last executing test programs: 26.952602977s ago: executing program 2 (id=561): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESOCT], 0x1, 0x600, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(r0, &(0x7f0000000240), 0xfecc) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) 26.302872029s ago: executing program 2 (id=566): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_remount}]}, 0xfe, 0x492, &(0x7f0000000f00)="$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") mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 25.740162276s ago: executing program 2 (id=571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10d942, 0x0) io_setup(0xff, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)='\x00', 0x1}]) 24.991341116s ago: executing program 2 (id=577): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(0x0, 0x0) chdir(0x0) move_mount(r0, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 24.696801469s ago: executing program 2 (id=580): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='y', 0x1001}], 0x1, 0x8000, 0x0, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) mlock2(&(0x7f0000d09000/0x2000)=nil, 0x2000, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffff7, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x8, 0x0, {{0x1d, 0x4, 0x2, 0xc, 0x74, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x640100ff, {[@noop, @lsrr={0x83, 0xf, 0xe0, [@multicast1, @multicast2, @empty]}, @generic={0x83, 0xe, "7ee4c0c32690b11d4c59afca"}, @lsrr={0x83, 0x7, 0xa, [@private=0xa010100]}, @rr={0x7, 0xf, 0xb3, [@empty, @local, @remote]}, @timestamp={0x44, 0x2c, 0x12, 0x0, 0xa, [0x1, 0x8000, 0x7, 0xd3ab, 0x2, 0x5, 0x5, 0x0, 0x1000, 0x1d85]}]}}}}}) inotify_init1(0x80800) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x5, 0x3}, 0x48) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x2304023, &(0x7f00000001c0)=ANY=[], 0x8, 0x0, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x301ec0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x241, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000018190000", @ANYRES32=r6, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x1d, &(0x7f0000000280)=""/29, 0x41100, 0x2c, '\x00', r7, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x6, 0x5, 0x66ee}, 0x10, 0x0, r0, 0x0, &(0x7f0000000640)=[0x1, r8, r9, r10, r11, r12], 0x0, 0x10, 0x4}, 0x90) pipe(&(0x7f0000000200)) 23.962431049s ago: executing program 2 (id=586): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x2c, r0, 0x301, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x18f8, 0x80}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x0, 0x1, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)}, &(0x7f0000002100)=0xc) socket$inet_dccp(0x2, 0x6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r3 = socket(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)={0xa}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) 8.855231203s ago: executing program 1 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x28}}, 0x0) 7.787565729s ago: executing program 1 (id=650): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff34) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11}, 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x8000, 0x7, 0x1200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20b7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES32=r0], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffda4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc4c85512, &(0x7f0000000000)={0x9, 0x0, 0x49f, 0x0, 'syz1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0xe) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x28000ca, &(0x7f0000000180)=ANY=[@ANYBLOB="756e695f786c61696539302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c646973636172642c6e6f6e756d746169523d302c726f6469722c7574667c38ba4466653d77696e6e383d312c6e66732c73686f72746e616d653d77696e39352c646d61736b3d30303030303030303030303030303030303030303137372c757466383d312c7574663874653d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c00"/196], 0x97, 0x2a9, &(0x7f0000002300)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) 6.783549001s ago: executing program 1 (id=655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) 6.54679236s ago: executing program 1 (id=656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x7e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) 6.42667166s ago: executing program 1 (id=659): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") 5.740149765s ago: executing program 1 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket(0x840000000002, 0x3, 0x100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 4.911323922s ago: executing program 4 (id=669): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0xfdef}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 4.089420099s ago: executing program 0 (id=670): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x0, 0x1}, 0x0) 4.088115299s ago: executing program 4 (id=671): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 3.975874119s ago: executing program 0 (id=672): r0 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x2, @in6=@mcast2, 0x0, 0x4, 0x0, 0x20}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 3.891873885s ago: executing program 0 (id=673): fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0xb, 0x29f, &(0x7f0000000440)="$eJzs3bFu00AYwPHvLm7qkKqYtggJMaBCJcSAaFkQCwjlIZgQ0ASpwipSWwTtQmFGPAA7r8BDMCFegAkmHiATRne+JE4T22mb5Gj4/6SkTnyf/V1s5+6LVFkA/LceNn58vvPLPJRIRSoick9ESyKhSCAiF+VS+Gp7b2svbjWLNlQRE2EeStJINdBGSWtYqImzEU5kXgWyEI6hfygWJvM1t1g9bmySejv+rDBt9uofctFqkXl3ddr1s3JNHvpOwDPVlra8kUXfeQAA/HLjv3bj/IKbCmgtsuaG/Zka/9u+E/AsM/7byitR5viet6t69Z6dDZr1ulMlnmRftrDQ7gTqJlBWVdpcdO35Vty6tfkybmp5L/edTLMV+9xMT90Ol609Wd8Nbnp1SG1a4OR9r9s+zJk+bOTkvzzePZZTX9U39VhF8kma3flfkChzmOyRio4cqTT/2/lbtL2M0lY5vbxgd3K5v8gs6WWYpvHHlZnZVVW3zSCbalSWp41a6vupodO79ZKo5aFRGyVRK0ejumfzT/Myzg+fIPVRPVKr8lu+SCMz/9fmk1yTUa5M08a21HM184mbqzO3ZWBbRtm3Dq8MbalHeAen5r76PsgzuSuLu/sH1adx3NrZ3T94wULxgvsmSia+r2DC3emcC//Ep3raBYlaO+0kSXzn8+CqjHeDZgzx1x2PX1GYmt5B950JPDGzLJXWf/WwN9+38wTzFBXM05P+l4NlVaYCWu/VBpKtDZbs87nedO/m6/RvQW1Qz6/gRq25rt0QuZ55s6QaiVyeM0I15Ls84fd/AAAAAAAAAAAAAAAAAACAs2Ya/07gu48AAAAAAAAAAAAAAAAAAAAAAJx1eff/lUnc/3dz+1j3/+2/eQ6AcfsbAAD//7KJi5s=") setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000000c0)) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000140)={0x2, 0x0, [0x37, 0x0, 0x107, 0x400, 0xffff0002, 0x0, 0x0, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x151b, &(0x7f0000002ac0)="$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") chdir(0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x0, 0xffffffffffffffff) io_uring_setup(0x6641, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x40) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 3.721267728s ago: executing program 4 (id=675): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 3.658229444s ago: executing program 3 (id=677): memfd_create(&(0x7f0000000240)='-B\xd5NI\xc4\xb5 \xe5\v.j\xf4\x8di\x11\xef\x8bl\xc9\x1e\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xff\x03\x00\x00nh#\xcf)\x1e\xc8\xc0\"\x9cc\x10d\xee\xa9\xab\x06\x97kf\xc7\x820\x80T\r\xde\xc58M\xcd\xfb\xcc\x82n=\x7f=\x8b\x1d\xea\xef\xe3\x00\x00\x03\r\x00\x00\x10\x00@\x00\x00\x00\x00\x00\x00\x00\xcbM\x8a_\xbf\xb59Q\x05\x82E\x12p\xcf\x15@o\xac\x17P;\x11\x93\x97\xb6\xdc\xad\x00C\x87\xc1\xbb\xb2>\xa3 #\xd5T\xdd\x8cn<\xd0$$\x9bo\x03\xdb#(\x03\x00\x00\x00\xe3r%/\xca\xb4\xd1x\xd8\xb0uN\xcf\b%\x00\x00\x00\x00\x00\x00\x00\bUO\x9f(\xe4\xda\x1eLj:\x8av\xd4\xe1\xc2ze\x16\asP\xae&yF.\xe8\xf5\xa2\xdf\x86\xa0t\x05~~\x92U\x1e\x87\xdb\xdfg\x9enz\b\xfaw\xfb*[r\x0e\xcb`\xdf\xa1\x16{<)\x9d\x99h\x00\x10\x02\x00'/302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, 0x0, 0x5c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r3 = epoll_create(0x5) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x300, r4, &(0x7f0000000040)={0x32000000}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x7, 0x0, 0x0, 0x80, @tick, {0x4}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x0, 0x7ab4}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x2}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x3}, {0x5, 0x5}}}], 0x70) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x14}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$fuse(&(0x7f00000003c0), 0x0, 0x2304023, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001c40)={0x2020}, 0x205a) 3.030841215s ago: executing program 4 (id=678): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x1000000, 0x3, 0x0, 0x4}) 2.259155497s ago: executing program 4 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0xf3, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x7, "8b7668a21729e4"}, {0xdd, 0xb4, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd528566752ef4090016895d45162f023cde71dbd618a52517986b705c5e653ee0e7edda93407e44be1c203b816d0181c08d643268af338ccd2d0a90dccc0d6a01"}, {0xdd, 0x6, "95e79490e4be"}, {0xdd, 0x6, "85251095238f"}]}}]}, 0x110}}, 0x0) 1.747708459s ago: executing program 3 (id=680): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0], 0x1, 0x1a1, &(0x7f0000000140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.022816967s ago: executing program 3 (id=681): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0xfdef}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 902.480427ms ago: executing program 3 (id=682): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x0, 0x1}, 0x0) 817.262094ms ago: executing program 3 (id=683): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000600), 0x4) 738.7853ms ago: executing program 0 (id=684): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000140)={[{@codepage={'codepage', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x3}}, {@file_umask={'file_umask', 0x3d, 0x6}}, {@gid}]}, 0x7, 0x2db, &(0x7f0000000240)="$eJzs3c9u00oUx/HfOEmb/lGvb9urK7EBFSrBpqLAArEJQtmyZ4WAJpUqoiLaIgGbFsQS8QDseQUegg2IF4AVKx6gO6MZT1w7dZwWNXHTfj9SImc84znW2Jk5ltoIwLl1r/nj081f9mWkiiqS7kiBpLpUlfSf/q+/2NzZ2Om0W0UHqrgW9mUUtzSH6qxttvOa2nauhRfaT1XNpsswHFEU3f1ZdhAonbv7cwTSpL8P3f76iOMalj3pYtkxjFp6gM2+9vVScyWGAwA4Bfz8H/hpYtYVGQWBtOyn/TM1/++XHcDJutU5VBQVNkjN/251Fxk7vv+4XQf5nkvh7P6gmyUeJZhaz+cJxVdWZoFpBmWVLpZgan2jqpW1N2oFequGl6q26N5b8aXbNSDapZzctED/o9V0fzo+G7ei7OVD2l3f6LQn7VZO/AuFPU4eJ86jMV/MN/PQhPqoVrL+q0bGDpMbqbBnpIKajf96/yPOuFa2lnza32g0gkyVf10nF3wP3oBRqudnJOljdh8Q7CURFMXp+p5X9rFCfHarA1ot5LUKk099Wi1mWtmzsX2trD3rFD5KGY7uKZoP5oFZ0m99VjO1/g9sfMtK3ZlFX/XG1fRXRnw+E/k1q65meGjmOLhdLiUReEO46M+D4z0te68nuq257Vevn1Y6nfaW3Xic2TCyG89nt4wvqb2TeuqMaqOigjraOyiJrN0oOuqRo2EGf+1ED2i/P5ISe/vkVbZ3WVISjHqYzstG86uKLsjx2Ygiqc+uoX1P4RTZNnasU1PHVJnRoAR23WXi/M+t5P2qzqVI9i0sWKcXJ5nKHHE1yeCyS8F59z59rAxupn8Gl+rxRp+c0eVcl69KV1KFRoU9hj7OM8I09V2PeP4PAAAAAAAAAAAAAAAAAAAwbkbxlwZlnyMAAAAAAAAAAAAAAAAAAAAAAOPur37/N+9/xLvf/w35/V9gjPwJAAD//2tCdrA=") sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0}, 0x90) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) 738.61125ms ago: executing program 3 (id=685): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file2\x00', 0x3008000, &(0x7f0000000980)=ANY=[], 0x1, 0x6260, &(0x7f000000c300)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 458.561553ms ago: executing program 4 (id=686): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xfe, 0x61d3, &(0x7f0000008140)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 80.093804ms ago: executing program 0 (id=687): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) kernel console output (not intermixed with test programs): ad_bitmap_block: reiserfs_read_bitmap_block [ 160.539164][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 160.545221][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 160.553265][ T4062] team0 (unregistering): Port device team_slave_1 removed [ 160.563639][ T13] usb 2-1: USB disconnect, device number 5 [ 160.567425][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 160.622588][ T4062] team0 (unregistering): Port device team_slave_0 removed [ 160.636997][ T4062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.670757][ T3615] usb 5-1: Using ep0 maxpacket: 32 [ 160.694793][ T4062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.793468][ T5587] loop3: detected capacity change from 0 to 64 [ 160.837366][ T4062] bond0 (unregistering): Released all slaves [ 160.926222][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.933491][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.962339][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.963648][ T1193] attempt to access beyond end of device [ 160.963648][ T1193] loop3: rw=1, want=66, limit=64 [ 161.003102][ T1193] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 161.029162][ T1193] attempt to access beyond end of device [ 161.029162][ T1193] loop3: rw=1, want=67, limit=64 [ 161.056851][ T3615] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 6.08 [ 161.082893][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.103607][ T1193] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 161.114309][ T3615] usb 5-1: Product: syz [ 161.118521][ T3615] usb 5-1: Manufacturer: syz [ 161.128783][ T1193] attempt to access beyond end of device [ 161.128783][ T1193] loop3: rw=1, want=68, limit=64 [ 161.143713][ T3615] usb 5-1: SerialNumber: syz [ 161.150434][ T1193] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 161.168241][ T3615] usb 5-1: config 0 descriptor?? [ 161.174072][ T1193] attempt to access beyond end of device [ 161.174072][ T1193] loop3: rw=1, want=69, limit=64 [ 161.184638][ T1193] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 161.194903][ T1193] attempt to access beyond end of device [ 161.194903][ T1193] loop3: rw=1, want=73, limit=64 [ 161.196849][ T5462] device hsr_slave_0 entered promiscuous mode [ 161.205567][ T1193] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 161.205658][ T1193] attempt to access beyond end of device [ 161.205658][ T1193] loop3: rw=1, want=74, limit=64 [ 161.205681][ T1193] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 161.205727][ T1193] attempt to access beyond end of device [ 161.205727][ T1193] loop3: rw=1, want=77, limit=64 [ 161.205747][ T1193] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 161.205790][ T1193] attempt to access beyond end of device [ 161.205790][ T1193] loop3: rw=1, want=78, limit=64 [ 161.275216][ T1193] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 161.284031][ T1193] attempt to access beyond end of device [ 161.284031][ T1193] loop3: rw=1, want=167, limit=64 [ 161.299184][ T5462] device hsr_slave_1 entered promiscuous mode [ 161.341638][ T5462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.349843][ T5462] Cannot create hsr debugfs directory [ 161.356880][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 161.488594][ T5556] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.514321][ T5593] loop3: detected capacity change from 0 to 64 [ 161.539635][ T26] audit: type=1326 audit(1720342294.643:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e6bfcbd9 code=0x0 [ 161.663085][ T5593] FAULT_INJECTION: forcing a failure. [ 161.663085][ T5593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.677169][ T5593] CPU: 0 PID: 5593 Comm: syz.3.421 Not tainted 5.15.162-syzkaller #0 [ 161.685303][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 161.695397][ T5593] Call Trace: [ 161.698739][ T5593] [ 161.701697][ T5593] dump_stack_lvl+0x1e3/0x2d0 [ 161.706449][ T5593] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 161.712468][ T5593] ? panic+0x860/0x860 [ 161.716583][ T5593] ? hfs_free_extents+0x420/0x420 [ 161.721634][ T5593] ? page_zero_new_buffers+0x510/0x510 [ 161.727129][ T5593] ? exc_page_fault+0x342/0x700 [ 161.732012][ T5593] should_fail+0x38a/0x4c0 [ 161.736466][ T5593] copy_page_from_iter_atomic+0x451/0x1230 [ 161.742327][ T5593] ? pipe_zero+0x4f0/0x4f0 [ 161.746766][ T5593] ? __vfs_getxattr+0x35c/0x410 [ 161.752021][ T5593] ? hfs_write_begin+0x92/0xd0 [ 161.756840][ T5593] ? hfs_free_extents+0x420/0x420 [ 161.762071][ T5593] ? hfs_write_begin+0xaa/0xd0 [ 161.766885][ T5593] generic_perform_write+0x33a/0x5b0 [ 161.772223][ T5593] ? grab_cache_page_write_begin+0x90/0x90 [ 161.778053][ T5593] ? file_remove_privs+0x610/0x610 [ 161.783365][ T5593] ? rwsem_write_trylock+0x166/0x210 [ 161.788787][ T5593] __generic_file_write_iter+0x243/0x4f0 [ 161.794466][ T5593] generic_file_write_iter+0xa7/0x1b0 [ 161.799980][ T5593] vfs_write+0xacf/0xe50 [ 161.804356][ T5593] ? file_end_write+0x250/0x250 [ 161.809238][ T5593] ? __fget_files+0x413/0x480 [ 161.813944][ T5593] ? mutex_lock_nested+0x17/0x20 [ 161.819084][ T5593] ? __fdget_pos+0x2cb/0x380 [ 161.823675][ T5593] ? ksys_write+0x77/0x2c0 [ 161.828100][ T5593] ksys_write+0x1a2/0x2c0 [ 161.832435][ T5593] ? print_irqtrace_events+0x210/0x210 [ 161.838022][ T5593] ? __ia32_sys_read+0x80/0x80 [ 161.842811][ T5593] ? syscall_enter_from_user_mode+0x2e/0x240 [ 161.848800][ T5593] ? lockdep_hardirqs_on+0x94/0x130 [ 161.854007][ T5593] ? syscall_enter_from_user_mode+0x2e/0x240 [ 161.860086][ T5593] do_syscall_64+0x3b/0xb0 [ 161.864535][ T5593] ? clear_bhb_loop+0x15/0x70 [ 161.869240][ T5593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.875160][ T5593] RIP: 0033:0x7ffb79785bd9 [ 161.879580][ T5593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.899280][ T5593] RSP: 002b:00007ffb78206048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.907706][ T5593] RAX: ffffffffffffffda RBX: 00007ffb79913f60 RCX: 00007ffb79785bd9 [ 161.915805][ T5593] RDX: 0000000000010017 RSI: 0000000020010180 RDI: 0000000000000004 [ 161.923792][ T5593] RBP: 00007ffb782060a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.931775][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.939750][ T5593] R13: 000000000000000b R14: 00007ffb79913f60 R15: 00007ffec32d06d8 [ 161.947763][ T5593] [ 162.045358][ T1193] attempt to access beyond end of device [ 162.045358][ T1193] loop3: rw=1, want=66, limit=64 [ 162.075209][ T1193] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 162.104992][ T1193] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 162.327878][ T5618] loop3: detected capacity change from 0 to 512 [ 162.451251][ T5618] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.552063][ T5618] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.426: bg 0: block 248: padding at end of block bitmap is not set [ 162.679826][ T5618] Quota error (device loop3): write_blk: dquota write failed [ 162.715303][ T5618] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 162.755333][ T5618] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.426: Failed to acquire dquot type 1 [ 162.843222][ T5618] EXT4-fs (loop3): 1 truncate cleaned up [ 162.886110][ T5618] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 162.955906][ T3548] Bluetooth: hci4: command 0x040f tx timeout [ 163.024147][ T5616] EXT4-fs error (device loop3): ext4_remount:5854: comm syz.3.426: Abort forced by user [ 163.025140][ T13] usb 5-1: USB disconnect, device number 4 [ 163.181509][ T5462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.235815][ T5462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.335549][ T5462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.408952][ T5462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.017993][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.106289][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.115244][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.123349][ T5638] loop4: detected capacity change from 0 to 32768 [ 164.149617][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.160931][ T5636] chnl_net:caif_netlink_parms(): no params data found [ 164.195285][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.205300][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.219626][ T5638] XFS: noikeep mount option is deprecated. [ 164.229251][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.236400][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.303482][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.314527][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.329542][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.344480][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.351941][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.394474][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.414916][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.468456][ T5638] XFS (loop4): Mounting V5 Filesystem [ 164.541568][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.559358][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.568227][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.603018][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.623671][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.679498][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.737119][ T5638] XFS (loop4): Ending clean mount [ 164.767370][ T5462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.783183][ T5638] XFS (loop4): Quotacheck needed: Please wait. [ 164.806668][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.843800][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.859625][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.868237][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.900062][ T5638] XFS (loop4): Quotacheck: Done. [ 165.039829][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 165.107699][ T4612] XFS (loop4): Unmounting Filesystem [ 165.133030][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.189026][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.213500][ T5636] device bridge_slave_0 entered promiscuous mode [ 165.236179][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.274362][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.317707][ T5636] device bridge_slave_1 entered promiscuous mode [ 165.431302][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.462612][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.506900][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.528434][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.545424][ T4261] Bluetooth: hci5: command 0x0409 tx timeout [ 165.561124][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.651976][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.676741][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.805581][ T5636] team0: Port device team_slave_0 added [ 165.845721][ T5693] bridge0: port 3(gretap1) entered blocking state [ 165.890528][ T5693] bridge0: port 3(gretap1) entered disabled state [ 165.898238][ T5693] device gretap1 entered promiscuous mode [ 165.919270][ T5695] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 165.926585][ T5695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.951508][ T5700] bridge0: port 3(gretap1) entered blocking state [ 165.958027][ T5700] bridge0: port 3(gretap1) entered forwarding state [ 165.959286][ T5695] vhci_hcd vhci_hcd.0: Device attached [ 165.999751][ T5700] bridge0: port 3(gretap1) entered disabled state [ 166.025181][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.035232][ T5697] vhci_hcd: connection closed [ 166.050800][ T4368] vhci_hcd: stop threads [ 166.052540][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.060393][ T4368] vhci_hcd: release socket [ 166.060617][ T4368] vhci_hcd: disconnect device [ 166.088140][ T5636] team0: Port device team_slave_1 added [ 166.120843][ T5462] device veth0_vlan entered promiscuous mode [ 166.139796][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.147791][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.221749][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.238692][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.297538][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.321790][ T5462] device veth1_vlan entered promiscuous mode [ 166.348270][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.356071][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.391409][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.536512][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.551987][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.668424][ T5636] device hsr_slave_0 entered promiscuous mode [ 166.683885][ T5713] loop3: detected capacity change from 0 to 256 [ 166.690854][ T5636] device hsr_slave_1 entered promiscuous mode [ 166.720387][ T5636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.728005][ T5636] Cannot create hsr debugfs directory [ 166.740383][ T5713] FAT-fs (loop3): Unrecognized mount option "uni_xlate=1¨utf8=0" or missing value [ 166.771061][ T5713] netlink: 860 bytes leftover after parsing attributes in process `syz.3.433'. [ 166.791048][ T5462] device veth0_macvtap entered promiscuous mode [ 166.844935][ T5462] device veth1_macvtap entered promiscuous mode [ 166.863246][ T5713] loop3: detected capacity change from 0 to 64 [ 166.905107][ T4062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.922017][ T5713] hfs: inconsistency in B*Tree (1282,2,0,3,0) [ 166.932996][ T5713] hfs: get root inode failed [ 166.942379][ T5721] loop4: detected capacity change from 0 to 128 [ 166.990822][ T5721] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.017500][ T5721] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.297334][ T4062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.429407][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.464304][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.494988][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.513134][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.526118][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.547342][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.568207][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.586431][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.607817][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.694629][ T4237] Bluetooth: hci5: command 0x041b tx timeout [ 167.719323][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.736159][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.777713][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.787046][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.816191][ T4062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.831648][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.844205][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.854162][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.864904][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.874875][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.890882][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.903330][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.917963][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.935506][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.947350][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.970197][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.007996][ T4062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.033892][ T5462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.051246][ T5462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.060571][ T4237] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.073270][ T5462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.075771][ T5732] loop3: detected capacity change from 0 to 8192 [ 168.088606][ T5462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.147348][ T5732] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 168.176276][ T5732] REISERFS (device loop3): using ordered data mode [ 168.188874][ T5732] reiserfs: using flush barriers [ 168.201785][ T3774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.211177][ T5732] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.228215][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.229205][ T5732] REISERFS (device loop3): checking transaction log (loop3) [ 168.256851][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.258959][ T3774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.297078][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.341601][ T5732] REISERFS (device loop3): Using r5 hash to sort names [ 168.364440][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.413819][ T5732] reiserfs: enabling write barrier flush mode [ 168.458963][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.472212][ T5732] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 168.493807][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.529553][ T4062] tipc: Left network mode [ 168.534835][ T4237] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 168.548309][ T26] audit: type=1800 audit(1720342301.643:42): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.438" name="memory.events" dev="loop3" ino=2 res=0 errno=0 [ 168.557109][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.611210][ T26] audit: type=1804 audit(1720342301.683:43): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.438" name="/newroot/54/file0/memory.events" dev="loop3" ino=2 res=1 errno=0 [ 168.620442][ T4237] usb 5-1: config 0 descriptor?? [ 169.066045][ T4062] device gretap1 left promiscuous mode [ 169.073637][ T4062] bridge0: port 3(gretap1) entered disabled state [ 169.146492][ T4237] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 169.173731][ T4237] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 169.198197][ T4237] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 169.334825][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.418034][ T5729] loop4: detected capacity change from 0 to 256 [ 169.424766][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.443617][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.470104][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.591869][ T4237] usb 5-1: USB disconnect, device number 5 [ 169.598860][ C0] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 169.688049][ T4062] device hsr_slave_0 left promiscuous mode [ 169.695821][ T4062] device hsr_slave_1 left promiscuous mode [ 169.703735][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.711461][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.723684][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.731351][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.743050][ T4062] device vlan2 left promiscuous mode [ 169.748566][ T4062] bridge0: port 4(vlan2) entered disabled state [ 169.759000][ T4240] Bluetooth: hci5: command 0x040f tx timeout [ 169.767790][ T4062] device bridge_slave_1 left promiscuous mode [ 169.774249][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.783708][ T4062] device bridge_slave_0 left promiscuous mode [ 169.790763][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.805369][ T4062] device veth1_macvtap left promiscuous mode [ 169.811882][ T4062] device veth0_macvtap left promiscuous mode [ 169.818324][ T4062] device veth1_vlan left promiscuous mode [ 169.827958][ T4062] device veth0_vlan left promiscuous mode [ 169.887952][ T5764] loop3: detected capacity change from 0 to 32768 [ 169.929376][ T5764] XFS: attr2 mount option is deprecated. [ 169.935194][ T5764] XFS: noattr2 mount option is deprecated. [ 169.947447][ T5764] XFS: noikeep mount option is deprecated. [ 169.970784][ T5764] XFS (loop3): attr2 and noattr2 cannot both be specified. [ 170.080687][ T4062] team0 (unregistering): Port device team_slave_1 removed [ 170.111063][ T4062] team0 (unregistering): Port device team_slave_0 removed [ 170.167080][ T4062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.210327][ T4062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.358078][ T4062] bond0 (unregistering): Released all slaves [ 170.450503][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.457547][ T5766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.440'. [ 170.499940][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.507914][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.521111][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.535570][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.555441][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.577467][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.584639][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.621230][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.630273][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.641397][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.650532][ T5768] loop4: detected capacity change from 0 to 32768 [ 170.652296][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.664164][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.683082][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.692281][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.701430][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.706688][ T5768] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.441 (5768) [ 170.710916][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.777506][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.799634][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.823898][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.835286][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.871726][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.903211][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.933721][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.967327][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.367796][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.379248][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.401006][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.448089][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.466299][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.503505][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.518059][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.594763][ T5636] device veth0_vlan entered promiscuous mode [ 171.629893][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.648102][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.711562][ T5636] device veth1_vlan entered promiscuous mode [ 171.855753][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.875161][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.909645][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.956619][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.000582][ T5636] device veth0_macvtap entered promiscuous mode [ 172.162348][ T5785] loop2: detected capacity change from 0 to 8192 [ 172.233637][ T5636] device veth1_macvtap entered promiscuous mode [ 172.331818][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.350606][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.368173][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.388195][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.406311][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.417541][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.435559][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.450960][ T3615] Bluetooth: hci5: command 0x0419 tx timeout [ 172.457163][ T5768] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 172.466134][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.467992][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.486638][ T5768] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 172.516270][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.521724][ T5789] loop3: detected capacity change from 0 to 256 [ 172.525570][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.540831][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.552498][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.566672][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.580197][ T5768] BTRFS error (device loop4): open_ctree failed [ 172.585597][ T5785] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 172.588196][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.607029][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.617802][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.627948][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.638718][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.649476][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.660126][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.660388][ T5785] REISERFS (device loop2): using ordered data mode [ 172.672151][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.688770][ T5785] reiserfs: using flush barriers [ 172.698241][ T5785] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.719627][ T5785] REISERFS (device loop2): checking transaction log (loop2) [ 172.727057][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.737403][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.746452][ T5789] exfat: Deprecated parameter 'namecase' [ 172.804404][ T5789] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 172.827372][ T5636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.846653][ T5636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.865784][ T5636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.884889][ T5636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.314944][ T5799] loop4: detected capacity change from 0 to 1024 [ 174.013878][ T5799] EXT4-fs (loop4): Ignoring removed orlov option [ 174.020564][ T5799] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 174.078991][ T4261] Bluetooth: hci3: command 0x0409 tx timeout [ 174.107493][ T5799] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 174.179648][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.192966][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 174.236134][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.291263][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.330885][ T4063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.386046][ T4063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.493527][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.658975][ T4237] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 174.753544][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.771243][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.810617][ T5786] device bridge_slave_0 entered promiscuous mode [ 174.849475][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.859422][ T4237] usb 3-1: device descriptor read/64, error -71 [ 174.881310][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.913737][ T5786] device bridge_slave_1 entered promiscuous mode [ 175.008304][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.058550][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.138947][ T4237] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.151997][ T5830] FAULT_INJECTION: forcing a failure. [ 175.151997][ T5830] name failslab, interval 1, probability 0, space 0, times 0 [ 175.167082][ T5827] loop4: detected capacity change from 0 to 8192 [ 175.177882][ T5786] team0: Port device team_slave_0 added [ 175.194630][ T5814] loop3: detected capacity change from 0 to 40427 [ 175.211055][ T5786] team0: Port device team_slave_1 added [ 175.216857][ T5830] CPU: 1 PID: 5830 Comm: syz.0.453 Not tainted 5.15.162-syzkaller #0 [ 175.224948][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 175.235028][ T5830] Call Trace: [ 175.238340][ T5830] [ 175.241297][ T5830] dump_stack_lvl+0x1e3/0x2d0 [ 175.246057][ T5830] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 175.251718][ T5830] ? panic+0x860/0x860 [ 175.255852][ T5830] should_fail+0x38a/0x4c0 [ 175.260294][ T5830] should_failslab+0x5/0x20 [ 175.264811][ T5830] slab_pre_alloc_hook+0x53/0xc0 [ 175.270013][ T5830] ? __build_skb+0x25/0x2f0 [ 175.274571][ T5830] kmem_cache_alloc+0x3f/0x280 [ 175.279364][ T5830] __build_skb+0x25/0x2f0 [ 175.283750][ T5830] build_skb+0x1f/0x180 [ 175.287944][ T5830] ? __tun_build_skb+0x23/0x230 [ 175.292815][ T5830] __tun_build_skb+0x2d/0x230 [ 175.297577][ T5830] tun_get_user+0x1d3c/0x40f0 [ 175.302286][ T5830] ? tun_ring_recv+0xcc0/0xcc0 [ 175.307076][ T5830] ? rcu_lock_release+0x5/0x20 [ 175.311877][ T5830] tun_chr_write_iter+0x10c/0x1e0 [ 175.316953][ T5830] vfs_write+0xacf/0xe50 [ 175.321308][ T5830] ? file_end_write+0x250/0x250 [ 175.326365][ T5830] ? __fget_files+0x413/0x480 [ 175.331190][ T5830] ? __fdget_pos+0x1e9/0x380 [ 175.335992][ T5830] ? ksys_write+0x77/0x2c0 [ 175.340445][ T5830] ksys_write+0x1a2/0x2c0 [ 175.344795][ T5830] ? print_irqtrace_events+0x210/0x210 [ 175.350279][ T5830] ? __ia32_sys_read+0x80/0x80 [ 175.355069][ T5830] ? syscall_enter_from_user_mode+0x2e/0x240 [ 175.361070][ T5830] ? lockdep_hardirqs_on+0x94/0x130 [ 175.366293][ T5830] ? syscall_enter_from_user_mode+0x2e/0x240 [ 175.372384][ T5830] do_syscall_64+0x3b/0xb0 [ 175.376351][ T4237] usb 3-1: device descriptor read/64, error -71 [ 175.376843][ T5830] ? clear_bhb_loop+0x15/0x70 [ 175.388283][ T5830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.394204][ T5830] RIP: 0033:0x7f764e3d375f [ 175.398632][ T5830] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 175.418465][ T5830] RSP: 002b:00007f764ce34010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 175.427042][ T5830] RAX: ffffffffffffffda RBX: 00007f764e563038 RCX: 00007f764e3d375f [ 175.435170][ T5830] RDX: 0000000000000052 RSI: 0000000020000300 RDI: 00000000000000c8 [ 175.443379][ T5830] RBP: 00007f764ce340a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.451793][ T5830] R10: 0000000000000052 R11: 0000000000000293 R12: 0000000000000001 [ 175.459795][ T5830] R13: 000000000000006e R14: 00007f764e563038 R15: 00007ffd8d686328 [ 175.467818][ T5830] [ 175.503206][ T4237] usb usb3-port1: attempt power cycle [ 175.524541][ T5814] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 175.536321][ T5827] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 175.570698][ T5814] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 175.584626][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.609692][ T5827] REISERFS (device loop4): using ordered data mode [ 175.616259][ T5827] reiserfs: using flush barriers [ 175.644276][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.706646][ T5814] F2FS-fs (loop3): invalid crc value [ 175.712794][ T5827] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.720392][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.750599][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.759278][ T5827] REISERFS (device loop4): checking transaction log (loop4) [ 175.770707][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.801840][ T5827] REISERFS (device loop4): Using r5 hash to sort names [ 175.807833][ T5814] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.832641][ T5827] reiserfs: enabling write barrier flush mode [ 175.888105][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.890502][ T5827] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 175.943679][ T5814] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 175.957727][ T26] audit: type=1800 audit(1720342309.056:44): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.452" name="memory.events" dev="loop4" ino=2 res=0 errno=0 [ 175.994448][ T5814] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 176.003116][ T4237] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.020025][ T26] audit: type=1804 audit(1720342309.076:45): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.452" name="/newroot/40/file0/memory.events" dev="loop4" ino=2 res=1 errno=0 [ 176.075127][ T5786] device hsr_slave_0 entered promiscuous mode [ 176.103773][ T5786] device hsr_slave_1 entered promiscuous mode [ 176.114524][ T26] audit: type=1804 audit(1720342309.216:46): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.450" name="/newroot/62/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 176.141291][ T4237] usb 3-1: device descriptor read/8, error -71 [ 176.155548][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.159730][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 176.169923][ T5786] Cannot create hsr debugfs directory [ 176.177058][ T26] audit: type=1804 audit(1720342309.236:47): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.450" name="/newroot/62/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 176.441182][ T4237] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.516502][ T5786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.567512][ T5786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.581139][ T4237] usb 3-1: device descriptor read/8, error -71 [ 176.686198][ T5786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 51531 - 0 [ 176.698973][ T4237] usb usb3-port1: unable to enumerate USB device [ 176.743138][ T5786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 35371 - 0 [ 176.829243][ T5786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.867969][ T5786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.928893][ T5786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51531 - 0 [ 176.959512][ T5786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 35371 - 0 [ 177.056667][ T4299] handle_bad_sector: 8 callbacks suppressed [ 177.056686][ T4299] attempt to access beyond end of device [ 177.056686][ T4299] loop3: rw=2049, want=45104, limit=40427 [ 177.225488][ T5859] loop4: detected capacity change from 0 to 8192 [ 177.290729][ T5859] FAT-fs (loop4): Unrecognized mount option "fàÝŽ¯ØŠiÒj" or missing value [ 177.357273][ T5786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.416287][ T5786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.468849][ T5786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51531 - 0 [ 177.493899][ T5786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 35371 - 0 [ 177.582251][ T5864] loop2: detected capacity change from 0 to 128 [ 177.630057][ T5864] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.662104][ T5786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.704807][ T5864] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.704853][ T5786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.785252][ T5786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51531 - 0 [ 177.819055][ T5786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 35371 - 0 [ 178.074055][ T5878] autofs4:pid:5878:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1536.1), cmd(0xc018937e) [ 178.120557][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.148114][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.155072][ T5878] autofs4:pid:5878:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 178.220614][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.267790][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 178.274411][ T5886] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.504501][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.576530][ T5908] loop4: detected capacity change from 0 to 8192 [ 179.585548][ T21] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 179.599535][ T21] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 179.630056][ T5910] IPv6: NLM_F_REPLACE set, but no existing node found! [ 179.641751][ T21] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 179.676011][ T5908] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 179.784436][ T5908] REISERFS (device loop4): using ordered data mode [ 179.830599][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.863749][ T5908] reiserfs: using flush barriers [ 179.906059][ T5908] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.916626][ T5906] loop2: detected capacity change from 0 to 32768 [ 179.929903][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 179.932663][ T5908] REISERFS (device loop4): checking transaction log (loop4) [ 179.952087][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.968849][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.991436][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.032277][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.044376][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.054245][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.061500][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.070955][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.081183][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.090625][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.097756][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.101444][ T5906] XFS (loop2): Mounting V5 Filesystem [ 180.106892][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.120720][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.143241][ T5918] loop3: detected capacity change from 0 to 128 [ 180.197111][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.207843][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.218531][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.241184][ T5918] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.269060][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.289034][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.302113][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24829, setting to 1024 [ 180.314353][ T21] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 516 [ 180.322474][ T5918] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.326718][ T3548] Bluetooth: hci3: command 0x0419 tx timeout [ 180.337342][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.375265][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.416303][ T5906] XFS (loop2): Ending clean mount [ 180.429969][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.442391][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.469223][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.479183][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.489051][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.498031][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.506744][ T21] usb 1-1: Product: syz [ 180.511565][ T21] usb 1-1: Manufacturer: syz [ 180.516216][ T21] usb 1-1: SerialNumber: syz [ 180.523270][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.683971][ T5933] loop4: detected capacity change from 0 to 64 [ 180.713285][ T5462] XFS (loop2): Unmounting Filesystem [ 180.796988][ T5910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.861736][ T4062] device hsr_slave_0 left promiscuous mode [ 180.881739][ T4062] device hsr_slave_1 left promiscuous mode [ 180.911129][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.940943][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.959885][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.979597][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.026179][ T4062] device team0 left promiscuous mode [ 181.037848][ T4062] device team_slave_0 left promiscuous mode [ 181.049866][ T21] cdc_ncm 1-1:1.0: bind() failure [ 181.061743][ T4062] device team_slave_1 left promiscuous mode [ 181.068150][ T4062] device bond0 left promiscuous mode [ 181.074181][ T4062] device bond_slave_0 left promiscuous mode [ 181.080417][ T21] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 181.088301][ T4062] device bond_slave_1 left promiscuous mode [ 181.097220][ T4062] bridge0: port 3(team0) entered disabled state [ 181.116772][ T21] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 181.137364][ T4062] device bridge_slave_1 left promiscuous mode [ 181.155665][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.163045][ T21] usbtest: probe of 1-1:1.1 failed with error -71 [ 181.173643][ T4062] device bridge_slave_0 left promiscuous mode [ 181.203054][ T21] usb 1-1: USB disconnect, device number 11 [ 181.225858][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.275940][ T4062] device veth1_macvtap left promiscuous mode [ 181.292541][ T4062] device veth0_macvtap left promiscuous mode [ 181.302536][ T4062] device veth1_vlan left promiscuous mode [ 181.308487][ T4062] device veth0_vlan left promiscuous mode [ 181.587166][ T4062] team0 (unregistering): Port device team_slave_1 removed [ 181.606674][ T4062] team0 (unregistering): Port device team_slave_0 removed [ 181.623092][ T4062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.647266][ T4062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.668968][ T4237] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.752863][ T4062] team0 (unregistering): Port device bond0 removed [ 181.785330][ T4062] bond0 (unregistering): Released all slaves [ 181.916612][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.923976][ T4237] usb 3-1: Using ep0 maxpacket: 8 [ 182.004632][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.013690][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.062583][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.089119][ T4237] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.097626][ T4237] usb 3-1: config 0 has no interface number 0 [ 182.106445][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.193111][ T4237] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.229585][ T4237] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.258041][ T5786] device veth0_vlan entered promiscuous mode [ 182.280408][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.337655][ T5786] device veth1_vlan entered promiscuous mode [ 182.362143][ T4237] usb 3-1: config 0 descriptor?? [ 182.396451][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.426757][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.450890][ T4237] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 182.505091][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.589762][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.598133][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.631618][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.676373][ T5966] loop3: detected capacity change from 0 to 8192 [ 182.713204][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.734051][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.747845][ T5786] device veth0_macvtap entered promiscuous mode [ 182.772745][ T5786] device veth1_macvtap entered promiscuous mode [ 182.780833][ T5966] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 182.805814][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.816346][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.826969][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.838090][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.848204][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.859067][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.869011][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.879792][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.893592][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.908792][ T5966] REISERFS (device loop3): using ordered data mode [ 182.963659][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.981018][ T5966] reiserfs: using flush barriers [ 182.998285][ T5975] binder: 5974:5975 ioctl c018620b 20000380 returned -14 [ 183.006874][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.046569][ T5966] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.089631][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.111699][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.136362][ T5966] REISERFS (device loop3): checking transaction log (loop3) [ 183.159932][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.211157][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.244293][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.276028][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.307180][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.346090][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.377343][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.396847][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.409496][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.420234][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.429942][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.444620][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.454151][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.463994][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.485377][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.513626][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.488'. [ 183.829354][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.842708][ T5950] loop2: detected capacity change from 0 to 2048 [ 183.873889][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.924230][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.932867][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.970399][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.002076][ T5950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.007058][ T5991] loop4: detected capacity change from 0 to 512 [ 184.023908][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.228851][ T5950] overlayfs: upper fs needs to support d_type. [ 184.237978][ T5950] overlayfs: cleanup of 'work/#4' failed (-2) [ 184.279303][ T5950] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.288543][ T5950] overlayfs: failed to set xattr on upper [ 184.304119][ T5950] overlayfs: ...falling back to index=off,metacopy=off. [ 184.339225][ T5991] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.387345][ T5991] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 184.503854][ T4237] usb 3-1: USB disconnect, device number 10 [ 184.841239][ T6003] loop1: detected capacity change from 0 to 128 [ 184.886890][ T6008] loop3: detected capacity change from 0 to 256 [ 184.967288][ T6003] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.068905][ T6003] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.100845][ T6008] FAT-fs (loop3): Directory bread(block 64) failed [ 185.117894][ T6008] FAT-fs (loop3): Directory bread(block 65) failed [ 185.146219][ T6008] FAT-fs (loop3): Directory bread(block 66) failed [ 185.174131][ T6008] FAT-fs (loop3): Directory bread(block 67) failed [ 185.194478][ T6008] FAT-fs (loop3): Directory bread(block 68) failed [ 185.214685][ T6008] FAT-fs (loop3): Directory bread(block 69) failed [ 185.235067][ T6008] FAT-fs (loop3): Directory bread(block 70) failed [ 185.283825][ T6008] FAT-fs (loop3): Directory bread(block 71) failed [ 185.318601][ T6008] FAT-fs (loop3): Directory bread(block 72) failed [ 185.347919][ T6008] FAT-fs (loop3): Directory bread(block 73) failed [ 185.679849][ T6010] program syz.3.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.749180][ T6011] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.866977][ T6014] loop1: detected capacity change from 0 to 1024 [ 185.905586][ T6014] EXT4-fs (loop1): Test dummy encryption mode enabled [ 185.933230][ T6014] EXT4-fs (loop1): Ignoring removed orlov option [ 186.019012][ T6014] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x000000000000007a,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 186.345844][ T6014] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 186.574338][ T6028] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 186.626499][ T6019] chnl_net:caif_netlink_parms(): no params data found [ 187.129391][ T6011] loop3: detected capacity change from 0 to 40427 [ 187.210373][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.211630][ T6011] F2FS-fs (loop3): invalid crc value [ 187.217815][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.256196][ T6019] device bridge_slave_0 entered promiscuous mode [ 187.280781][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.308554][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.317713][ T6011] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.328489][ T6019] device bridge_slave_1 entered promiscuous mode [ 187.352530][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 187.484584][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.487273][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.549725][ T6011] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 187.552106][ T6011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.589602][ T6054] loop1: detected capacity change from 0 to 128 [ 187.636502][ T6010] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.657080][ T6010] vhci_hcd: invalid port number 9 [ 187.679796][ T6019] team0: Port device team_slave_0 added [ 187.690973][ T6011] attempt to access beyond end of device [ 187.690973][ T6011] loop3: rw=2049, want=45112, limit=40427 [ 187.729996][ T6010] vhci_hcd: invalid port number 9 [ 187.760435][ T6054] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.779877][ T6019] team0: Port device team_slave_1 added [ 187.783027][ T6054] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.828660][ T6060] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 188.006303][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.047186][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.095392][ T4242] Bluetooth: hci1: command 0x0409 tx timeout [ 188.113571][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.130373][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.137492][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.160856][ T6023] device bridge_slave_0 entered promiscuous mode [ 188.190455][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.197547][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.223269][ T6023] device bridge_slave_1 entered promiscuous mode [ 188.231692][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.237250][ T6066] loop1: detected capacity change from 0 to 512 [ 188.239006][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.272881][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.291566][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.303360][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.311550][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.337396][ T6064] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 188.357339][ C0] Illegal XDP return value 1603896156, expect packet loss! [ 188.382759][ T6066] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.394263][ T6066] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 188.404674][ T3550] Bluetooth: hci2: command 0x0409 tx timeout [ 188.474778][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.546952][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.591962][ T6084] loop3: detected capacity change from 0 to 2048 [ 189.656639][ T6019] device hsr_slave_0 entered promiscuous mode [ 189.695391][ T6019] device hsr_slave_1 entered promiscuous mode [ 189.703775][ T6019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.719155][ T6019] Cannot create hsr debugfs directory [ 189.798044][ T6023] team0: Port device team_slave_0 added [ 189.805263][ T6084] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.818597][ T6084] ext4 filesystem being mounted at /76/bus supports timestamps until 2038 (0x7fffffff) [ 189.859161][ T4062] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.983068][ T6023] team0: Port device team_slave_1 added [ 190.161904][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 190.170390][ T6097] loop1: detected capacity change from 0 to 8192 [ 190.202284][ T4062] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.224363][ T6097] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 190.250550][ T6097] REISERFS (device loop1): using ordered data mode [ 190.257234][ T6097] reiserfs: using flush barriers [ 190.290847][ T6097] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.320893][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.328061][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.378240][ T6097] REISERFS (device loop1): checking transaction log (loop1) [ 190.477190][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.479415][ T3548] Bluetooth: hci2: command 0x041b tx timeout [ 190.558982][ T4062] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.613557][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.622252][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.652703][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.715079][ T4062] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.789340][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.803938][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.813061][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.830211][ T6115] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 190.943518][ T6023] device hsr_slave_0 entered promiscuous mode [ 190.957055][ T6023] device hsr_slave_1 entered promiscuous mode [ 190.986297][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.000779][ T6023] Cannot create hsr debugfs directory [ 191.421132][ T4062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.493740][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 191.574484][ T4062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.766238][ T4062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.869431][ T4062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.887925][ T4006] Bluetooth: hci1: command 0x040f tx timeout [ 192.905531][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 193.047144][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.081065][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.119211][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.156629][ T6170] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 193.786130][ T6186] loop1: detected capacity change from 0 to 8192 [ 193.961544][ T6186] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 193.979654][ T6191] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 194.012815][ T6186] REISERFS (device loop1): using ordered data mode [ 194.026103][ T6186] reiserfs: using flush barriers [ 194.032952][ T6186] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.050395][ T6186] REISERFS (device loop1): checking transaction log (loop1) [ 194.320401][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.328024][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.329259][ T6186] REISERFS (device loop1): Using tea hash to sort names [ 194.354486][ T6186] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 194.524016][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.535431][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.543250][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.562974][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.573778][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): geneve1: link becomes ready [ 194.735291][ T6019] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.791855][ T6019] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.833866][ T6019] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.854167][ T6019] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.867462][ T6214] loop1: detected capacity change from 0 to 512 [ 194.965884][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 194.979044][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 195.000033][ T6214] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.013065][ T6214] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 195.073464][ T6023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.091857][ T6214] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #2: comm syz.1.539: corrupted inode contents [ 195.113078][ T6214] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #2: comm syz.1.539: mark_inode_dirty error [ 195.170183][ T6214] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #2: comm syz.1.539: corrupted inode contents [ 195.193467][ T6023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.201227][ T6214] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.539: mark_inode_dirty error [ 195.222897][ T6023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.232250][ T26] audit: type=1800 audit(1720342328.336:48): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.539" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 195.260987][ T6023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.453973][ T5786] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 195.526134][ T5786] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 195.552952][ T4062] device hsr_slave_0 left promiscuous mode [ 195.561289][ T6220] loop3: detected capacity change from 0 to 8192 [ 195.563280][ T5786] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 195.589709][ T4062] device hsr_slave_1 left promiscuous mode [ 195.603998][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.605302][ T5786] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 195.613678][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.643101][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.647917][ T5786] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 195.657044][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.683992][ T5786] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 195.696926][ T6220] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 195.716999][ T4242] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.732778][ T6220] REISERFS (device loop3): using ordered data mode [ 195.739651][ T6220] reiserfs: using flush barriers [ 195.750487][ T6220] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.767775][ T6220] REISERFS (device loop3): checking transaction log (loop3) [ 195.768809][ T4062] device bridge_slave_1 left promiscuous mode [ 195.793371][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.813621][ T4062] device bridge_slave_0 left promiscuous mode [ 195.828558][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.859570][ T4062] device hsr_slave_0 left promiscuous mode [ 195.875317][ T4062] device hsr_slave_1 left promiscuous mode [ 195.889562][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.907319][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.917578][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.950174][ T4242] usb 1-1: device descriptor read/64, error -71 [ 195.956582][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.974943][ T4062] device bridge_slave_1 left promiscuous mode [ 196.005619][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.051527][ T4062] device bridge_slave_0 left promiscuous mode [ 196.058165][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.102537][ T4062] device veth1_macvtap left promiscuous mode [ 196.125365][ T4062] device veth0_macvtap left promiscuous mode [ 196.144212][ T4062] device veth1_vlan left promiscuous mode [ 196.154954][ T4062] device veth0_vlan left promiscuous mode [ 196.168342][ T4062] device veth1_macvtap left promiscuous mode [ 196.184951][ T4062] device veth0_macvtap left promiscuous mode [ 196.193619][ T4062] device veth1_vlan left promiscuous mode [ 196.208580][ T4062] device veth0_vlan left promiscuous mode [ 196.228774][ T4242] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 196.418949][ T4242] usb 1-1: device descriptor read/64, error -71 [ 196.538983][ T4242] usb usb1-port1: attempt power cycle [ 196.888507][ T4062] team0 (unregistering): Port device team_slave_1 removed [ 196.915976][ T4062] team0 (unregistering): Port device team_slave_0 removed [ 196.944135][ T4062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.958840][ T4242] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.970603][ T4062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.061993][ T4242] usb 1-1: device descriptor read/8, error -71 [ 197.077430][ T4062] bond0 (unregistering): Released all slaves [ 197.322753][ T4062] team0 (unregistering): Port device team_slave_1 removed [ 197.357577][ T4242] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.373394][ T4062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.393704][ T4062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.459123][ T4242] usb 1-1: device descriptor read/8, error -71 [ 197.501556][ T4062] bond0 (unregistering): Released all slaves [ 197.593254][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.605650][ T4242] usb usb1-port1: unable to enumerate USB device [ 197.712357][ T6019] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.732810][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.749674][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.789187][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.804955][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.836756][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.843936][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.895425][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.909775][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.937357][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.964982][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.972201][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.027761][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.052813][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.081691][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.131488][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.187001][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.215937][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.243449][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.282983][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.306928][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.362726][ T6019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.384193][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.427418][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.446981][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.470354][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.492956][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.511387][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.544485][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.611548][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.629763][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.659271][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.666380][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.744261][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.753127][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.794795][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.814732][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.821985][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.891028][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.908334][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.982924][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.026624][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.056465][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.109397][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.140913][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.165314][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.209595][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.236666][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.270697][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.291981][ T6023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.352221][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.370882][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.378533][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.760560][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.768079][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.795318][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.869327][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.897196][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.997364][ T6023] device veth0_vlan entered promiscuous mode [ 200.021272][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.036948][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.058479][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.073807][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.096956][ T6019] device veth0_vlan entered promiscuous mode [ 200.175076][ T6023] device veth1_vlan entered promiscuous mode [ 200.229233][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.258107][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.276217][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.297433][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.335861][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.377345][ T6019] device veth1_vlan entered promiscuous mode [ 200.465972][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.475281][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.494767][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.503864][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.614843][ T6023] device veth0_macvtap entered promiscuous mode [ 200.662262][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.678547][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.688530][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.703753][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.714706][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.749561][ T6019] device veth0_macvtap entered promiscuous mode [ 200.761204][ T6023] device veth1_macvtap entered promiscuous mode [ 200.801011][ T6019] device veth1_macvtap entered promiscuous mode [ 200.866050][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.877208][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.894352][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.907601][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.940465][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.977407][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.036362][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.068819][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.118682][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.186313][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.239818][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.289582][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.309632][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.336285][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.388364][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.426859][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.485362][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.538767][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.599636][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.661138][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.721916][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.767973][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.815818][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.851160][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.893590][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.923101][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.943175][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.962983][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.010667][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.033153][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.054473][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.079700][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.110164][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.137702][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.166069][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.198666][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.233171][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.274806][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.307511][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.324331][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.338096][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.376672][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.423045][ T6023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.462763][ T6023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.515885][ T6023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.525146][ T6023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.548213][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.579735][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.608052][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 202.722625][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 202.732136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 202.741334][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 202.750488][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 203.231780][ T6019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.245400][ T6019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.264720][ T6019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.288081][ T6019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.787679][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.805225][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.839701][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.848845][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.893758][ T4066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.942621][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.966159][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.988864][ T4066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.030351][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.040262][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.069009][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.145552][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.259512][ T3615] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.285345][ T6333] device gretap0 entered promiscuous mode [ 204.344399][ T6333] netlink: 'syz.4.499': attribute type 2 has an invalid length. [ 204.400300][ T6333] netlink: 9 bytes leftover after parsing attributes in process `syz.4.499'. [ 204.505388][ T6331] loop2: detected capacity change from 0 to 8192 [ 204.566499][ T3615] usb 4-1: Using ep0 maxpacket: 8 [ 204.671774][ T6331] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "context=staff_u" [ 204.698975][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.760019][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.793048][ T3615] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.834060][ T3615] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 204.858996][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.900033][ T3615] usb 4-1: config 0 descriptor?? [ 204.977454][ T6342] loop4: detected capacity change from 0 to 128 [ 205.109176][ T6331] tmpfs: Bad value for 'huge' [ 205.111387][ T6342] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.197708][ T6342] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.334928][ T3615] usbhid 4-1:0.0: can't add hid device: -71 [ 205.343579][ T3615] usbhid: probe of 4-1:0.0 failed with error -71 [ 205.400617][ T3615] usb 4-1: USB disconnect, device number 8 [ 205.909444][ T6375] loop2: detected capacity change from 0 to 1024 [ 205.922398][ T6371] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 206.217520][ T6378] loop4: detected capacity change from 0 to 4096 [ 206.282600][ T4062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.521068][ T4062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.568006][ T6391] loop2: detected capacity change from 0 to 512 [ 206.713791][ T6391] EXT4-fs (loop2): 1 truncate cleaned up [ 206.732075][ T4062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.742623][ T6391] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 206.796673][ T6391] EXT4-fs error (device loop2): dx_make_map:1327: inode #2: block 255: comm syz.2.566: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 206.848737][ T6391] EXT4-fs (loop2): Remounting filesystem read-only [ 206.858985][ T6391] EXT4-fs error (device loop2) in do_split:2092: Corrupt filesystem [ 206.884436][ T4062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.968806][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 207.172840][ T6407] loop2: detected capacity change from 0 to 512 [ 207.197467][ T6413] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 207.314765][ T6407] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.316409][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.334847][ T6407] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 207.368227][ T26] audit: type=1326 audit(1720342340.466:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 207.395154][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.406417][ T6374] device bridge_slave_0 entered promiscuous mode [ 207.415468][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.422746][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.431192][ T6374] device bridge_slave_1 entered promiscuous mode [ 207.514766][ T26] audit: type=1326 audit(1720342340.466:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 207.547694][ T26] audit: type=1326 audit(1720342340.466:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 207.576809][ T26] audit: type=1326 audit(1720342340.466:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 207.630246][ T6426] loop4: detected capacity change from 0 to 256 [ 207.687662][ T26] audit: type=1326 audit(1720342340.466:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 207.759544][ T26] audit: type=1326 audit(1720342340.466:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 207.825530][ T26] audit: type=1326 audit(1720342340.466:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 207.871992][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.920531][ T4240] Bluetooth: hci3: command 0x0409 tx timeout [ 207.924518][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.959489][ T26] audit: type=1326 audit(1720342340.496:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 208.063461][ T26] audit: type=1326 audit(1720342340.496:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ef20bd9 code=0x7ffc0000 [ 208.095870][ T6442] loop2: detected capacity change from 0 to 512 [ 208.146054][ T6374] team0: Port device team_slave_0 added [ 208.153416][ T26] audit: type=1800 audit(1720342340.646:58): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.571" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 208.197806][ T6374] team0: Port device team_slave_1 added [ 208.284266][ T6442] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 208.400963][ T6442] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 208.489661][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.496713][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.586261][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.614615][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.628725][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.664075][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.824687][ T6374] device hsr_slave_0 entered promiscuous mode [ 208.847154][ T6374] device hsr_slave_1 entered promiscuous mode [ 208.879821][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.897805][ T6374] Cannot create hsr debugfs directory [ 209.039575][ T4240] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 209.168145][ T6476] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 209.228396][ T6476] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 209.268304][ T6478] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 209.383242][ T6476] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 209.439446][ T4240] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 209.449495][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.477555][ T4240] usb 5-1: config 0 descriptor?? [ 209.526254][ T4062] device hsr_slave_0 left promiscuous mode [ 209.585427][ T4062] device hsr_slave_1 left promiscuous mode [ 209.610249][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.649953][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.670897][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.678465][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.691486][ T4062] device bridge_slave_1 left promiscuous mode [ 209.697795][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.805629][ T4062] device bridge_slave_0 left promiscuous mode [ 209.813769][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.862356][ T4062] device veth1_macvtap left promiscuous mode [ 209.881495][ T4062] device veth0_macvtap left promiscuous mode [ 209.897046][ T4062] device veth1_vlan left promiscuous mode [ 209.933976][ T4062] device veth0_vlan left promiscuous mode [ 210.002084][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 210.201105][ T4240] pegasus: probe of 5-1:0.0 failed with error -71 [ 210.226264][ T4240] usb 5-1: USB disconnect, device number 6 [ 210.288958][ T4242] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.414716][ T4062] team0 (unregistering): Port device team_slave_1 removed [ 210.432777][ T4062] team0 (unregistering): Port device team_slave_0 removed [ 210.450400][ T4062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.468206][ T4062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.566324][ T4242] usb 4-1: Using ep0 maxpacket: 32 [ 210.667468][ T4062] bond0 (unregistering): Released all slaves [ 210.719208][ T4242] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 210.730841][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.750280][ T4242] usb 4-1: config 0 descriptor?? [ 210.806059][ T4242] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 210.972619][ T6511] device hsr0 entered promiscuous mode [ 210.990032][ T6511] device macsec1 entered promiscuous mode [ 211.360834][ T6374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.430639][ T6374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.471049][ T6374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.478169][ T4242] gspca_sunplus: reg_w_riv err -71 [ 211.484014][ T4242] sunplus: probe of 4-1:0.0 failed with error -71 [ 211.496165][ T6374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.502736][ T4242] usb 4-1: USB disconnect, device number 9 [ 211.588885][ T3615] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 211.800852][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.808815][ T3615] usb 5-1: device descriptor read/64, error -71 [ 211.867633][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.886619][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.922105][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.969549][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.978451][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.000883][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.008214][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.078909][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 212.098770][ T3615] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.099835][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.129541][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.138567][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.170679][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.177887][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.248325][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.310666][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.318940][ T3615] usb 5-1: device descriptor read/64, error -71 [ 212.362304][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.376674][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.388532][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.417629][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.442032][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.449189][ T3615] usb usb5-port1: attempt power cycle [ 212.473020][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.497504][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.545642][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.578478][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.587380][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.624429][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.888886][ T3615] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.949689][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.957282][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.988997][ T3615] usb 5-1: device descriptor read/8, error -71 [ 213.001615][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.078581][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.087613][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.172861][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.190682][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.231631][ T6374] device veth0_vlan entered promiscuous mode [ 213.268127][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.268724][ T3615] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.277019][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.335173][ T6374] device veth1_vlan entered promiscuous mode [ 213.441423][ T3615] usb 5-1: device descriptor read/8, error -71 [ 213.442522][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.477164][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.505026][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.524815][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.546119][ T6374] device veth0_macvtap entered promiscuous mode [ 213.583467][ T3615] usb usb5-port1: unable to enumerate USB device [ 213.590554][ T6374] device veth1_macvtap entered promiscuous mode [ 213.600107][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 213.600123][ T26] audit: type=1326 audit(1720342346.706:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764e3d4bd9 code=0x7ffc0000 [ 213.610504][ T6551] loop3: detected capacity change from 0 to 40427 [ 213.672795][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.681143][ T26] audit: type=1326 audit(1720342346.736:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764e3d4bd9 code=0x7ffc0000 [ 213.705542][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.705572][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.705589][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.705614][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.776744][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.796909][ T26] audit: type=1326 audit(1720342346.746:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f764e3d4bd9 code=0x7ffc0000 [ 213.798427][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.836821][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.851898][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.876235][ T26] audit: type=1326 audit(1720342346.756:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764e3d4bd9 code=0x7ffc0000 [ 213.878878][ T6551] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 213.921632][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.931776][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.956948][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.965344][ T26] audit: type=1326 audit(1720342346.756:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764e3d4bd9 code=0x7ffc0000 [ 213.974620][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.006951][ T6551] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 214.033061][ T6551] F2FS-fs (loop3): invalid crc value [ 214.044627][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.055896][ T26] audit: type=1326 audit(1720342346.756:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f764e3d4bd9 code=0x7ffc0000 [ 214.077692][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.100613][ T6551] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.128109][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.158969][ T3615] Bluetooth: hci3: command 0x0419 tx timeout [ 214.167775][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.178925][ T26] audit: type=1326 audit(1720342346.756:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764e3d4bd9 code=0x7ffc0000 [ 214.218840][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.232232][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.248737][ T26] audit: type=1326 audit(1720342346.756:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764e3d4bd9 code=0x7ffc0000 [ 214.285593][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.285629][ T6551] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 214.305926][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.325088][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.346922][ T6551] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 214.365613][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.376957][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.416268][ T6374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.445389][ T6374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.472297][ T6374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.505574][ T6374] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.663517][ T6589] attempt to access beyond end of device [ 214.663517][ T6589] loop3: rw=10241, want=45104, limit=40427 [ 214.887748][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.995825][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.055579][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.071247][ T4064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.113382][ T4064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.249495][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.386607][ T6594] loop4: detected capacity change from 0 to 2048 [ 215.666690][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 215.676703][ T6596] loop1: detected capacity change from 0 to 32768 [ 215.848422][ T26] audit: type=1800 audit(1720342348.946:125): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.619" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 215.898335][ T6600] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.995797][ T6596] XFS (loop1): Mounting V5 Filesystem [ 216.182474][ T6610] loop3: detected capacity change from 0 to 512 [ 216.229261][ T6596] XFS (loop1): Ending clean mount [ 216.294756][ T6596] XFS (loop1): Quotacheck needed: Please wait. [ 216.516309][ T6610] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.542994][ T6596] XFS (loop1): Quotacheck: Done. [ 216.550119][ T6610] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038 (0x7fffffff) [ 216.737955][ T26] audit: type=1800 audit(1720342349.836:126): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.618" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 217.005742][ T3767] udevd[3767]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 217.021266][ T6374] XFS (loop1): Unmounting Filesystem [ 217.430883][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 217.597346][ T6623] sp0: Synchronizing with TNC [ 218.492737][ T6645] loop1: detected capacity change from 0 to 256 [ 218.608764][ T6645] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 218.630801][ T6647] loop4: detected capacity change from 0 to 128 [ 218.689217][ T6647] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 218.762993][ T6647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.422651][ T6657] loop4: detected capacity change from 0 to 256 [ 221.951333][ T6663] sched: RT throttling activated [ 221.962345][ T4240] Bluetooth: hci4: command 0x0409 tx timeout [ 222.001836][ T4240] Bluetooth: hci0: command 0x0406 tx timeout [ 222.308199][ T6652] chnl_net:caif_netlink_parms(): no params data found [ 222.385441][ T6023] ODEBUG: Out of memory. ODEBUG disabled [ 222.996195][ T6672] can: request_module (can-proto-0) failed. [ 223.030187][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.109052][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.145056][ T6688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.169093][ T6652] device bridge_slave_0 entered promiscuous mode [ 223.191220][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.198343][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.234341][ T6652] device bridge_slave_1 entered promiscuous mode [ 223.284917][ T6691] loop1: detected capacity change from 0 to 64 [ 223.316269][ T6652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.341642][ T6652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.477881][ T6652] team0: Port device team_slave_0 added [ 223.501450][ T6652] team0: Port device team_slave_1 added [ 223.570182][ T6652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.599772][ T6652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.738089][ T6698] program syz.0.646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.744830][ T6652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.757025][ T6699] loop3: detected capacity change from 0 to 64 [ 223.811990][ T6652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.831033][ T6652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.994639][ T6652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.007105][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 224.265400][ T6652] device hsr_slave_0 entered promiscuous mode [ 224.291765][ T6652] device hsr_slave_1 entered promiscuous mode [ 224.319981][ T6652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.347170][ T6652] Cannot create hsr debugfs directory [ 224.670625][ T6707] tipc: Started in network mode [ 224.675636][ T6707] tipc: Node identity 8000, cluster identity 4 [ 224.692866][ T6707] tipc: Node number set to 32768 [ 224.847496][ T6652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.125637][ T6652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.361744][ T6726] loop1: detected capacity change from 0 to 256 [ 225.370018][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 225.400585][ T6652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.431767][ T6726] FAT-fs (loop1): Unrecognized mount option "uni_xlaie90" or missing value [ 225.869069][ T13] usb 4-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 225.919784][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 225.965605][ T13] usb 4-1: config 1 has no interface number 0 [ 225.992518][ T13] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.046517][ T13] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 226.059494][ T13] usb 4-1: too many endpoints for config 1 interface 1 altsetting 183: 235, using maximum allowed: 30 [ 226.071207][ T13] usb 4-1: config 1 interface 1 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 226.099425][ T13] usb 4-1: config 1 interface 1 has no altsetting 1 [ 226.114737][ T3615] Bluetooth: hci4: command 0x040f tx timeout [ 226.139892][ T6652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.304260][ T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.317945][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.326655][ T13] usb 4-1: Product: syz [ 226.363630][ T13] usb 4-1: Manufacturer: syz [ 226.373973][ T13] usb 4-1: SerialNumber: syz [ 226.456397][ T13] usb 4-1: selecting invalid altsetting 1 [ 226.492693][ T6652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.525060][ T6652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.541738][ T6652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.554918][ T6753] loop1: detected capacity change from 0 to 128 [ 226.575910][ T6652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.630097][ T6753] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.669107][ T13] cdc_ncm 4-1:1.1: bind() failure [ 226.683239][ T13] usb 4-1: USB disconnect, device number 10 [ 226.798814][ T6753] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.891613][ T6652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.840270][ T6652] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.051328][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.068946][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.167970][ T3508] Bluetooth: hci4: command 0x0419 tx timeout [ 228.606837][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.616501][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.647794][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.654973][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.670682][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.685478][ T6789] loop4: detected capacity change from 0 to 2048 [ 228.685854][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.708786][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.716036][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.756516][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.783769][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.798457][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.799168][ T3767] udevd[3767]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 228.850543][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.866977][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.886345][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.890434][ T6789] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.899811][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.979542][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.032578][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.102061][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.136710][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.154134][ T6804] loop4: detected capacity change from 0 to 2048 [ 229.186882][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.220785][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.263216][ T3767] udevd[3767]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 229.354594][ T6804] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.444113][ T26] audit: type=1804 audit(1720342362.546:127): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.675" name="/newroot/35/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 229.577593][ T3767] udevd[3767]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 229.985269][ T4062] device hsr_slave_0 left promiscuous mode [ 230.016017][ T4062] device hsr_slave_1 left promiscuous mode [ 230.024887][ T6815] overlayfs: missing 'workdir' [ 230.431522][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.469578][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.487477][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.510079][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.521005][ T4062] device bridge_slave_1 left promiscuous mode [ 230.533247][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.558306][ T4062] device bridge_slave_0 left promiscuous mode [ 230.566192][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.597619][ T4062] device veth1_macvtap left promiscuous mode [ 230.597619][ T6803] loop3: detected capacity change from 0 to 32768 [ 230.613279][ T4062] device veth0_macvtap left promiscuous mode [ 230.619616][ T6803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.677 (6803) [ 230.631987][ T4062] device veth1_vlan left promiscuous mode [ 230.638575][ T4062] device veth0_vlan left promiscuous mode [ 230.651810][ T6803] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 230.681422][ T6803] BTRFS info (device loop3): using free space tree [ 230.681575][ T3767] udevd[3767]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system [ 230.702853][ T6803] BTRFS info (device loop3): has skinny extents [ 230.891285][ T6803] BTRFS info (device loop3): enabling ssd optimizations [ 231.384688][ T6840] loop3: detected capacity change from 0 to 8 [ 231.598711][ T3550] Bluetooth: hci2: command 0x0409 tx timeout [ 231.810292][ T4062] team0 (unregistering): Port device team_slave_1 removed [ 231.882797][ T4062] team0 (unregistering): Port device team_slave_0 removed [ 231.905827][ T4062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.925879][ T4062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.082555][ T4062] bond0 (unregistering): Released all slaves [ 232.285941][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.300074][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.405419][ T6652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.638926][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.649070][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.670278][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.681418][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.695120][ T6652] device veth0_vlan entered promiscuous mode [ 232.727337][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.736993][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.755561][ T6652] device veth1_vlan entered promiscuous mode [ 232.814478][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 232.862152][ T6851] loop3: detected capacity change from 0 to 32768 [ 232.953934][ T6851] ================================================================================ [ 232.965806][ T6652] device veth0_macvtap entered promiscuous mode [ 232.978229][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.991198][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.991448][ T3767] udevd[3767]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b2740000.tmp-b7:3' failed: Read-only file system [ 233.018543][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.031899][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.038761][ T6851] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:661:7 [ 233.060914][ T6652] device veth1_macvtap entered promiscuous mode [ 233.062931][ T6851] index 128 is out of range for type 's64[128]' (aka 'long long[128]') [ 233.085253][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.097224][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.137062][ T6851] CPU: 0 PID: 6851 Comm: syz.3.685 Not tainted 5.15.162-syzkaller #0 [ 233.145534][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 233.155624][ T6851] Call Trace: [ 233.158935][ T6851] [ 233.161928][ T6851] dump_stack_lvl+0x1e3/0x2d0 [ 233.166638][ T6851] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 233.172309][ T6851] ? panic+0x860/0x860 [ 233.176560][ T6851] ? mutex_lock_io_nested+0x60/0x60 [ 233.181768][ T6851] __ubsan_handle_out_of_bounds+0x118/0x140 [ 233.187679][ T6851] dbNextAG+0x3ef/0x630 [ 233.191986][ T6851] diAlloc+0x6c2/0x1750 [ 233.196205][ T6851] ialloc+0x8b/0x970 [ 233.200285][ T6851] jfs_create+0x1ba/0xbb0 [ 233.204625][ T6851] ? d_splice_alias+0x10f/0x330 [ 233.209489][ T6851] ? jfs_lookup+0x2bc/0x400 [ 233.214005][ T6851] ? jfs_lookup+0x400/0x400 [ 233.218514][ T6851] ? jfs_get_parent+0xa0/0xa0 [ 233.223227][ T6851] ? make_kgid+0x6f0/0x6f0 [ 233.227659][ T6851] ? generic_permission+0x21c/0x4f0 [ 233.232878][ T6851] ? inode_permission+0xf7/0x450 [ 233.237823][ T6851] ? bpf_lsm_inode_create+0x5/0x10 [ 233.242951][ T6851] ? security_inode_create+0xb4/0x100 [ 233.248687][ T6851] ? jfs_lookup+0x400/0x400 [ 233.253317][ T6851] path_openat+0x130a/0x2f20 [ 233.257989][ T6851] ? do_filp_open+0x460/0x460 [ 233.262741][ T6851] do_filp_open+0x21c/0x460 [ 233.267295][ T6851] ? vfs_tmpfile+0x2e0/0x2e0 [ 233.271925][ T6851] ? _raw_spin_unlock+0x24/0x40 [ 233.276787][ T6851] ? alloc_fd+0x594/0x630 [ 233.281146][ T6851] do_sys_openat2+0x13b/0x500 [ 233.285863][ T6851] ? read_lock_is_recursive+0x10/0x10 [ 233.291270][ T6851] ? do_sys_open+0x220/0x220 [ 233.295898][ T6851] __x64_sys_openat+0x243/0x290 [ 233.300800][ T6851] ? __ia32_sys_open+0x270/0x270 [ 233.305772][ T6851] ? syscall_enter_from_user_mode+0x2e/0x240 [ 233.311802][ T6851] ? lockdep_hardirqs_on+0x94/0x130 [ 233.317107][ T6851] ? syscall_enter_from_user_mode+0x2e/0x240 [ 233.323117][ T6851] do_syscall_64+0x3b/0xb0 [ 233.327565][ T6851] ? clear_bhb_loop+0x15/0x70 [ 233.332490][ T6851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.338418][ T6851] RIP: 0033:0x7ffb79785bd9 [ 233.342839][ T6851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.362552][ T6851] RSP: 002b:00007ffb78206048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.371364][ T6851] RAX: ffffffffffffffda RBX: 00007ffb79913f60 RCX: 00007ffb79785bd9 [ 233.379345][ T6851] RDX: 000000000000275a RSI: 00000000200005c0 RDI: ffffffffffffff9c [ 233.387358][ T6851] RBP: 00007ffb797f4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 233.395537][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.403519][ T6851] R13: 000000000000000b R14: 00007ffb79913f60 R15: 00007ffec32d06d8 [ 233.411535][ T6851] [ 233.476859][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.503730][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.537119][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.593040][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.603389][ T6851] ================================================================================ [ 233.627772][ T6851] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 233.635123][ T6851] CPU: 1 PID: 6851 Comm: syz.3.685 Not tainted 5.15.162-syzkaller #0 [ 233.643225][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 233.653841][ T6851] Call Trace: [ 233.657120][ T6851] [ 233.660043][ T6851] dump_stack_lvl+0x1e3/0x2d0 [ 233.664720][ T6851] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 233.670349][ T6851] ? panic+0x860/0x860 [ 233.674531][ T6851] panic+0x318/0x860 [ 233.678541][ T6851] ? check_panic_on_warn+0x1d/0xa0 [ 233.683699][ T6851] ? fb_is_primary_device+0xd0/0xd0 [ 233.688898][ T6851] ? dump_stack_lvl+0x24f/0x2d0 [ 233.693746][ T6851] ? mutex_lock_io_nested+0x60/0x60 [ 233.698940][ T6851] check_panic_on_warn+0x7e/0xa0 [ 233.703872][ T6851] __ubsan_handle_out_of_bounds+0x138/0x140 [ 233.709787][ T6851] dbNextAG+0x3ef/0x630 [ 233.713945][ T6851] diAlloc+0x6c2/0x1750 [ 233.715753][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.718108][ T6851] ialloc+0x8b/0x970 [ 233.729526][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 233.732389][ T6851] jfs_create+0x1ba/0xbb0 [ 233.742701][ T6851] ? d_splice_alias+0x10f/0x330 [ 233.747573][ T6851] ? jfs_lookup+0x2bc/0x400 [ 233.752090][ T6851] ? jfs_lookup+0x400/0x400 [ 233.756619][ T6851] ? jfs_get_parent+0xa0/0xa0 [ 233.760541][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.761333][ T6851] ? make_kgid+0x6f0/0x6f0 [ 233.775604][ T6851] ? generic_permission+0x21c/0x4f0 [ 233.780686][ T6853] loop4: detected capacity change from 0 to 32768 [ 233.780838][ T6851] ? inode_permission+0xf7/0x450 [ 233.792323][ T6851] ? bpf_lsm_inode_create+0x5/0x10 [ 233.797452][ T6851] ? security_inode_create+0xb4/0x100 [ 233.802847][ T6851] ? jfs_lookup+0x400/0x400 [ 233.807392][ T6851] path_openat+0x130a/0x2f20 [ 233.808805][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.812046][ T6851] ? do_filp_open+0x460/0x460 [ 233.827378][ T6851] do_filp_open+0x21c/0x460 [ 233.832016][ T6851] ? vfs_tmpfile+0x2e0/0x2e0 [ 233.836245][ T6652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.836825][ T6851] ? _raw_spin_unlock+0x24/0x40 [ 233.851760][ T6851] ? alloc_fd+0x594/0x630 [ 233.856131][ T6851] do_sys_openat2+0x13b/0x500 [ 233.860830][ T6851] ? read_lock_is_recursive+0x10/0x10 [ 233.861710][ T6652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.866263][ T6851] ? do_sys_open+0x220/0x220 [ 233.878089][ T6851] __x64_sys_openat+0x243/0x290 [ 233.883053][ T6851] ? __ia32_sys_open+0x270/0x270 [ 233.888182][ T6851] ? syscall_enter_from_user_mode+0x2e/0x240 [ 233.894188][ T6851] ? lockdep_hardirqs_on+0x94/0x130 [ 233.899388][ T6851] ? syscall_enter_from_user_mode+0x2e/0x240 [ 233.905847][ T6851] do_syscall_64+0x3b/0xb0 [ 233.910267][ T6851] ? clear_bhb_loop+0x15/0x70 [ 233.914977][ T6851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.920894][ T6851] RIP: 0033:0x7ffb79785bd9 [ 233.925342][ T6851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.944960][ T6851] RSP: 002b:00007ffb78206048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.953419][ T6851] RAX: ffffffffffffffda RBX: 00007ffb79913f60 RCX: 00007ffb79785bd9 [ 233.961513][ T6851] RDX: 000000000000275a RSI: 00000000200005c0 RDI: ffffffffffffff9c [ 233.969854][ T6851] RBP: 00007ffb797f4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 233.977853][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.984162][ T6652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.985851][ T6851] R13: 000000000000000b R14: 00007ffb79913f60 R15: 00007ffec32d06d8 [ 233.985889][ T6851] [ 234.007815][ T6851] Kernel Offset: disabled [ 234.012495][ T6851] Rebooting in 86400 seconds..