462020][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.475103][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.486570][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.496920][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.507623][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.522715][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.537884][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.545599][ T7363] device veth0_vlan entered promiscuous mode [ 195.561067][ T7375] device veth0_vlan entered promiscuous mode [ 195.569928][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.583868][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.592454][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.600915][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.616521][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.635290][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.646235][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.667220][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.674328][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.681919][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.689986][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.698716][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.707225][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.715070][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.726045][ T7329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.746626][ T7329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.758685][ T7329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.767504][ T7329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.778831][ T7375] device veth1_vlan entered promiscuous mode [ 195.789897][ T7363] device veth1_vlan entered promiscuous mode [ 195.808385][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.822999][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.832278][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.843420][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.851934][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.859111][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.895036][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.903696][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.911767][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.919898][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.928685][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.942712][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.949789][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.958285][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.967144][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.976115][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.985807][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.994079][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.002951][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.011459][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.020885][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.045899][ T7429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.065291][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.088565][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.104101][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.117214][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.144865][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.159664][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.183417][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.225856][ T7363] device veth0_macvtap entered promiscuous mode [ 196.290206][ T7375] device veth0_macvtap entered promiscuous mode [ 196.302464][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.323278][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.331778][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.380245][ T7363] device veth1_macvtap entered promiscuous mode [ 196.395805][ T7375] device veth1_macvtap entered promiscuous mode [ 196.430337][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.450436][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.479934][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.499997][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.522903][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.552893][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.583134][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.603983][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.639376][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.669924][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.690214][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.732729][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.752740][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.772987][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.792874][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.813239][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.834606][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.847427][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.857772][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.892645][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.903094][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.917909][ T7513] loop4: detected capacity change from 0 to 32768 [ 196.925531][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.948548][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.961471][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.983496][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.991910][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.023610][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.034565][ T7513] XFS (loop4): Mounting V5 Filesystem [ 197.043253][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.051780][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.087692][ T7363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.097220][ T7363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.106120][ T7363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.115260][ T7363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.139997][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.162893][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.164855][ T7513] XFS (loop4): Ending clean mount [ 197.173178][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.188922][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.212802][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.223398][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.236999][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.255041][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.264007][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.264973][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.291077][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.299214][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.312261][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.321966][ T7375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.323007][ T3568] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 197.346389][ T3568] XFS (loop4): Unmount and run xfs_repair [ 197.352133][ T3568] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 197.356953][ T7375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.359550][ T3568] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 197.377078][ T3568] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 197.385952][ T3568] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 197.387734][ T7375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.395036][ T3568] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 197.416507][ T3568] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 197.425439][ T3568] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 197.434355][ T3568] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 197.443964][ T7375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.444635][ T3568] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 197.466793][ T7513] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74 [ 197.486792][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.497021][ T7524] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 197.509874][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.517858][ T7524] XFS (loop4): Unmount and run xfs_repair [ 197.532835][ T7524] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 197.541348][ T7524] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 197.551810][ T7524] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 197.588184][ T7524] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 197.601709][ T7524] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 197.635896][ T7524] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 197.646763][ T7524] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 197.697927][ T7524] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 197.709049][ T7524] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 197.721139][ T7524] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74 [ 197.729840][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.753022][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.757864][ T7524] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 197.778428][ T7524] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 197.805476][ T7429] device veth0_vlan entered promiscuous mode [ 197.815925][ T6999] XFS (loop4): Unmounting Filesystem [ 197.847262][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.866764][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.884985][ T7429] device veth1_vlan entered promiscuous mode [ 197.917941][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.919256][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.926441][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.959565][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.967385][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.017513][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.026035][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.043437][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.056359][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.070183][ T7429] device veth0_macvtap entered promiscuous mode [ 198.086513][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.096054][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.104882][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.113035][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.127408][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.135921][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.161324][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.180267][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.192527][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.194261][ T7429] device veth1_macvtap entered promiscuous mode [ 198.243055][ T5363] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 198.251155][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.269103][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.319342][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.350781][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.371949][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.398876][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.414601][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.435347][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.449376][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.460461][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.471453][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.493366][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.515345][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.537086][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.553904][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.564114][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.582834][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.592985][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.603547][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.614612][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.625849][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.643024][ T5363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.646182][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.659289][ T5363] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.670285][ T7429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.692327][ T7429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.702346][ T7429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.711240][ T7429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.723155][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.742827][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.759063][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.773124][ T5363] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.786330][ T5363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.810917][ T5363] usb 4-1: SerialNumber: syz [ 198.943723][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.962690][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.997894][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.997905][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.037712][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.078833][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.148280][ T5363] usb 4-1: 0:2 : does not exist [ 199.160883][ T7560] loop2: detected capacity change from 0 to 256 [ 199.240118][ T5363] usb 4-1: USB disconnect, device number 4 [ 199.249270][ T7560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 199.574862][ T7551] loop1: detected capacity change from 0 to 32768 [ 200.427840][ T7571] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 200.612408][ T7558] loop0: detected capacity change from 0 to 32768 [ 200.630433][ T7577] loop3: detected capacity change from 0 to 1024 [ 200.643549][ T7551] XFS (loop1): Mounting V5 Filesystem [ 200.784424][ T7551] XFS (loop1): Ending clean mount [ 200.792646][ T7566] loop2: detected capacity change from 0 to 32768 [ 200.798831][ T7558] XFS (loop0): Mounting V5 Filesystem [ 200.811865][ T7551] XFS (loop1): Quotacheck needed: Please wait. [ 200.830816][ T3709] hfsplus: b-tree write err: -5, ino 8 [ 200.847348][ T7566] XFS: attr2 mount option is deprecated. [ 200.874848][ T7551] XFS (loop1): Quotacheck: Done. [ 200.901895][ T7558] XFS (loop0): Ending clean mount [ 200.916829][ T7566] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 201.011916][ T4861] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 201.032329][ T4861] XFS (loop0): Unmount and run xfs_repair [ 201.038588][ T4861] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 201.055123][ T4861] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 201.069574][ T4861] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 201.079192][ T4861] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 201.088190][ T4861] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 201.097803][ T4861] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.106697][ T4861] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.115559][ T4861] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.124445][ T4861] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.137680][ T7558] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74 [ 201.171765][ T1302] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 201.180657][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.195097][ T1302] XFS (loop0): Unmount and run xfs_repair [ 201.200827][ T1302] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 201.216217][ T1302] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 201.237270][ T1302] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 201.249454][ T1302] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 201.267499][ T1302] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 201.287857][ T1302] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.299093][ T1302] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.314796][ T1302] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.325473][ T1302] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.336507][ T7605] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74 [ 201.364636][ T7606] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 201.366541][ T7375] XFS (loop1): Unmounting Filesystem [ 201.381071][ T7606] XFS (loop0): Unmount and run xfs_repair [ 201.396103][ T7606] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 201.398552][ T7566] XFS (loop2): Quotacheck needed: Please wait. [ 201.407734][ T7605] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 201.464154][ T7606] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 201.472712][ T7605] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 201.515410][ T7606] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 201.516934][ T7566] XFS (loop2): Quotacheck: Done. [ 201.528837][ T7606] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 201.546053][ T3659] device hsr_slave_0 left promiscuous mode [ 201.556691][ T3659] device hsr_slave_1 left promiscuous mode [ 201.566729][ T7606] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 201.582209][ T7606] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.593175][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.607967][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.620757][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.634533][ T7429] XFS (loop2): Unmounting Filesystem [ 201.635275][ T7606] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.665407][ T7624] loop4: detected capacity change from 0 to 1024 [ 201.681370][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.682755][ T7606] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.711847][ T3659] device bridge_slave_1 left promiscuous mode [ 201.713787][ T7606] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.719882][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.733380][ T4861] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.803171][ T7624] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000cc1,discard,max_batch_time=0x0000000004000000,block_validity,i_version,bsddf,min_batch_time=0x0000000000000008,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,discard,errors=continue. Quota mode: none. [ 201.858586][ T3659] device bridge_slave_0 left promiscuous mode [ 201.878883][ T7363] XFS (loop0): Unmounting Filesystem [ 201.884629][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.944079][ T3659] device veth1_macvtap left promiscuous mode [ 201.950283][ T3659] device veth0_macvtap left promiscuous mode [ 201.964062][ T3659] device veth1_vlan left promiscuous mode [ 201.970002][ T3659] device veth0_vlan left promiscuous mode [ 202.123456][ T4861] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.141726][ T4861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.156664][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.230054][ T7638] Option ' ' to dns_resolver key: bad/missing value [ 202.242869][ T4861] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.262271][ T4861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.281471][ T4861] usb 4-1: SerialNumber: syz [ 202.324708][ T7641] loop0: detected capacity change from 0 to 4096 [ 202.368410][ T7646] loop2: detected capacity change from 0 to 1024 [ 202.386610][ T7641] NILFS (loop0): invalid segment: Checksum error in segment payload [ 202.395197][ T7641] NILFS (loop0): trying rollback from an earlier position [ 202.421049][ T7641] NILFS (loop0): recovery complete [ 202.431095][ T7647] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.474685][ T144] hfsplus: b-tree write err: -5, ino 8 [ 202.526161][ T7641] overlayfs: upper fs does not support tmpfile. [ 202.545008][ T7641] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 202.553966][ T7641] overlayfs: failed to set xattr on upper [ 202.561206][ T7641] overlayfs: ...falling back to index=off,metacopy=off. [ 202.564736][ T4861] usb 4-1: 0:2 : does not exist [ 202.649387][ T4861] usb 4-1: USB disconnect, device number 5 [ 202.750416][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 202.768732][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 202.784784][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.802308][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.860052][ T3638] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 202.910977][ T3659] bond0 (unregistering): Released all slaves [ 203.001395][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.203017][ T7670] loop3: detected capacity change from 0 to 1024 [ 203.241107][ T3638] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.277495][ T7674] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 203.282718][ T3638] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.374756][ T3709] hfsplus: b-tree write err: -5, ino 8 [ 203.472845][ T3638] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.483422][ T3638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.491419][ T3638] usb 3-1: Product: syz [ 203.499827][ T7678] loop1: detected capacity change from 0 to 128 [ 203.524381][ T3638] usb 3-1: Manufacturer: syz [ 203.546217][ T3638] usb 3-1: SerialNumber: syz [ 203.641533][ T7663] loop0: detected capacity change from 0 to 32768 [ 203.748971][ T7663] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7663) [ 203.804357][ T7685] loop3: detected capacity change from 0 to 4096 [ 203.840834][ T7663] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 203.856467][ T7663] BTRFS info (device loop0): using free space tree [ 203.874057][ T7685] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 203.884201][ T7663] BTRFS info (device loop0): has skinny extents [ 203.900546][ T7681] chnl_net:caif_netlink_parms(): no params data found [ 204.112872][ T7663] BTRFS info (device loop0): enabling ssd optimizations [ 204.180725][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.229283][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.266244][ T7681] device bridge_slave_0 entered promiscuous mode [ 204.291745][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.319982][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.354666][ T7681] device bridge_slave_1 entered promiscuous mode [ 204.360404][ T7722] loop3: detected capacity change from 0 to 256 [ 204.392939][ T5923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.496868][ T3638] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 204.516434][ T3638] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 204.564873][ T3638] cdc_ncm 3-1:1.0: bind() failure [ 204.579901][ T3638] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 204.586828][ T3638] cdc_ncm 3-1:1.1: bind() failure [ 204.601511][ T3638] usb 3-1: USB disconnect, device number 9 [ 204.632879][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.655021][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.744685][ T7724] loop3: detected capacity change from 0 to 1024 [ 204.758020][ T7681] team0: Port device team_slave_0 added [ 204.765260][ T5923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.782603][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.791568][ T7726] loop0: detected capacity change from 0 to 1024 [ 204.811658][ T7681] team0: Port device team_slave_1 added [ 204.839714][ T7726] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 204.873083][ T5923] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.885810][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.894113][ T7726] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 204.907170][ T5923] usb 2-1: SerialNumber: syz [ 204.932303][ T7726] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #12: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=301989902, rec_len=0, size=56 fake=0 [ 204.963973][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.966845][ T4538] hfsplus: b-tree write err: -5, ino 8 [ 204.976793][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.984853][ T7726] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #12: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=301989902, rec_len=0, size=56 fake=0 [ 205.011136][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.077501][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.084894][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.122101][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.139465][ T7732] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 205.250215][ T7681] device hsr_slave_0 entered promiscuous mode [ 205.264125][ T7737] Option ' ' to dns_resolver key: bad/missing value [ 205.272000][ T7681] device hsr_slave_1 entered promiscuous mode [ 205.284659][ T5923] usb 2-1: 0:2 : does not exist [ 205.301903][ T7681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.309345][ T7734] loop2: detected capacity change from 0 to 2048 [ 205.330842][ T7681] Cannot create hsr debugfs directory [ 205.355135][ T5923] usb 2-1: USB disconnect, device number 7 [ 205.404621][ T7734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.581012][ T3568] Bluetooth: hci3: command 0x0409 tx timeout [ 205.669665][ T7743] loop0: detected capacity change from 0 to 512 [ 205.757934][ T7743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.886225][ T7754] loop2: detected capacity change from 0 to 256 [ 205.931919][ T7754] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 205.955792][ T7743] EXT4-fs (loop0): 1 orphan inode deleted [ 205.971815][ T7743] EXT4-fs (loop0): 1 truncate cleaned up [ 205.997386][ T7743] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 206.187429][ T7751] loop3: detected capacity change from 0 to 32768 [ 206.254494][ T7751] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7751) [ 206.323738][ T7751] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 206.342876][ T7751] BTRFS info (device loop3): using free space tree [ 206.349691][ T7751] BTRFS info (device loop3): has skinny extents [ 206.374421][ T5796] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 206.418918][ T7781] loop0: detected capacity change from 0 to 1024 [ 206.425943][ T7751] BTRFS info (device loop3): enabling ssd optimizations [ 206.482135][ T7781] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 206.518742][ T7781] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 206.633460][ T7781] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #12: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=301989902, rec_len=0, size=56 fake=0 [ 206.682065][ T7781] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #12: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=301989902, rec_len=0, size=56 fake=0 [ 206.777170][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.791095][ T5796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.830266][ T7788] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 206.976302][ T7681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.003200][ T5796] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.012285][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.052735][ T5796] usb 2-1: Product: syz [ 207.058019][ T5796] usb 2-1: Manufacturer: syz [ 207.068412][ T5796] usb 2-1: SerialNumber: syz [ 207.102211][ T3659] device hsr_slave_0 left promiscuous mode [ 207.132491][ T3659] device hsr_slave_1 left promiscuous mode [ 207.146095][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.160043][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.167635][ T7805] loop0: detected capacity change from 0 to 256 [ 207.187001][ T3659] device bridge_slave_1 left promiscuous mode [ 207.193880][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.202293][ T3659] device bridge_slave_0 left promiscuous mode [ 207.208733][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.419274][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 207.459637][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 207.478016][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 207.484788][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.520501][ T7811] loop3: detected capacity change from 0 to 512 [ 207.546290][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.578091][ T7818] loop0: detected capacity change from 0 to 16 [ 207.588384][ T7811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.647020][ T7818] erofs: (device loop0): mounted with root inode @ nid 36. [ 207.660956][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 207.663379][ T7811] EXT4-fs (loop3): 1 orphan inode deleted [ 207.675578][ T7810] loop2: detected capacity change from 0 to 32768 [ 207.691817][ T3659] bond0 (unregistering): Released all slaves [ 207.702103][ T7811] EXT4-fs (loop3): 1 truncate cleaned up [ 207.711784][ T7811] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 207.775429][ T7810] XFS (loop2): Mounting V5 Filesystem [ 207.809531][ T7681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.820230][ T7681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.830493][ T7681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.852377][ T7830] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 207.910674][ T7810] XFS (loop2): Ending clean mount [ 207.940860][ T7810] XFS (loop2): Quotacheck needed: Please wait. [ 207.975902][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.998724][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.018225][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.052866][ T5796] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 208.063262][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.098105][ T5796] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 208.113670][ T7810] XFS (loop2): Quotacheck: Done. [ 208.116123][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.141096][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.156859][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.163968][ T5365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.171839][ T5796] cdc_ncm 2-1:1.0: bind() failure [ 208.185490][ T5796] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 208.196763][ T5796] cdc_ncm 2-1:1.1: bind() failure [ 208.239162][ T5796] usb 2-1: USB disconnect, device number 8 [ 208.275802][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.277780][ T7429] XFS (loop2): Unmounting Filesystem [ 208.284517][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.300394][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.308965][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.316041][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.324459][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.344355][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.360888][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.371360][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.388117][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.418288][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.430635][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.464643][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.483559][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.527322][ T7681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.550757][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.572766][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.589694][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.816424][ T7850] loop1: detected capacity change from 0 to 256 [ 208.928270][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.951032][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.996403][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.210689][ T7870] loop0: detected capacity change from 0 to 128 [ 209.251024][ T7874] loop3: detected capacity change from 0 to 1024 [ 209.269571][ T7867] loop1: detected capacity change from 0 to 2048 [ 209.292958][ T7870] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 209.293775][ T7873] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 209.370739][ T7363] sysv_free_block: flc_count > flc_size [ 209.401300][ T7867] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.425624][ T7363] sysv_free_block: flc_count > flc_size [ 209.437459][ T7363] sysv_free_block: flc_count > flc_size [ 209.447229][ T7363] sysv_free_block: flc_count > flc_size [ 209.456550][ T7363] sysv_free_block: flc_count > flc_size [ 209.476121][ T7363] sysv_free_block: flc_count > flc_size [ 209.476272][ T144] hfsplus: b-tree write err: -5, ino 8 [ 209.481693][ T7363] sysv_free_block: flc_count > flc_size [ 209.528397][ T7363] sysv_free_block: flc_count > flc_size [ 209.532009][ T7879] loop2: detected capacity change from 0 to 512 [ 209.566735][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.586369][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.604353][ T7363] sysv_free_block: flc_count > flc_size [ 209.621101][ T7363] sysv_free_block: flc_count > flc_size [ 209.628669][ T7881] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 209.649667][ T7879] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz-executor.2: bad orphan inode 17 [ 209.668171][ T7879] ext4_test_bit(bit=16, block=4) = 1 [ 209.674099][ T7879] is_bad_inode(inode)=0 [ 209.680344][ T7879] NEXT_ORPHAN(inode)=0 [ 209.681284][ T7363] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 209.691577][ T7879] max_ino=32 [ 209.695429][ T7879] i_nlink=1 [ 209.698586][ T7879] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.725843][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.743383][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.793218][ T7681] device veth0_vlan entered promiscuous mode [ 209.801422][ T3567] Bluetooth: hci3: command 0x040f tx timeout [ 209.834778][ T7681] device veth1_vlan entered promiscuous mode [ 209.842193][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.867730][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.885946][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.007649][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.078633][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.089130][ T7429] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2971845556/syzkaller.P41sFH/20/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 210.124503][ T7681] device veth0_macvtap entered promiscuous mode [ 210.172847][ T7429] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 210.174853][ T7681] device veth1_macvtap entered promiscuous mode [ 210.204359][ T7429] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 7: invalid block bitmap [ 210.260529][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.280379][ T7429] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 210.287658][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.325111][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.360534][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.373992][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.388448][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.401464][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.415418][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.432160][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.452187][ T7429] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2971845556/syzkaller.P41sFH/20/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 210.488969][ T7904] loop0: detected capacity change from 0 to 1024 [ 210.504448][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.514090][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.522294][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.536959][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.547303][ T7429] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2971845556/syzkaller.P41sFH/20/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 210.550127][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.593041][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.603541][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.615356][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.625448][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.636192][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.646189][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.657121][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.667862][ T7429] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2971845556/syzkaller.P41sFH/20/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 210.697579][ T7904] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 210.712091][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.721578][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.741037][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.750585][ T7429] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2971845556/syzkaller.P41sFH/20/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 210.783056][ T7904] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 210.795998][ T7681] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.827971][ T7904] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #12: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=301989902, rec_len=0, size=56 fake=0 [ 210.864279][ T7904] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #12: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=301989902, rec_len=0, size=56 fake=0 [ 210.901169][ T7902] loop1: detected capacity change from 0 to 32768 [ 210.902742][ T7681] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.918867][ T7429] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2971845556/syzkaller.P41sFH/20/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 210.982800][ T7681] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.991859][ T7681] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.993465][ T7429] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2971845556/syzkaller.P41sFH/20/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 211.062381][ T7429] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2971845556/syzkaller.P41sFH/20/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 211.086056][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.134398][ T7915] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 211.203511][ T7902] XFS (loop1): Mounting V5 Filesystem [ 211.283862][ T3709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.313235][ T3709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.330135][ T7902] XFS (loop1): Ending clean mount [ 211.346220][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.365294][ T7375] XFS (loop1): Unmounting Filesystem [ 211.429890][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.483610][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.518799][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.570937][ T7930] loop3: detected capacity change from 0 to 512 [ 211.648859][ T7930] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz-executor.3: bad orphan inode 17 [ 211.653760][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 211.674403][ T7930] ext4_test_bit(bit=16, block=4) = 1 [ 211.679718][ T7930] is_bad_inode(inode)=0 [ 211.703768][ T7939] loop0: detected capacity change from 0 to 128 [ 211.722790][ T7930] NEXT_ORPHAN(inode)=0 [ 211.727338][ T7930] max_ino=32 [ 211.730742][ T7930] i_nlink=1 [ 211.734363][ T7930] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.890286][ T7329] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1747019578/syzkaller.W37ThQ/42/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 211.923927][ T5796] Bluetooth: hci3: command 0x0419 tx timeout [ 211.971684][ T7329] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz-executor.3: bg 0: block 7: invalid block bitmap [ 212.029446][ T7329] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 212.081822][ T7956] loop0: detected capacity change from 0 to 16 [ 212.104655][ T7329] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1747019578/syzkaller.W37ThQ/42/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 212.147132][ T7956] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.183482][ T7329] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1747019578/syzkaller.W37ThQ/42/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 212.248898][ T7329] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1747019578/syzkaller.W37ThQ/42/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 212.320812][ T7329] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1747019578/syzkaller.W37ThQ/42/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 212.390244][ T7329] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1747019578/syzkaller.W37ThQ/42/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 212.421084][ T7329] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1747019578/syzkaller.W37ThQ/42/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 212.452329][ T7329] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1747019578/syzkaller.W37ThQ/42/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 212.597283][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 212.656673][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.706169][ T7974] loop0: detected capacity change from 0 to 128 [ 212.737474][ T26] audit: type=1804 audit(1718244373.995:1873): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1925012199/syzkaller.2IIdaf/28/file1" dev="sda1" ino=1964 res=1 errno=0 [ 212.799159][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.891792][ T7979] loop1: detected capacity change from 0 to 128 [ 212.930977][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.945405][ T7952] loop4: detected capacity change from 0 to 32768 [ 213.002367][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.015778][ T7952] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 213.028603][ T7952] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 213.265931][ T7952] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 213.285206][ T5363] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 213.299870][ T5363] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 214.321568][ T5363] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1021ms [ 214.351424][ T5363] gfs2: fsid=syz:syz.0: jid=0: Done [ 214.380230][ T7952] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 214.430188][ T7982] chnl_net:caif_netlink_parms(): no params data found [ 214.612743][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.622430][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.646331][ T7982] device bridge_slave_0 entered promiscuous mode [ 214.667575][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.736148][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.773903][ T7982] device bridge_slave_1 entered promiscuous mode [ 214.859770][ T7982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.890950][ T7982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.992721][ T5452] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 215.057623][ T7982] team0: Port device team_slave_0 added [ 215.068759][ T7982] team0: Port device team_slave_1 added [ 215.092307][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.099674][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.151094][ T7982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.162060][ T8014] loop1: detected capacity change from 0 to 32768 [ 215.173023][ T5363] Bluetooth: hci1: command 0x0409 tx timeout [ 215.189098][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.198702][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.224752][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.231834][ T7982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.286650][ T8014] XFS (loop1): Mounting V5 Filesystem [ 215.393109][ T7982] device hsr_slave_0 entered promiscuous mode [ 215.408193][ T7982] device hsr_slave_1 entered promiscuous mode [ 215.423194][ T5452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.440237][ T5452] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.449871][ T5452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.461644][ T5452] usb 1-1: config 0 descriptor?? [ 215.489283][ T8033] loop4: detected capacity change from 0 to 2048 [ 215.560992][ T8014] XFS (loop1): Ending clean mount [ 215.587619][ T8033] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.618177][ T7375] XFS (loop1): Unmounting Filesystem [ 215.625401][ T144] device hsr_slave_0 left promiscuous mode [ 215.632428][ T144] device hsr_slave_1 left promiscuous mode [ 215.640863][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.648624][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.663411][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.670927][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.680333][ T144] device bridge_slave_1 left promiscuous mode [ 215.686732][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.704876][ T144] device bridge_slave_0 left promiscuous mode [ 215.711551][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.731429][ T144] device veth1_macvtap left promiscuous mode [ 215.739621][ T144] device veth0_macvtap left promiscuous mode [ 215.746165][ T144] device veth1_vlan left promiscuous mode [ 215.752071][ T144] device veth0_vlan left promiscuous mode [ 215.935683][ T5452] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 215.960333][ T5452] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input10 [ 216.009752][ T144] team0 (unregistering): Port device team_slave_1 removed [ 216.030313][ T144] team0 (unregistering): Port device team_slave_0 removed [ 216.046393][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.062304][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.075806][ T5452] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 216.122563][ T8043] loop1: detected capacity change from 0 to 128 [ 216.169417][ T144] bond0 (unregistering): Released all slaves [ 216.188066][ T8043] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 216.208359][ T7375] sysv_free_block: flc_count > flc_size [ 216.214361][ T7375] sysv_free_block: flc_count > flc_size [ 216.220437][ T7375] sysv_free_block: flc_count > flc_size [ 216.226064][ T7375] sysv_free_block: flc_count > flc_size [ 216.257359][ T7375] sysv_free_block: flc_count > flc_size [ 216.258528][ T8033] team0: Device ipvlan0 failed to register rx_handler [ 216.263031][ T7375] sysv_free_block: flc_count > flc_size [ 216.263043][ T7375] sysv_free_block: flc_count > flc_size [ 216.266272][ T7375] sysv_free_block: flc_count > flc_size [ 216.291131][ T7375] sysv_free_block: flc_count > flc_size [ 216.299183][ T7375] sysv_free_block: flc_count > flc_size [ 216.311211][ T7375] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 216.414167][ T8017] chnl_net:caif_netlink_parms(): no params data found [ 216.505950][ T8055] udc-core: couldn't find an available UDC or it's busy [ 216.542618][ T8055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 216.560414][ T8055] udc-core: couldn't find an available UDC or it's busy [ 216.567530][ T8055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 216.616250][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.624910][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.645963][ T8017] device bridge_slave_0 entered promiscuous mode [ 216.664720][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.671810][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.691585][ T5452] usb 1-1: USB disconnect, device number 6 [ 216.756790][ T8017] device bridge_slave_1 entered promiscuous mode [ 216.891536][ T8017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.916320][ T8064] loop1: detected capacity change from 0 to 64 [ 216.927783][ T8017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.991637][ T8017] team0: Port device team_slave_0 added [ 217.025167][ T5452] Bluetooth: hci2: command 0x0409 tx timeout [ 217.045030][ T8017] team0: Port device team_slave_1 added [ 217.192226][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.211327][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.238710][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.253095][ T5641] Bluetooth: hci1: command 0x041b tx timeout [ 217.280233][ T8017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.354198][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.361500][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.387396][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.394423][ T8017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.457285][ T8069] loop1: detected capacity change from 0 to 1764 [ 217.481137][ T7982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.545268][ T7982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.564097][ T7982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.571136][ T8069] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 217.582880][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 217.595991][ T8017] device hsr_slave_0 entered promiscuous mode [ 217.629613][ T8017] device hsr_slave_1 entered promiscuous mode [ 217.646617][ T8017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.658725][ T8017] Cannot create hsr debugfs directory [ 217.667739][ T7982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.984815][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.991908][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.003661][ T8061] device bridge_slave_0 entered promiscuous mode [ 218.033866][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.041327][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.083620][ T8061] device bridge_slave_1 entered promiscuous mode [ 218.153569][ T8071] loop0: detected capacity change from 0 to 32768 [ 218.167851][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.214346][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.263238][ T8017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.326785][ T8061] team0: Port device team_slave_0 added [ 218.341896][ T8071] XFS (loop0): Mounting V5 Filesystem [ 218.349262][ T8061] team0: Port device team_slave_1 added [ 218.352115][ T8102] loop1: detected capacity change from 0 to 1764 [ 218.410053][ T8017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.426526][ T8071] XFS (loop0): Ending clean mount [ 218.453757][ T8102] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 218.479098][ T7363] XFS (loop0): Unmounting Filesystem [ 218.502309][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.510001][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.632964][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.674860][ T8017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.725015][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.749780][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.775696][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.782478][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.801000][ T7982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.852751][ T4861] Bluetooth: hci3: command 0x0409 tx timeout [ 218.878975][ T8017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.907544][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.915742][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.978602][ T8061] device hsr_slave_0 entered promiscuous mode [ 218.985983][ T8061] device hsr_slave_1 entered promiscuous mode [ 218.993101][ T8061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.001469][ T8061] Cannot create hsr debugfs directory [ 219.017743][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.092795][ T5641] Bluetooth: hci2: command 0x041b tx timeout [ 219.092923][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.123334][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.142089][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.149217][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.173504][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.183704][ T8119] loop0: detected capacity change from 0 to 4096 [ 219.191241][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.200703][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.207800][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.215726][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.258484][ T8119] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 219.272191][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.281147][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.309936][ T7982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.321322][ T8119] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 219.329433][ T7982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.333081][ T5641] Bluetooth: hci1: command 0x040f tx timeout [ 219.340016][ T8119] ntfs3: loop0: Failed to load $MFT. [ 219.369569][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.383625][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.391932][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.401960][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.410476][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.419100][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.427534][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.439909][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.448476][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.456667][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.501762][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.589277][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.623271][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.630828][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.644571][ T7982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.656052][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.686559][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.696312][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.713684][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.727963][ T7982] device veth0_vlan entered promiscuous mode [ 219.738530][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.747385][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.756306][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.764322][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.778581][ T7982] device veth1_vlan entered promiscuous mode [ 219.814825][ T8017] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.848589][ T8017] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.875511][ T8017] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.896160][ T7982] device veth0_macvtap entered promiscuous mode [ 219.911922][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.920591][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.928817][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.938321][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.949561][ T8017] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.988299][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.001098][ T7982] device veth1_macvtap entered promiscuous mode [ 220.048007][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.060781][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.077333][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.089160][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.103168][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.119914][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.130778][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.141845][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.154251][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.175324][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.186624][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.195776][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.208717][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.221518][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.235741][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.247238][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.259089][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.269749][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.284036][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.295682][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.313800][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.349007][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.357927][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.374783][ T7982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.397202][ T7982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.406524][ T7982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.415714][ T7982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.493131][ T8017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.508513][ T8131] loop0: detected capacity change from 0 to 32768 [ 220.564143][ T8017] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.578053][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.588109][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.601975][ T8131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8131) [ 220.617763][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.627967][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.644018][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.651106][ T5451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.669094][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.677740][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.686683][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.693775][ T5451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.701525][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.710108][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.721112][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.738383][ T8131] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 220.767315][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.772876][ T8131] BTRFS info (device loop0): using free space tree [ 220.782385][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.788541][ T8139] loop1: detected capacity change from 0 to 512 [ 220.792913][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.802774][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.805854][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.821453][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.822586][ T8131] BTRFS info (device loop0): has skinny extents [ 220.830118][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.850126][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.878508][ T8139] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.902257][ T8017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.918190][ T8131] BTRFS info (device loop0): enabling ssd optimizations [ 220.919852][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.932943][ T5641] Bluetooth: hci3: command 0x041b tx timeout [ 220.981725][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.998450][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.010578][ T8139] EXT4-fs (loop1): 1 orphan inode deleted [ 221.022160][ T8139] EXT4-fs (loop1): 1 truncate cleaned up [ 221.031298][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.045810][ T8139] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 221.076065][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.138058][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.172660][ T5641] Bluetooth: hci2: command 0x040f tx timeout [ 221.553409][ T26] audit: type=1800 audit(1718244382.775:1874): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=258 res=0 errno=0 [ 221.596465][ T5641] Bluetooth: hci1: command 0x0419 tx timeout [ 221.611783][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.647876][ T8061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.817539][ T8061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.877193][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.906288][ T8061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.068487][ T8061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.189906][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.212518][ T8176] loop2: detected capacity change from 0 to 2048 [ 222.239959][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.248425][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.303217][ T8181] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.330620][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.343218][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.344323][ T8176] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.389691][ T8017] device veth0_vlan entered promiscuous mode [ 222.397589][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.406081][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.444119][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.452049][ T8176] ext4 filesystem being mounted at /root/syzkaller-testdir1443561746/syzkaller.NZcu7J/1/file0 supports timestamps until 2038 (0x7fffffff) [ 222.452504][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.511681][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.562685][ T8017] device veth1_vlan entered promiscuous mode [ 222.589211][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.609231][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.629211][ T8176] fs-verity: sha512 using implementation "sha512-avx2" [ 222.642403][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.668291][ T8174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.699420][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.726164][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.735827][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.785073][ T8017] device veth0_macvtap entered promiscuous mode [ 222.820155][ T8017] device veth1_macvtap entered promiscuous mode [ 222.833129][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.841173][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.891853][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.904357][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.938499][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.945643][ T5452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.953190][ T8202] loop0: detected capacity change from 0 to 512 [ 222.992468][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.012848][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.013320][ T8173] Bluetooth: hci3: command 0x040f tx timeout [ 223.029866][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.040496][ T8202] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 223.052809][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.077239][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.092061][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.102470][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.110912][ T8202] EXT4-fs (loop0): 1 orphan inode deleted [ 223.113536][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.118612][ T8202] EXT4-fs (loop0): 1 truncate cleaned up [ 223.118633][ T8202] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 223.128514][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.128531][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.130083][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.185513][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.194347][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.203250][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.211647][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.218817][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.226837][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.235751][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.253044][ T1066] Bluetooth: hci2: command 0x0419 tx timeout [ 223.281983][ T8201] loop2: detected capacity change from 0 to 32768 [ 223.295284][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.306733][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.316796][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.327635][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.338140][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.348814][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.360329][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.389331][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.409737][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.430741][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.453574][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.459425][ T8201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8201) [ 223.471624][ T8017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.499290][ T8017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.510235][ T8017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.519537][ T8017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.532058][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.542458][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.551493][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.566374][ T8201] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 223.584241][ T8201] BTRFS info (device loop2): using free space tree [ 223.590761][ T8201] BTRFS info (device loop2): has skinny extents [ 223.592106][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.639707][ T144] device hsr_slave_0 left promiscuous mode [ 223.647298][ T144] device hsr_slave_1 left promiscuous mode [ 223.677103][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.688979][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.718021][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.725986][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.741127][ T144] device bridge_slave_1 left promiscuous mode [ 223.751303][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.768032][ T144] device bridge_slave_0 left promiscuous mode [ 223.774926][ T8201] BTRFS info (device loop2): enabling ssd optimizations [ 223.775057][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.799343][ T144] device hsr_slave_0 left promiscuous mode [ 223.812029][ T144] device hsr_slave_1 left promiscuous mode [ 223.835714][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.853148][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.873127][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.880947][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.898010][ T144] device bridge_slave_1 left promiscuous mode [ 223.909634][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.922846][ T144] device bridge_slave_0 left promiscuous mode [ 223.929230][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.968851][ T144] device veth1_macvtap left promiscuous mode [ 223.975184][ T144] device veth0_macvtap left promiscuous mode [ 223.981311][ T144] device veth1_vlan left promiscuous mode [ 223.987258][ T144] device veth0_vlan left promiscuous mode [ 223.994961][ T144] device veth1_macvtap left promiscuous mode [ 224.000967][ T144] device veth0_macvtap left promiscuous mode [ 224.007098][ T144] device veth1_vlan left promiscuous mode [ 224.013472][ T144] device veth0_vlan left promiscuous mode [ 224.430001][ T26] audit: type=1800 audit(1718244385.565:1875): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=258 res=0 errno=0 [ 224.978650][ T8235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.092762][ T3637] Bluetooth: hci3: command 0x0419 tx timeout [ 225.107080][ T144] team0 (unregistering): Port device team_slave_1 removed [ 225.123080][ T144] team0 (unregistering): Port device team_slave_0 removed [ 225.135751][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.150927][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.214845][ T144] bond0 (unregistering): Released all slaves [ 225.332745][ T4861] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.345852][ T144] team0 (unregistering): Port device team_slave_1 removed [ 225.358352][ T144] team0 (unregistering): Port device team_slave_0 removed [ 225.370860][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.387028][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.453783][ T144] bond0 (unregistering): Released all slaves [ 225.503183][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.511970][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.520411][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.530302][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.558803][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.566519][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.578167][ T8215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.606149][ T8061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.647742][ T8061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.688695][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.699950][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.722829][ T4861] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.730189][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.746258][ T4861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.748379][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.756929][ T4861] usb 3-1: config 0 descriptor?? [ 225.781843][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.791416][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.806461][ T4861] cp210x 3-1:0.0: cp210x converter detected [ 225.882215][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.894386][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.973450][ T3659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.978827][ T8254] device syz_tun entered promiscuous mode [ 225.992091][ T8254] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 226.006297][ T8247] loop0: detected capacity change from 0 to 4096 [ 226.013093][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.042722][ T3659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.088811][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.114641][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.122097][ T8247] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 226.141038][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.141928][ T8258] loop3: detected capacity change from 0 to 1024 [ 226.159109][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.161682][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.177589][ T8247] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 226.191850][ T8247] ntfs3: loop0: Failed to load $MFT. [ 226.205523][ T8258] hfsplus: unable to parse mount options [ 226.243009][ T4861] usb 3-1: cp210x converter now attached to ttyUSB0 [ 226.335875][ T8258] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 226.468722][ T4860] usb 3-1: USB disconnect, device number 10 [ 226.478185][ T4860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.489961][ T8276] bridge0: port 3(team0) entered blocking state [ 226.498516][ T4860] cp210x 3-1:0.0: device disconnected [ 226.504653][ T8276] bridge0: port 3(team0) entered disabled state [ 226.522700][ T8276] device team0 entered promiscuous mode [ 226.529818][ T8276] device team_slave_0 entered promiscuous mode [ 226.547900][ T8276] device team_slave_1 entered promiscuous mode [ 226.591167][ T8276] bridge0: port 3(team0) entered blocking state [ 226.597692][ T8276] bridge0: port 3(team0) entered forwarding state [ 226.632682][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.648722][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.656994][ T5365] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.713555][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.732250][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.753724][ T8061] device veth0_vlan entered promiscuous mode [ 226.761332][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.771469][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.824968][ T8061] device veth1_vlan entered promiscuous mode [ 226.837568][ T8286] loop3: detected capacity change from 0 to 8192 [ 226.874415][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.884011][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.892150][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.904260][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.916180][ T8286] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 226.931603][ T8061] device veth0_macvtap entered promiscuous mode [ 226.940852][ T8286] REISERFS (device loop3): using ordered data mode [ 226.953707][ T8286] reiserfs: using flush barriers [ 226.954045][ T8061] device veth1_macvtap entered promiscuous mode [ 226.967190][ T8286] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.976091][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.000626][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.010992][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.062973][ T8286] REISERFS (device loop3): checking transaction log (loop3) [ 227.070602][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.081820][ T5365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.112815][ T5365] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.121859][ T5365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.131355][ T8286] REISERFS (device loop3): Using r5 hash to sort names [ 227.142608][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.153007][ T8286] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 227.182601][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.213371][ T5365] usb 2-1: config 0 descriptor?? [ 227.222589][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.268285][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.319558][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.346842][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.363632][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.375012][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.383833][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.428783][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.452763][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.465178][ T8288] loop0: detected capacity change from 0 to 40427 [ 227.474072][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.484896][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.498780][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.514845][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.529015][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.542484][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.571472][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.616271][ T8288] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 227.642689][ T8288] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 227.662992][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.671733][ T8288] F2FS-fs (loop0): invalid crc value [ 227.677073][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.679792][ T8061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.708788][ T8061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.720495][ T8288] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.731515][ T8061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.735036][ T5365] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 227.753567][ T8061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.774044][ T5365] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input11 [ 227.887526][ T8288] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 227.907281][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.915587][ T8288] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 227.923578][ T5365] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 227.936765][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.950452][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.956823][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.975035][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.031813][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.097379][ T26] audit: type=1804 audit(1718244389.355:1876): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1739425483/syzkaller.AlVRGF/61/bus/file0" dev="loop0" ino=455 res=1 errno=0 [ 228.146481][ T26] audit: type=1804 audit(1718244389.395:1877): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1739425483/syzkaller.AlVRGF/61/bus/file0" dev="loop0" ino=455 res=1 errno=0 [ 228.258230][ T3659] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 228.279371][ T3659] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 228.346988][ T8309] udc-core: couldn't find an available UDC or it's busy [ 228.371540][ T8309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.427758][ T8309] udc-core: couldn't find an available UDC or it's busy [ 228.479054][ T8309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.595843][ T4863] usb 2-1: USB disconnect, device number 9 [ 228.685111][ T8317] loop3: detected capacity change from 0 to 512 [ 228.780419][ T8317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.854061][ T8317] EXT4-fs (loop3): 1 truncate cleaned up [ 228.859744][ T8317] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.983021][ T26] audit: type=1326 audit(1718244390.245:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7613c3ea9 code=0x0 [ 230.455433][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 232.532651][ T4860] Bluetooth: hci1: command 0x041b tx timeout [ 234.612618][ T4863] Bluetooth: hci1: command 0x040f tx timeout [ 236.692737][ T4860] Bluetooth: hci1: command 0x0419 tx timeout [ 255.656662][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.663125][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.692613][ T4860] Bluetooth: hci5: command 0x0409 tx timeout [ 260.862757][ T4860] Bluetooth: hci6: command 0x0409 tx timeout [ 261.332799][ T3637] Bluetooth: hci7: command 0x0409 tx timeout [ 262.142659][ T3637] Bluetooth: hci8: command 0x0409 tx timeout [ 262.772684][ T3637] Bluetooth: hci5: command 0x041b tx timeout [ 262.932767][ T3637] Bluetooth: hci6: command 0x041b tx timeout [ 263.412593][ T4860] Bluetooth: hci7: command 0x041b tx timeout [ 264.212634][ T4860] Bluetooth: hci8: command 0x041b tx timeout [ 264.852659][ T4863] Bluetooth: hci5: command 0x040f tx timeout [ 265.012641][ T4863] Bluetooth: hci6: command 0x040f tx timeout [ 265.492644][ T4860] Bluetooth: hci7: command 0x040f tx timeout [ 266.292638][ T4863] Bluetooth: hci8: command 0x040f tx timeout [ 266.932655][ T4860] Bluetooth: hci5: command 0x0419 tx timeout [ 267.092664][ T4860] Bluetooth: hci6: command 0x0419 tx timeout [ 267.572628][ T4860] Bluetooth: hci7: command 0x0419 tx timeout [ 268.372632][ T4863] Bluetooth: hci8: command 0x0419 tx timeout [ 295.252840][ T5796] Bluetooth: hci9: command 0x0409 tx timeout [ 297.332591][ T4860] Bluetooth: hci9: command 0x041b tx timeout [ 299.412650][ T4860] Bluetooth: hci9: command 0x040f tx timeout [ 301.502598][ T4858] Bluetooth: hci9: command 0x0419 tx timeout [ 308.932783][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 308.932919][ T4860] Bluetooth: hci0: command 0x0406 tx timeout [ 317.094571][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.100876][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.972656][ T4863] Bluetooth: hci11: command 0x0409 tx timeout [ 325.978792][ T4863] Bluetooth: hci10: command 0x0409 tx timeout [ 326.382598][ T21] Bluetooth: hci12: command 0x0409 tx timeout [ 327.092645][ T21] Bluetooth: hci13: command 0x0409 tx timeout [ 328.052654][ T4858] Bluetooth: hci10: command 0x041b tx timeout [ 328.062797][ T21] Bluetooth: hci11: command 0x041b tx timeout [ 328.452667][ T4860] Bluetooth: hci12: command 0x041b tx timeout [ 329.172602][ T4863] Bluetooth: hci13: command 0x041b tx timeout [ 330.132660][ T4863] Bluetooth: hci10: command 0x040f tx timeout [ 330.132918][ T21] Bluetooth: hci11: command 0x040f tx timeout [ 330.532635][ T5363] Bluetooth: hci12: command 0x040f tx timeout [ 331.252846][ T5363] Bluetooth: hci13: command 0x040f tx timeout [ 332.212913][ T21] Bluetooth: hci11: command 0x0419 tx timeout [ 332.219148][ T21] Bluetooth: hci10: command 0x0419 tx timeout [ 332.612617][ T21] Bluetooth: hci12: command 0x0419 tx timeout [ 333.332695][ T21] Bluetooth: hci13: command 0x0419 tx timeout [ 339.652647][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 339.652668][ T4860] Bluetooth: hci2: command 0x0406 tx timeout [ 355.012690][ T5363] Bluetooth: hci1: command 0x0406 tx timeout [ 360.372657][ T21] Bluetooth: hci14: command 0x0409 tx timeout [ 362.452611][ T4863] Bluetooth: hci14: command 0x041b tx timeout [ 364.532775][ T4860] Bluetooth: hci14: command 0x040f tx timeout [ 366.612642][ T4858] Bluetooth: hci14: command 0x0419 tx timeout [ 378.534196][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.540761][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.732800][ T4858] Bluetooth: hci5: command 0x0406 tx timeout [ 385.739009][ T4858] Bluetooth: hci8: command 0x0406 tx timeout [ 385.742764][ T5451] Bluetooth: hci6: command 0x0406 tx timeout [ 385.750992][ T5451] Bluetooth: hci7: command 0x0406 tx timeout [ 388.782669][ T27] INFO: task kworker/u4:1:144 blocked for more than 143 seconds. [ 388.790419][ T27] Not tainted 5.15.160-syzkaller #0 [ 388.822635][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/13 02:09:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 388.848501][ T27] task:kworker/u4:1 state:D stack:21080 pid: 144 ppid: 2 flags:0x00004000 [ 388.872512][ T27] Workqueue: netns cleanup_net [ 388.877696][ T27] Call Trace: [ 388.880978][ T27] [ 388.902703][ T27] __schedule+0x12c4/0x45b0 [ 388.907350][ T27] ? release_firmware_map_entry+0x190/0x190 [ 388.922546][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 388.929797][ T27] ? kthread_data+0x4e/0xc0 [ 388.948116][ T27] ? wq_worker_sleeping+0x5d/0x200 [ 388.969113][ T27] schedule+0x11b/0x1f0 [ 388.973366][ T27] schedule_preempt_disabled+0xf/0x20 [ 388.998119][ T27] __mutex_lock_common+0xe34/0x25a0 [ 389.003766][ T27] ? cangw_pernet_exit+0xe/0x20 [ 389.008657][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 389.038895][ T27] ? slab_free_freelist_hook+0xdd/0x160 [ 389.044518][ T27] ? kfree+0xf1/0x270 [ 389.048500][ T27] mutex_lock_nested+0x17/0x20 [ 389.072538][ T27] cangw_pernet_exit+0xe/0x20 [ 389.077245][ T27] cleanup_net+0x6ce/0xb60 [ 389.082028][ T27] ? ops_free_list+0x340/0x340 [