last executing test programs: 28.118429669s ago: executing program 4 (id=262): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0xa7105b, &(0x7f0000000040)={[{@fat=@debug}, {}, {@dots}, {@nodots}, {@fat=@tz_utc}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@dots}, {@dots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@fat=@discard}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@quiet}]}, 0xfd, 0x1b2, &(0x7f00000005c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "9dd76af0419176db14d523122ab2d0d1203316400c24f12eb882946acdc40ce401e590f4584bcce6c2058ca6fb8708d4779efb79eda2a657531bb6e82c604da2", 0x15}, 0x48, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) r4 = add_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="a059e0c24cd6466d6b8400b54fec12a5261dc64a433daa2bfb27c0b6c2f569e03937b88c73e10f8355b7c7396c9f62342750b9f9020b6229b48df4b583baf40b6febbcbad1cfde6b2729c367f2a60e64826138ab67bb829831", 0x59, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000480)={r2, r3, r4}, &(0x7f00000004c0)=""/173, 0xad, &(0x7f0000000780)={&(0x7f0000000580)={'blake2b-160\x00'}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x2e, "eb1aca388bb9230b83667739ee5c7df1afb7aff4c235014b3db1c1ce2c1e69a700017f7c1340dda8a479938459ca"}, &(0x7f0000000200)=0x36) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r6, 0x6}, 0x8) 27.506624446s ago: executing program 4 (id=264): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x90) 27.42662532s ago: executing program 4 (id=266): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e0000001000000000000e54000000000000000004e2000000a002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000100000000000000000000000000000000000000000000000500000000000000d702000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 27.311971212s ago: executing program 4 (id=267): syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000006580)=ANY=[], 0x1, 0x61ec, &(0x7f0000006d00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x103) (async) mknodat$null(r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x103) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) (async) eventfd2(0x0, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x81000) (async) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) io_uring_setup(0x3c8e, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0xd05, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r3 = syz_open_pts(r2, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffff8}, @TCA_FQ_BUCKETS_LOG={0x8}]}}]}, 0x40}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) r8 = dup3(r3, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca2, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = openat$cgroup_ro(r8, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000006800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, &(0x7f0000000300)=ANY=[], 0x0, 0x264, &(0x7f0000006a80)="$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") (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000006800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, &(0x7f0000000300)=ANY=[], 0x0, 0x264, &(0x7f0000006a80)="$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") write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) 26.461735081s ago: executing program 4 (id=272): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='task\x00') fchdir(r0) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f00000003c0)='syscall\x00') pread64(r3, &(0x7f0000000180)=""/267, 0x10b, 0x0) 24.291654786s ago: executing program 4 (id=282): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a006bb21b000000000000000000000000000000080009"], 0x20}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000080)={0x0, 0x0, 0x8000000}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580140007800800020000000000080001"], 0x3c}}, 0x0) r5 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nodiscard}, {@skip_balance}, {@usebackuproot}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x7}}, {@acl}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000000c0)={0x1}) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000340)=0x7, 0x4) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}) 6.20884301s ago: executing program 2 (id=371): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDDELIO(r0, 0x8919, 0x0) 6.178777488s ago: executing program 2 (id=372): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5421, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timerfd_create(0x0, 0x0) 6.068101217s ago: executing program 2 (id=373): mlockall(0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x25, 0x1, @thr={0x0, &(0x7f0000000440)}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) 4.431873654s ago: executing program 0 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000040), &(0x7f0000000740)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.760766185s ago: executing program 0 (id=385): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 3.71952581s ago: executing program 0 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0xff90}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) 3.571137335s ago: executing program 0 (id=389): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 3.522027945s ago: executing program 0 (id=392): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x80000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4000, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000340)=0x3ff, 0x4) fcntl$setlease(r0, 0x400, 0x2) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvfrom$unix(r1, 0x0, 0x0, 0x12122, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="cd276adfe0fc84a66c1cb706c9b45975ded5b5e5bbe4b68cde092ee9f7e1a30b8e6c782a137986997789521091214d2a", @ANYRESOCT=r2], 0xfffffe64) 3.412376942s ago: executing program 3 (id=394): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 3.398575833s ago: executing program 3 (id=395): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f0000000500)=""/220, 0xdc, &(0x7f00000003c0)={&(0x7f00000000c0)={'sha256-arm64\x00'}}) 3.308747138s ago: executing program 3 (id=397): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x6c3f, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 3.308334105s ago: executing program 1 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 3.308044387s ago: executing program 3 (id=399): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 3.256273721s ago: executing program 3 (id=400): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x500, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.764058326s ago: executing program 2 (id=401): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000180), 0x0}, 0x20) 2.488627075s ago: executing program 2 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 488.893768ms ago: executing program 3 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd63"], 0xfdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 460.043196ms ago: executing program 0 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd"], 0xfdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 412.669018ms ago: executing program 1 (id=405): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r3, &(0x7f0000000180), 0x0}, 0x20) 408.648265ms ago: executing program 2 (id=406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd63"], 0xfdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 341.431552ms ago: executing program 1 (id=407): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) sendmsg$sock(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 191.728416ms ago: executing program 1 (id=408): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0xc) 131.845357ms ago: executing program 1 (id=409): socket$inet_sctp(0x2, 0x0, 0x84) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, &(0x7f0000000500)) socket$inet6_sctp(0x1c, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000940)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 0s ago: executing program 1 (id=410): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="18000300010003", 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[], 0x0) epoll_create1(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124300000000009500000700020000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) lseek(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4000000000000000}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010800000000000000000b000000", @ANYRES32=r4, @ANYBLOB="0c00990005002c005080110001004abee339084eeef16f162471f400000008"], 0x60}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) kernel console output (not intermixed with test programs): vsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.461013][ T6378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.465527][ T6378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.469140][ T6378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.472311][ T6378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.475294][ T6378] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.477319][ T6378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.514436][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.516840][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.529994][ T7082] loop2: detected capacity change from 0 to 2048 [ 78.549139][ T7090] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.560935][ T7018] bridge_slave_0: entered allmulticast mode [ 78.619562][ T7018] bridge_slave_0: entered promiscuous mode [ 78.626973][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.630053][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.632124][ T7018] bridge_slave_1: entered allmulticast mode [ 78.637819][ T7018] bridge_slave_1: entered promiscuous mode [ 78.723106][ T7091] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.794024][ T7018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.818854][ T7018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.865623][ T7018] team0: Port device team_slave_0 added [ 78.886457][ T7018] team0: Port device team_slave_1 added [ 78.937964][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.939933][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.954646][ T7018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.971763][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.973664][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.015594][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.102609][ T7018] hsr_slave_0: entered promiscuous mode [ 79.139488][ T7018] hsr_slave_1: entered promiscuous mode [ 79.178013][ T7018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.184659][ T7018] Cannot create hsr debugfs directory [ 79.198331][ T3607] team0: left allmulticast mode [ 79.199775][ T3607] team_slave_0: left allmulticast mode [ 79.201322][ T3607] team_slave_1: left allmulticast mode [ 79.204101][ T3607] bridge0: port 3(team0) entered disabled state [ 79.227321][ T3607] bridge_slave_1: left allmulticast mode [ 79.227367][ T3607] bridge_slave_1: left promiscuous mode [ 79.227485][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.249479][ T3607] bridge_slave_0: left allmulticast mode [ 79.249505][ T3607] bridge_slave_0: left promiscuous mode [ 79.249628][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.180600][ T6378] Bluetooth: hci6: command tx timeout [ 80.578144][ T6378] Bluetooth: hci2: command tx timeout [ 80.976608][ T3607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.055556][ T3607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.122041][ T3607] bond0 (unregistering): Released all slaves [ 81.205254][ T6378] Bluetooth: hci4: unexpected cc 0x2039 length: 4 > 1 [ 81.301243][ T7109] loop2: detected capacity change from 0 to 8192 [ 81.354916][ T7109] loop2: p1 p4 [ 81.354916][ T7109] p1: [ 81.378206][ T7109] loop2: p4 start 201785344 is beyond EOD, truncated [ 81.657480][ T7037] udevd[7037]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 81.661253][ T7114] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 81.699679][ T7114] bridge0: port 3(team0) entered disabled state [ 81.701446][ T7091] udevd[7091]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 81.738654][ T7114] team0: left allmulticast mode [ 81.745092][ T7114] team_slave_0: left allmulticast mode [ 81.746740][ T7114] team_slave_1: left allmulticast mode [ 81.754908][ T7114] team0: left promiscuous mode [ 81.756290][ T7114] team_slave_0: left promiscuous mode [ 81.765207][ T7114] team_slave_1: left promiscuous mode [ 81.767019][ T7114] bridge0: port 3(team0) entered disabled state [ 81.826052][ T7114] batman_adv: batadv0: Adding interface: team0 [ 81.827880][ T7114] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.848223][ T7114] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 81.861505][ T7113] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 81.863810][ T7113] netlink: 2 bytes leftover after parsing attributes in process `syz.2.138'. [ 81.866506][ T7113] team0: entered promiscuous mode [ 81.888152][ T7113] team_slave_0: entered promiscuous mode [ 81.890184][ T7113] team_slave_1: entered promiscuous mode [ 81.899951][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.909633][ T7113] batman_adv: batadv0: Interface activated: team0 [ 81.928337][ T7113] batman_adv: batadv0: Interface deactivated: team0 [ 81.930578][ T7113] batman_adv: batadv0: Removing interface: team0 [ 81.941097][ T7113] bridge0: port 3(team0) entered blocking state [ 81.943663][ T7113] bridge0: port 3(team0) entered disabled state [ 81.949123][ T7113] team0: entered allmulticast mode [ 81.953785][ T7113] team_slave_0: entered allmulticast mode [ 81.958551][ T7113] team_slave_1: entered allmulticast mode [ 81.965494][ T7113] bridge0: port 3(team0) entered blocking state [ 81.967542][ T7113] bridge0: port 3(team0) entered forwarding state [ 82.073592][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 82.260188][ T6378] Bluetooth: hci6: command tx timeout [ 82.574374][ T3607] hsr_slave_0: left promiscuous mode [ 82.627985][ T3607] hsr_slave_1: left promiscuous mode [ 82.675394][ T6378] Bluetooth: hci2: command tx timeout [ 82.698322][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.700556][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.718561][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.720669][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.761092][ T3607] veth1_macvtap: left promiscuous mode [ 82.762557][ T3607] veth0_macvtap: left promiscuous mode [ 82.764125][ T3607] veth1_vlan: left promiscuous mode [ 82.765612][ T3607] veth0_vlan: left promiscuous mode [ 84.738077][ T6376] Bluetooth: hci2: command tx timeout [ 84.798380][ T3607] team_slave_1 (unregistering): left promiscuous mode [ 84.803962][ T3607] team0 (unregistering): Port device team_slave_1 removed [ 85.008362][ T3607] team_slave_0 (unregistering): left promiscuous mode [ 85.011254][ T3607] team0 (unregistering): Port device team_slave_0 removed [ 85.138078][ T6376] Bluetooth: hci5: command 0x0406 tx timeout [ 86.818075][ T6378] Bluetooth: hci2: command tx timeout [ 87.507269][ T7135] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 87.671129][ T7151] loop2: detected capacity change from 0 to 64 [ 87.716129][ T7151] hfs: get root inode failed [ 87.809665][ T6376] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.824856][ T6376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.827698][ T6376] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.838412][ T6376] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.842294][ T6376] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.844528][ T6376] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.903759][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.908274][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.910333][ T7086] bridge_slave_0: entered allmulticast mode [ 87.912565][ T7086] bridge_slave_0: entered promiscuous mode [ 88.068694][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.070718][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.072830][ T7086] bridge_slave_1: entered allmulticast mode [ 88.098146][ T7086] bridge_slave_1: entered promiscuous mode [ 88.124483][ T7155] loop2: detected capacity change from 0 to 32768 [ 88.149752][ T7155] btrfs: Deprecated parameter 'usebackuproot' [ 88.153969][ T7155] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 88.170286][ T7155] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.144 (7155) [ 88.184343][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.204883][ T7155] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.207746][ T7155] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 88.211808][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.350065][ T7155] BTRFS info (device loop2): rebuilding free space tree [ 88.374726][ T7155] BTRFS info (device loop2): disabling free space tree [ 88.376740][ T7155] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.388536][ T7155] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.391996][ T7086] team0: Port device team_slave_0 added [ 88.397115][ T7086] team0: Port device team_slave_1 added [ 88.479463][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 88.608808][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.610781][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.648019][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.652695][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.654671][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.682633][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.240382][ T6687] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.737407][ T7018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.782424][ T7018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.858129][ T6378] Bluetooth: hci3: command tx timeout [ 89.926719][ T3607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.973122][ T7018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.029668][ T7086] hsr_slave_0: entered promiscuous mode [ 90.068911][ T7086] hsr_slave_1: entered promiscuous mode [ 90.108047][ T7086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.110128][ T7086] Cannot create hsr debugfs directory [ 90.111798][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.113730][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.115856][ T7152] bridge_slave_0: entered allmulticast mode [ 90.125532][ T7152] bridge_slave_0: entered promiscuous mode [ 90.128996][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.131218][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.133409][ T7152] bridge_slave_1: entered allmulticast mode [ 90.135738][ T7152] bridge_slave_1: entered promiscuous mode [ 90.143049][ T7018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.209576][ T3607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.260538][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.337613][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.411791][ T3607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.456119][ T7152] team0: Port device team_slave_0 added [ 90.491752][ T7152] team0: Port device team_slave_1 added [ 90.559566][ T3607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.593855][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.595755][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.628909][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.633206][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.635037][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.648828][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.823532][ T7086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.940104][ T7152] hsr_slave_0: entered promiscuous mode [ 90.998616][ T7152] hsr_slave_1: entered promiscuous mode [ 91.028104][ T7152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.030304][ T7152] Cannot create hsr debugfs directory [ 91.140342][ T7086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.173376][ T7018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.282079][ T7018] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.350887][ T7086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.390832][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.392863][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.517807][ T7086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.563294][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.565328][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.584289][ T7018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.587183][ T7018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.760899][ T6376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.766348][ T6376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.770516][ T6376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.772812][ T3607] team0: left allmulticast mode [ 91.776239][ T3607] team_slave_0: left allmulticast mode [ 91.776355][ T6376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.777778][ T3607] team_slave_1: left allmulticast mode [ 91.783012][ T6376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.785252][ T6376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.792288][ T3607] bridge0: port 3(team0) entered disabled state [ 91.799457][ T3607] bridge_slave_1: left allmulticast mode [ 91.801084][ T3607] bridge_slave_1: left promiscuous mode [ 91.802680][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.829108][ T3607] bridge_slave_0: left allmulticast mode [ 91.830647][ T3607] bridge_slave_0: left promiscuous mode [ 91.832206][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.938071][ T6376] Bluetooth: hci3: command tx timeout [ 93.858214][ T6378] Bluetooth: hci1: command tx timeout [ 94.018059][ T6378] Bluetooth: hci3: command tx timeout [ 94.524575][ T3607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.560831][ T3607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.621665][ T3607] bond0 (unregistering): Released all slaves [ 95.429817][ T3607] bond0 (unregistering): Released all slaves [ 95.625258][ T7086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.776355][ T7086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.779619][ T6378] Bluetooth: hci4: command 0x0406 tx timeout [ 95.789658][ T7086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.829896][ T7086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.887520][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.938198][ T6376] Bluetooth: hci1: command tx timeout [ 96.098912][ T6376] Bluetooth: hci3: command tx timeout [ 96.449078][ T7018] veth0_vlan: entered promiscuous mode [ 96.462705][ T7233] chnl_net:caif_netlink_parms(): no params data found [ 96.516754][ T7018] veth1_vlan: entered promiscuous mode [ 96.810930][ T7018] veth0_macvtap: entered promiscuous mode [ 96.814627][ T7018] veth1_macvtap: entered promiscuous mode [ 96.880523][ T3607] hsr_slave_0: left promiscuous mode [ 96.938445][ T3607] hsr_slave_1: left promiscuous mode [ 97.028243][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.030386][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.033006][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.035165][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.049301][ T3607] hsr_slave_0: left promiscuous mode [ 97.088345][ T3607] hsr_slave_1: left promiscuous mode [ 97.204378][ T3607] veth1_macvtap: left promiscuous mode [ 97.206263][ T3607] veth0_macvtap: left promiscuous mode [ 97.207884][ T3607] veth1_vlan: left promiscuous mode [ 97.218601][ T3607] veth0_vlan: left promiscuous mode [ 97.222394][ T3607] veth1_macvtap: left promiscuous mode [ 97.223994][ T3607] veth0_macvtap: left promiscuous mode [ 97.225606][ T3607] veth1_vlan: left promiscuous mode [ 97.235755][ T3607] veth0_vlan: left promiscuous mode [ 98.028429][ T6376] Bluetooth: hci1: command tx timeout [ 99.536221][ T3607] team_slave_1 (unregistering): left promiscuous mode [ 99.542120][ T3607] team0 (unregistering): Port device team_slave_1 removed [ 99.811592][ T3607] team_slave_0 (unregistering): left promiscuous mode [ 99.815763][ T3607] team0 (unregistering): Port device team_slave_0 removed [ 100.108290][ T6376] Bluetooth: hci1: command tx timeout [ 101.181691][ T6378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.184627][ T6378] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.187453][ T6378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.197378][ T6378] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.200879][ T6378] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 101.202990][ T6378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.218171][ T6376] Bluetooth: hci5: command tx timeout [ 105.308062][ T6376] Bluetooth: hci5: command tx timeout [ 106.772942][ T7152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.776484][ T7152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.780672][ T7152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.799012][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.800996][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.803193][ T7233] bridge_slave_0: entered allmulticast mode [ 106.805587][ T7233] bridge_slave_0: entered promiscuous mode [ 106.814575][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.817865][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.820894][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.823761][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.826350][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.829356][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.832413][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.835268][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.839979][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.913072][ T7152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.916835][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.922240][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.924429][ T7233] bridge_slave_1: entered allmulticast mode [ 106.927183][ T7233] bridge_slave_1: entered promiscuous mode [ 106.942604][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.945640][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.955097][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.958429][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.961049][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.963807][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.966506][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.969659][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.973415][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.979917][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.984421][ T7018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.986887][ T7018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.990093][ T7018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.992569][ T7018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.010079][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.030745][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.034283][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.085635][ T7233] team0: Port device team_slave_0 added [ 107.098912][ T7233] team0: Port device team_slave_1 added [ 107.111740][ T1746] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.113791][ T1746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.157135][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.159309][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.166172][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.174597][ T1746] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.176529][ T1746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.186892][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.189320][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.196390][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.228379][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.230542][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.275934][ T2055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.278912][ T2055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.360209][ T7233] hsr_slave_0: entered promiscuous mode [ 107.378832][ T6376] Bluetooth: hci5: command tx timeout [ 107.398533][ T7233] hsr_slave_1: entered promiscuous mode [ 107.468663][ T7233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.470825][ T7233] Cannot create hsr debugfs directory [ 107.475938][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.550251][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 107.569806][ T7152] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.621697][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.623754][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.626771][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.628800][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.700474][ T7152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.703483][ T7152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.803147][ T7233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.860452][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.862505][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.864763][ T7296] bridge_slave_0: entered allmulticast mode [ 107.867261][ T7296] bridge_slave_0: entered promiscuous mode [ 107.881801][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.883911][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.886128][ T7296] bridge_slave_1: entered allmulticast mode [ 107.899250][ T7296] bridge_slave_1: entered promiscuous mode [ 107.970467][ T7233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.082874][ T7318] netlink: 'syz.0.150': attribute type 10 has an invalid length. [ 108.110078][ T7318] batman_adv: batadv0: Adding interface: team0 [ 108.118106][ T7318] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.146692][ T7318] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 108.151886][ T7319] netlink: 'syz.0.150': attribute type 10 has an invalid length. [ 108.163326][ T7319] netlink: 2 bytes leftover after parsing attributes in process `syz.0.150'. [ 108.166197][ T7319] team0: entered promiscuous mode [ 108.167753][ T7319] team_slave_0: entered promiscuous mode [ 108.170564][ T7319] team_slave_1: entered promiscuous mode [ 108.173640][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.175794][ T7319] batman_adv: batadv0: Interface activated: team0 [ 108.177729][ T7319] batman_adv: batadv0: Interface deactivated: team0 [ 108.180609][ T7319] batman_adv: batadv0: Removing interface: team0 [ 108.184338][ T7319] bridge0: port 3(team0) entered blocking state [ 108.187795][ T7319] bridge0: port 3(team0) entered disabled state [ 108.191388][ T7319] team0: entered allmulticast mode [ 108.192856][ T7319] team_slave_0: entered allmulticast mode [ 108.194629][ T7319] team_slave_1: entered allmulticast mode [ 108.204846][ T7319] bridge0: port 3(team0) entered blocking state [ 108.206746][ T7319] bridge0: port 3(team0) entered forwarding state [ 108.240490][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.410855][ T7233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.424318][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.437461][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.594825][ T7331] loop0: detected capacity change from 0 to 2048 [ 108.600873][ T7233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.619353][ T7296] team0: Port device team_slave_0 added [ 108.622873][ T7296] team0: Port device team_slave_1 added [ 108.631278][ T7331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.653921][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.667779][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.667799][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.667817][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.679447][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.679465][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.679483][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.745273][ T7331] xt_CONNSECMARK: invalid mode: 0 [ 108.748576][ T7331] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.151: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 108.756664][ T7331] EXT4-fs (loop0): Remounting filesystem read-only [ 108.771678][ T7018] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.782263][ T7296] hsr_slave_0: entered promiscuous mode [ 108.809169][ T7296] hsr_slave_1: entered promiscuous mode [ 108.849167][ T7296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.851342][ T7296] Cannot create hsr debugfs directory [ 109.096654][ T3607] team0: left allmulticast mode [ 109.098340][ T3607] team_slave_0: left allmulticast mode [ 109.101063][ T3607] team_slave_1: left allmulticast mode [ 109.102835][ T3607] bridge0: port 3(team0) entered disabled state [ 109.106134][ T3607] bridge_slave_1: left allmulticast mode [ 109.107888][ T3607] bridge_slave_1: left promiscuous mode [ 109.109879][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.113702][ T3607] bridge_slave_0: left allmulticast mode [ 109.115245][ T3607] bridge_slave_0: left promiscuous mode [ 109.116851][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.458233][ T6376] Bluetooth: hci5: command tx timeout [ 110.722008][ T3607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.760843][ T3607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.830757][ T3607] bond0 (unregistering): Released all slaves [ 110.926955][ T7233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.947320][ T7233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.951909][ T7233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.970672][ T7152] veth0_vlan: entered promiscuous mode [ 110.993832][ T7086] veth0_vlan: entered promiscuous mode [ 110.996122][ T7233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.080423][ T7296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.324392][ T7296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.334421][ T7152] veth1_vlan: entered promiscuous mode [ 111.339489][ T7086] veth1_vlan: entered promiscuous mode [ 111.484800][ T7296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.504801][ T7152] veth0_macvtap: entered promiscuous mode [ 111.520657][ T7152] veth1_macvtap: entered promiscuous mode [ 111.677554][ T7086] veth0_macvtap: entered promiscuous mode [ 111.760411][ T7296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.777476][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.786133][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.793955][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.796938][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.802357][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.805247][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.808296][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.813722][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.816289][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.826342][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.830323][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.877616][ T3607] hsr_slave_0: left promiscuous mode [ 111.908504][ T3607] hsr_slave_1: left promiscuous mode [ 112.018595][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.020756][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.023565][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.025649][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.039343][ T3607] veth1_macvtap: left promiscuous mode [ 112.040928][ T3607] veth0_macvtap: left promiscuous mode [ 112.042503][ T3607] veth1_vlan: left promiscuous mode [ 112.044133][ T3607] veth0_vlan: left promiscuous mode [ 113.788959][ T3607] team_slave_1 (unregistering): left promiscuous mode [ 113.795812][ T3607] team0 (unregistering): Port device team_slave_1 removed [ 113.978515][ T3607] team_slave_0 (unregistering): left promiscuous mode [ 113.982791][ T3607] team0 (unregistering): Port device team_slave_0 removed [ 116.315800][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.319875][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.322662][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.325511][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.328332][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.331109][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.333701][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.336539][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.340814][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.355877][ T7086] veth1_macvtap: entered promiscuous mode [ 116.383252][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.395682][ T7152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.400494][ T7152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.402939][ T7152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.405390][ T7152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.429426][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.429480][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.429490][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.429502][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.429514][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.429526][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.429537][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.429548][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.429563][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.429574][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.430694][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.431973][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.431992][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.432001][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.432013][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.432024][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.432035][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.432046][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.432058][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.432080][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.432092][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.433020][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.434798][ T7086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.434828][ T7086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.434849][ T7086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.434885][ T7086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.477147][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.622166][ T1746] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.622234][ T1746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.628561][ T383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.628579][ T383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.678926][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.680949][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.698615][ T383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.701256][ T383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.755366][ T7233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.763746][ T7296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.776272][ T7296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.782345][ T7296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.800550][ T383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.802754][ T383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.821510][ T7296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.882863][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.882885][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.032203][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.054051][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.096400][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.113029][ T7233] veth0_vlan: entered promiscuous mode [ 117.125614][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.127685][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.134064][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.136117][ T3795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.161198][ T7233] veth1_vlan: entered promiscuous mode [ 117.226010][ T7233] veth0_macvtap: entered promiscuous mode [ 117.253986][ T7296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.256898][ T7296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.292127][ T7233] veth1_macvtap: entered promiscuous mode [ 117.326729][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.349308][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.352082][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.366657][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.376816][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.382877][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.385611][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.388042][ T6378] Bluetooth: hci6: command 0x0406 tx timeout [ 117.393809][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.396554][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.399967][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.402697][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.405482][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.430041][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.446812][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.470913][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.473701][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.476499][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.504554][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.507509][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.521117][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.523983][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.526691][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.544105][ T7360] loop4: detected capacity change from 0 to 32768 [ 117.558154][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.560942][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.569063][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.572213][ T7360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.129 (7360) [ 117.587334][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.603075][ T7360] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.605953][ T7360] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 117.608212][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.155'. [ 117.612422][ T7360] BTRFS info (device loop4): using free-space-tree [ 117.660803][ T7233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.663482][ T7233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.665946][ T7233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.669047][ T7233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.768534][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.798268][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.800579][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.805221][ T7296] veth0_vlan: entered promiscuous mode [ 117.822379][ T7296] veth1_vlan: entered promiscuous mode [ 117.850703][ T7086] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.872732][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.874329][ T7296] veth0_macvtap: entered promiscuous mode [ 117.874919][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.929652][ T7296] veth1_macvtap: entered promiscuous mode [ 117.951131][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.954032][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.956775][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.978674][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.981603][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.984495][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.987294][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.015887][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.023466][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.026311][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.037277][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.044011][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.046878][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.056528][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.068862][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.097111][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.118782][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.121450][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.124284][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.138944][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.141831][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.144508][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.164386][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.169478][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.177801][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.187879][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.192191][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.220888][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.226975][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.259639][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.264011][ T7296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.266314][ T7296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.284144][ T7367] loop1: detected capacity change from 0 to 32768 [ 119.600993][ T7367] btrfs: Unknown parameter 'fragment' [ 119.643480][ T7296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.646132][ T7296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.726139][ T7395] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 119.795601][ T7395] batman_adv: batadv0: Adding interface: team0 [ 119.797519][ T7395] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.878301][ T7395] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 119.906628][ T7394] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 119.916514][ T7394] netlink: 2 bytes leftover after parsing attributes in process `syz.3.147'. [ 119.940451][ T7394] team0: entered promiscuous mode [ 119.942089][ T7394] team_slave_0: entered promiscuous mode [ 119.943981][ T7394] team_slave_1: entered promiscuous mode [ 119.969454][ T7394] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.978645][ T7394] batman_adv: batadv0: Interface activated: team0 [ 119.981446][ T7394] batman_adv: batadv0: Interface deactivated: team0 [ 119.994456][ T7394] batman_adv: batadv0: Removing interface: team0 [ 120.002798][ T7394] bridge0: port 3(team0) entered blocking state [ 120.009535][ T7394] bridge0: port 3(team0) entered disabled state [ 120.017104][ T7394] team0: entered allmulticast mode [ 120.039586][ T7394] team_slave_0: entered allmulticast mode [ 120.049050][ T7394] team_slave_1: entered allmulticast mode [ 120.070269][ T7394] bridge0: port 3(team0) entered blocking state [ 120.072160][ T7394] bridge0: port 3(team0) entered forwarding state [ 120.240690][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.242780][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.283911][ T7403] loop4: detected capacity change from 0 to 4096 [ 120.358386][ T7403] ntfs3: loop4: Failed to load $MFT (-2). [ 120.520793][ T7406] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 120.568975][ T7406] bridge0: port 3(team0) entered disabled state [ 120.609545][ T7406] team0: left allmulticast mode [ 120.633187][ T7406] team_slave_0: left allmulticast mode [ 120.646544][ T7406] team_slave_1: left allmulticast mode [ 120.678189][ T7406] team0: left promiscuous mode [ 120.679771][ T7406] team_slave_0: left promiscuous mode [ 120.681271][ T7406] team_slave_1: left promiscuous mode [ 120.715886][ T7406] bridge0: port 3(team0) entered disabled state [ 120.793758][ T7406] batman_adv: batadv0: Adding interface: team0 [ 120.822981][ T7406] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.948923][ T7406] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.960663][ T7407] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 121.026947][ T7407] netlink: 2 bytes leftover after parsing attributes in process `syz.3.160'. [ 121.038789][ T7407] team0: entered promiscuous mode [ 121.040384][ T7407] team_slave_0: entered promiscuous mode [ 121.042172][ T7407] team_slave_1: entered promiscuous mode [ 121.044909][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.047226][ T7407] batman_adv: batadv0: Interface activated: team0 [ 121.092496][ T7407] batman_adv: batadv0: Interface deactivated: team0 [ 121.138363][ T7407] batman_adv: batadv0: Removing interface: team0 [ 121.178556][ T7407] bridge0: port 3(team0) entered blocking state [ 121.180389][ T7407] bridge0: port 3(team0) entered disabled state [ 121.182336][ T7407] team0: entered allmulticast mode [ 121.183753][ T7407] team_slave_0: entered allmulticast mode [ 121.185301][ T7407] team_slave_1: entered allmulticast mode [ 121.187709][ T7407] bridge0: port 3(team0) entered blocking state [ 121.189618][ T7407] bridge0: port 3(team0) entered forwarding state [ 121.213527][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.215685][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.371219][ T6376] Bluetooth: hci5: unexpected cc 0x1408 length: 57 > 4 [ 121.413101][ T7423] wg1: entered promiscuous mode [ 121.415210][ T7423] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 122.602341][ T30] audit: type=1326 audit(122.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.4.169" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f44d68 code=0x0 [ 122.762902][ T7436] loop1: detected capacity change from 0 to 40427 [ 122.774833][ T7436] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 122.780705][ T7436] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.817040][ T7436] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.847419][ T7436] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.850950][ T7436] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.026474][ T7442] loop2: detected capacity change from 0 to 32768 [ 123.038397][ T7442] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.168 (7442) [ 123.071485][ T7442] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.074488][ T7442] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 123.077012][ T7442] BTRFS info (device loop2): using free-space-tree [ 123.469703][ T7474] afs: Unknown parameter '(+dyn' [ 123.501544][ T7474] loop1: detected capacity change from 0 to 256 [ 123.576530][ T7474] FAT-fs (loop1): Directory bread(block 64) failed [ 123.579991][ T7474] FAT-fs (loop1): Directory bread(block 65) failed [ 123.589467][ T7474] FAT-fs (loop1): Directory bread(block 66) failed [ 123.591332][ T7474] FAT-fs (loop1): Directory bread(block 67) failed [ 123.593230][ T7474] FAT-fs (loop1): Directory bread(block 68) failed [ 123.819894][ T7474] FAT-fs (loop1): Directory bread(block 69) failed [ 123.838921][ T7296] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.886577][ T7474] FAT-fs (loop1): Directory bread(block 70) failed [ 123.995804][ T7474] FAT-fs (loop1): Directory bread(block 71) failed [ 124.164514][ T7474] FAT-fs (loop1): Directory bread(block 72) failed [ 124.166734][ T7474] FAT-fs (loop1): Directory bread(block 73) failed [ 124.254878][ T7479] loop4: detected capacity change from 0 to 512 [ 124.321847][ T7479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.615665][ T7489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'. [ 124.669688][ T7086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.419575][ T6376] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 125.422320][ T6376] Bluetooth: hci5: Injecting HCI hardware error event [ 125.428264][ T6376] Bluetooth: hci5: hardware error 0x00 [ 125.767646][ T7507] Injecting memory failure for pfn 0x13cc5d at process virtual address 0x20ffd000 [ 125.771897][ T7507] Memory failure: 0x13cc5d: recovery action for dirty LRU page: Recovered [ 125.774211][ T7507] Injecting memory failure for pfn 0x13cc5e at process virtual address 0x20ffe000 [ 125.784891][ T7507] Memory failure: 0x13cc5e: recovery action for dirty LRU page: Recovered [ 125.787507][ T7507] Injecting memory failure for pfn 0x13cc5f at process virtual address 0x20fff000 [ 125.796406][ T7507] Memory failure: 0x13cc5f: recovery action for dirty LRU page: Recovered [ 125.798116][ T30] audit: type=1326 audit(125.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7513 comm="syz.4.182" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f44d68 code=0x0 [ 125.850854][ T7494] loop1: detected capacity change from 0 to 32768 [ 125.853076][ T7494] btrfs: Unknown parameter 'fragment' [ 125.941237][ T2322] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.943232][ T2322] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.224930][ T7518] loop2: detected capacity change from 0 to 32768 [ 126.238642][ T7518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.183 (7518) [ 126.545125][ T7518] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.564654][ T7518] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 126.576890][ T7518] BTRFS info (device loop2): using free-space-tree [ 126.938094][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.944762][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.947783][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.965181][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.974500][ T5942] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.976759][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.105355][ T7523] loop1: detected capacity change from 0 to 32768 [ 127.127489][ T7523] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.184 (7523) [ 127.167239][ T7523] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.187875][ T7523] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.190694][ T7523] BTRFS info (device loop1): disk space caching is enabled [ 127.226458][ T7544] loop4: detected capacity change from 0 to 32768 [ 127.235468][ T7544] BTRFS: device /dev/loop4 (7:4) using temp-fsid 6a1e2349-537c-479c-bd4d-f0f95bd16824 [ 127.238644][ T7544] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.186 (7544) [ 127.302787][ T7544] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.314606][ T7544] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.327679][ T7544] BTRFS info (device loop4): disk space caching is enabled [ 127.399266][ T7523] BTRFS info (device loop1): rebuilding free space tree [ 127.430425][ T7523] BTRFS info (device loop1): disabling free space tree [ 127.432347][ T7523] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.448830][ T7523] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.508939][ T7544] BTRFS info (device loop4): rebuilding free space tree [ 127.527446][ T7544] BTRFS info (device loop4): disabling free space tree [ 127.527495][ T7523] BTRFS info (device loop1): balance: start -sprofiles=0x100000000,usage=0..0,limit=0 [ 127.534974][ T7544] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.538401][ T7523] BTRFS info (device loop1): balance: ended with status: 0 [ 127.547522][ T7544] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.565997][ T7544] FAULT_INJECTION: forcing a failure. [ 127.565997][ T7544] name failslab, interval 1, probability 0, space 0, times 1 [ 127.573421][ T7544] CPU: 1 PID: 7544 Comm: syz.4.186 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 127.576185][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 127.578898][ T7544] Call trace: [ 127.579738][ T7544] dump_backtrace+0x1b8/0x1e4 [ 127.581064][ T7544] show_stack+0x2c/0x3c [ 127.582270][ T7544] dump_stack_lvl+0xe4/0x150 [ 127.583607][ T7544] dump_stack+0x1c/0x28 [ 127.584740][ T7544] should_fail_ex+0x3b0/0x50c [ 127.586014][ T7544] __should_failslab+0xc8/0x128 [ 127.587374][ T7544] should_failslab+0x10/0x28 [ 127.588648][ T7544] kmem_cache_alloc_noprof+0x84/0x350 [ 127.590135][ T7544] btrfs_alloc_path+0x30/0x3c [ 127.591450][ T7544] insert_balance_item+0xf0/0x1648 [ 127.592918][ T7544] btrfs_balance+0x7f8/0xe50 [ 127.594154][ T7544] btrfs_ioctl_balance+0x3e4/0x6ec [ 127.595603][ T7544] btrfs_ioctl+0x70c/0xaec [ 127.596827][ T7544] __arm64_sys_ioctl+0x14c/0x1c8 [ 127.598230][ T7544] invoke_syscall+0x98/0x2b8 [ 127.599598][ T7544] el0_svc_common+0x130/0x23c [ 127.600946][ T7544] do_el0_svc+0x48/0x58 [ 127.602146][ T7544] el0_svc+0x54/0x168 [ 127.603276][ T7544] el0t_64_sync_handler+0x84/0xfc [ 127.604672][ T7544] el0t_64_sync+0x190/0x194 [ 127.606012][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.613043][ T7296] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.618090][ T7152] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.686039][ T7086] BTRFS info (device loop4): last unmount of filesystem 6a1e2349-537c-479c-bd4d-f0f95bd16824 [ 127.778084][ T6376] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 127.874195][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.953553][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 128.076152][ T7601] Injecting memory failure for pfn 0x132ede at process virtual address 0x20ffd000 [ 128.664641][ T7601] Memory failure: 0x132ede: recovery action for dirty LRU page: Recovered [ 128.667076][ T7601] Injecting memory failure for pfn 0x132edf at process virtual address 0x20ffe000 [ 128.749556][ T7609] loop1: detected capacity change from 0 to 2048 [ 128.790252][ T7601] Memory failure: 0x132edf: recovery action for dirty LRU page: Recovered [ 128.792718][ T7601] Injecting memory failure for pfn 0x134058 at process virtual address 0x20fff000 [ 128.796401][ T7601] Memory failure: 0x134058: recovery action for dirty LRU page: Recovered [ 128.849002][ T7609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.881201][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.884653][ T30] audit: type=1326 audit(128.850:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.2.196" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8144d68 code=0x0 [ 128.919809][ T7609] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 128.925404][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.194'. [ 128.934478][ T7609] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 65536 with max blocks 1 with error 28 [ 128.943552][ T7609] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.943552][ T7609] [ 128.946370][ T7609] EXT4-fs (loop1): Total free blocks count 0 [ 128.948504][ T7609] EXT4-fs (loop1): Free/Dirty block details [ 128.950687][ T7609] EXT4-fs (loop1): free_blocks=2415919504 [ 128.952269][ T7609] EXT4-fs (loop1): dirty_blocks=16 [ 128.965488][ T7609] EXT4-fs (loop1): Block reservation details [ 128.967216][ T7609] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 128.983063][ T7611] loop4: detected capacity change from 0 to 32768 [ 128.999388][ T7611] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.192 (7611) [ 129.024181][ T7611] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.027090][ T7611] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.036768][ T7152] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.038170][ T7611] BTRFS info (device loop4): disk space caching is enabled [ 129.072173][ T7611] BTRFS info (device loop4): rebuilding free space tree [ 129.080236][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.093301][ T7611] BTRFS info (device loop4): disabling free space tree [ 129.100893][ T7611] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.110469][ T7611] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.138927][ T6376] Bluetooth: hci4: command tx timeout [ 129.188662][ T7611] BTRFS info (device loop4): balance: start -sprofiles=0x100000000,usage=0..0,limit=0 [ 129.191493][ T7611] BTRFS info (device loop4): balance: ended with status: 0 [ 129.195396][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.207164][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.215026][ T7546] bridge_slave_0: entered allmulticast mode [ 129.225600][ T7546] bridge_slave_0: entered promiscuous mode [ 129.230976][ T7086] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.370486][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.394412][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.396755][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.407113][ T7546] bridge_slave_1: entered allmulticast mode [ 129.410738][ T7546] bridge_slave_1: entered promiscuous mode [ 129.436880][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.441727][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.479440][ T7546] team0: Port device team_slave_0 added [ 129.487823][ T7546] team0: Port device team_slave_1 added [ 129.554534][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.556420][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.584957][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.596379][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.605230][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.616450][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.662558][ T7643] loop4: detected capacity change from 0 to 32768 [ 129.678100][ T7643] btrfs: Deprecated parameter 'usebackuproot' [ 129.681145][ T7643] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.687581][ T7643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.198 (7643) [ 129.708253][ T7643] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.733314][ T7643] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 129.789665][ T7546] hsr_slave_0: entered promiscuous mode [ 129.818441][ T7546] hsr_slave_1: entered promiscuous mode [ 129.847888][ T7643] BTRFS info (device loop4): rebuilding free space tree [ 129.848151][ T7546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.852516][ T7546] Cannot create hsr debugfs directory [ 129.864978][ T7643] BTRFS info (device loop4): disabling free space tree [ 129.874481][ T7643] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.890351][ T7643] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.898369][ T11] team0: left allmulticast mode [ 129.899794][ T11] team_slave_0: left allmulticast mode [ 129.901356][ T11] team_slave_1: left allmulticast mode [ 129.902986][ T11] bridge0: port 3(team0) entered disabled state [ 129.929068][ T11] bridge_slave_1: left allmulticast mode [ 129.930644][ T11] bridge_slave_1: left promiscuous mode [ 129.932341][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.986447][ T11] bridge_slave_0: left allmulticast mode [ 129.988305][ T11] bridge_slave_0: left promiscuous mode [ 129.990172][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.747263][ T7086] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.768287][ T7673] loop1: detected capacity change from 0 to 32768 [ 130.776956][ T7673] btrfs: Deprecated parameter 'usebackuproot' [ 130.781593][ T7673] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 130.797410][ T7673] BTRFS: device /dev/loop1 (7:1) using temp-fsid 56b6847e-7d25-4c9a-a6d3-765b5c805a67 [ 130.804306][ T7673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.203 (7673) [ 130.845847][ T7673] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.846810][ T7670] loop2: detected capacity change from 0 to 32768 [ 130.869110][ T7673] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 130.890149][ T7670] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.202 (7670) [ 130.958385][ T7670] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.961449][ T7670] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 130.964293][ T7670] BTRFS info (device loop2): disk space caching is enabled [ 131.002381][ T7673] BTRFS info (device loop1): rebuilding free space tree [ 131.020086][ T7673] BTRFS info (device loop1): disabling free space tree [ 131.022222][ T7673] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.029810][ T7673] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.086270][ T7670] BTRFS info (device loop2): rebuilding free space tree [ 131.113767][ T7670] BTRFS info (device loop2): disabling free space tree [ 131.124697][ T7670] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.142145][ T7670] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.308935][ T6376] Bluetooth: hci4: command tx timeout [ 131.316694][ T7670] FAULT_INJECTION: forcing a failure. [ 131.316694][ T7670] name failslab, interval 1, probability 0, space 0, times 0 [ 131.321532][ T7670] CPU: 0 PID: 7670 Comm: syz.2.202 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 131.324342][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 131.327184][ T7670] Call trace: [ 131.328045][ T7670] dump_backtrace+0x1b8/0x1e4 [ 131.329383][ T7670] show_stack+0x2c/0x3c [ 131.330552][ T7670] dump_stack_lvl+0xe4/0x150 [ 131.331850][ T7670] dump_stack+0x1c/0x28 [ 131.333063][ T7670] should_fail_ex+0x3b0/0x50c [ 131.334473][ T7670] __should_failslab+0xc8/0x128 [ 131.335868][ T7670] should_failslab+0x10/0x28 [ 131.337214][ T7670] kmem_cache_alloc_noprof+0x84/0x350 [ 131.338682][ T7670] btrfs_alloc_path+0x30/0x3c [ 131.340005][ T7670] insert_balance_item+0xf0/0x1648 [ 131.341433][ T7670] btrfs_balance+0x7f8/0xe50 [ 131.342707][ T7670] btrfs_ioctl_balance+0x3e4/0x6ec [ 131.344224][ T7670] btrfs_ioctl+0x70c/0xaec [ 131.345553][ T7670] __arm64_sys_ioctl+0x14c/0x1c8 [ 131.346957][ T7670] invoke_syscall+0x98/0x2b8 [ 131.348216][ T7670] el0_svc_common+0x130/0x23c [ 131.349499][ T7670] do_el0_svc+0x48/0x58 [ 131.350672][ T7670] el0_svc+0x54/0x168 [ 131.351759][ T7670] el0t_64_sync_handler+0x84/0xfc [ 131.353181][ T7670] el0t_64_sync+0x190/0x194 [ 131.806130][ T7717] Injecting memory failure for pfn 0x1343ef at process virtual address 0x20ffd000 [ 131.849228][ T7296] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 131.862392][ T7717] Memory failure: 0x1343ef: recovery action for dirty LRU page: Recovered [ 131.864705][ T7717] Injecting memory failure for pfn 0x1343f0 at process virtual address 0x20ffe000 [ 131.869956][ T7717] Memory failure: 0x1343f0: recovery action for dirty LRU page: Recovered [ 131.872383][ T7717] Injecting memory failure for pfn 0x1343f1 at process virtual address 0x20fff000 [ 131.875791][ T7717] Memory failure: 0x1343f1: recovery action for dirty LRU page: Recovered [ 131.939078][ T7152] BTRFS info (device loop1): last unmount of filesystem 56b6847e-7d25-4c9a-a6d3-765b5c805a67 [ 133.356861][ T7738] loop2: detected capacity change from 0 to 32768 [ 133.359344][ T7738] btrfs: Unknown parameter 'fragment' [ 133.378075][ T6376] Bluetooth: hci4: command tx timeout [ 133.410091][ T7595] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 133.900760][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.946069][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.007803][ T11] bond0 (unregistering): Released all slaves [ 134.064182][ T7740] netlink: 'syz.3.211': attribute type 2 has an invalid length. [ 134.087161][ T7737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.209'. [ 134.113108][ T7742] loop4: detected capacity change from 0 to 512 [ 134.126434][ T7742] EXT4-fs: journaled quota format not specified [ 134.188439][ T7595] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 134.227164][ T7746] tmpfs: Bad value for 'mpol' [ 134.330375][ T7753] loop4: detected capacity change from 0 to 2048 [ 134.335861][ T7753] udf: Unknown parameter '00000000000000000004' [ 134.972830][ T7595] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 135.261899][ T7750] loop1: detected capacity change from 0 to 32768 [ 135.280396][ T7750] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.214 (7750) [ 135.361616][ T7752] loop2: detected capacity change from 0 to 32768 [ 135.393221][ T7750] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.396277][ T7770] Injecting memory failure for pfn 0x13d298 at process virtual address 0x20ffd000 [ 135.396325][ T7750] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 135.401754][ T7770] Memory failure: 0x13d298: recovery action for dirty LRU page: Recovered [ 135.404095][ T7770] Injecting memory failure for pfn 0x13d299 at process virtual address 0x20ffe000 [ 135.406724][ T7770] Memory failure: 0x13d299: recovery action for dirty LRU page: Recovered [ 135.409118][ T7770] Injecting memory failure for pfn 0x13d29a at process virtual address 0x20fff000 [ 135.411694][ T7770] Memory failure: 0x13d29a: recovery action for dirty LRU page: Recovered [ 135.415305][ T7752] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.215 (7752) [ 135.421253][ T7750] BTRFS info (device loop1): using free-space-tree [ 135.437559][ T7752] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 135.448172][ T7752] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 135.450708][ T7752] BTRFS info (device loop2): disk space caching is enabled [ 135.462707][ T6376] Bluetooth: hci4: command tx timeout [ 135.628951][ T7807] Zero length message leads to an empty skb [ 135.648378][ T7752] BTRFS info (device loop2): rebuilding free space tree [ 135.674157][ T7773] loop4: detected capacity change from 0 to 32768 [ 135.676421][ T7773] btrfs: Deprecated parameter 'usebackuproot' [ 135.678402][ T7773] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 135.697650][ T7752] BTRFS info (device loop2): disabling free space tree [ 135.697816][ T7773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.218 (7773) [ 135.700661][ T7752] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.714512][ T7773] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.717428][ T7773] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 135.722244][ T7752] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.764545][ T7752] FAULT_INJECTION: forcing a failure. [ 135.764545][ T7752] name failslab, interval 1, probability 0, space 0, times 0 [ 135.788534][ T11] hsr_slave_0: left promiscuous mode [ 135.797797][ T7752] CPU: 0 PID: 7752 Comm: syz.2.215 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 135.800385][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 135.803152][ T7752] Call trace: [ 135.804108][ T7752] dump_backtrace+0x1b8/0x1e4 [ 135.805502][ T7752] show_stack+0x2c/0x3c [ 135.806643][ T7752] dump_stack_lvl+0xe4/0x150 [ 135.807965][ T7752] dump_stack+0x1c/0x28 [ 135.809102][ T7752] should_fail_ex+0x3b0/0x50c [ 135.810414][ T7752] __should_failslab+0xc8/0x128 [ 135.811750][ T7752] should_failslab+0x10/0x28 [ 135.812995][ T7752] kmem_cache_alloc_noprof+0x84/0x350 [ 135.814478][ T7752] start_transaction+0x4fc/0x15f4 [ 135.815838][ T7752] btrfs_start_transaction+0x34/0x44 [ 135.817372][ T7752] insert_balance_item+0x104/0x1648 [ 135.818738][ T7752] btrfs_balance+0x7f8/0xe50 [ 135.819987][ T7752] btrfs_ioctl_balance+0x3e4/0x6ec [ 135.821442][ T7752] btrfs_ioctl+0x70c/0xaec [ 135.822670][ T7752] __arm64_sys_ioctl+0x14c/0x1c8 [ 135.824069][ T7752] invoke_syscall+0x98/0x2b8 [ 135.825334][ T7752] el0_svc_common+0x130/0x23c [ 135.826666][ T7752] do_el0_svc+0x48/0x58 [ 135.827857][ T7752] el0_svc+0x54/0x168 [ 135.828959][ T7752] el0t_64_sync_handler+0x84/0xfc [ 135.830375][ T7752] el0t_64_sync+0x190/0x194 [ 135.862808][ T11] hsr_slave_1: left promiscuous mode [ 135.866111][ T7773] BTRFS info (device loop4): rebuilding free space tree [ 135.870513][ T7296] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 135.880488][ T7773] BTRFS info (device loop4): disabling free space tree [ 135.882595][ T7773] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.887509][ T7773] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.948652][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.951195][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.966361][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.969238][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.030571][ T11] veth1_macvtap: left promiscuous mode [ 136.032253][ T11] veth0_macvtap: left promiscuous mode [ 136.033931][ T11] veth1_vlan: left promiscuous mode [ 136.035445][ T11] veth0_vlan: left promiscuous mode [ 136.777815][ T7086] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.790906][ T7152] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.292244][ T7855] tmpfs: Bad value for 'mpol' [ 138.326938][ T7859] Injecting memory failure for pfn 0x1323b6 at process virtual address 0x20ffd000 [ 138.333033][ T7859] Memory failure: 0x1323b6: recovery action for dirty LRU page: Recovered [ 138.335466][ T7859] Injecting memory failure for pfn 0x133de1 at process virtual address 0x20ffe000 [ 138.338243][ T7859] Memory failure: 0x133de1: recovery action for dirty LRU page: Recovered [ 138.340663][ T7859] Injecting memory failure for pfn 0x13100e at process virtual address 0x20fff000 [ 138.343325][ T7859] Memory failure: 0x13100e: recovery action for dirty LRU page: Recovered [ 138.605587][ T7864] loop4: detected capacity change from 0 to 32768 [ 138.616921][ T7864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.230 (7864) [ 138.633001][ T7864] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.636089][ T7864] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 138.638956][ T7864] BTRFS info (device loop4): using free-space-tree [ 138.741581][ T7864] BTRFS info (device loop4): scrub: started on devid 1 [ 138.746495][ T7864] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 138.782967][ T7086] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.061156][ T7884] loop4: detected capacity change from 0 to 32768 [ 139.076911][ T7884] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.231 (7884) [ 139.092819][ T7884] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.095870][ T7884] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 139.103211][ T7884] BTRFS info (device loop4): using free-space-tree [ 139.568451][ T11] team_slave_1 (unregistering): left promiscuous mode [ 139.575042][ T11] team0 (unregistering): Port device team_slave_1 removed [ 139.755856][ T11] team_slave_0 (unregistering): left promiscuous mode [ 139.759903][ T11] team0 (unregistering): Port device team_slave_0 removed [ 142.282969][ T7911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.233'. [ 142.376342][ T7086] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.608336][ T7909] loop1: detected capacity change from 0 to 32768 [ 142.610651][ T7909] btrfs: Deprecated parameter 'usebackuproot' [ 142.612314][ T7909] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 142.647106][ T7909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.234 (7909) [ 142.665091][ T7909] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.680544][ T7909] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 142.895898][ T7909] BTRFS info (device loop1): rebuilding free space tree [ 142.918449][ T7909] BTRFS info (device loop1): disabling free space tree [ 142.920408][ T7909] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.923072][ T7909] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.067694][ T7546] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.131871][ T7546] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.143025][ T7546] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.168782][ T7546] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.668320][ T7932] loop4: detected capacity change from 0 to 32768 [ 143.670621][ T7932] btrfs: Deprecated parameter 'usebackuproot' [ 143.672324][ T7932] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 143.715459][ T7923] loop2: detected capacity change from 0 to 65536 [ 143.717887][ T7932] BTRFS: device /dev/loop4 (7:4) using temp-fsid 593130cc-f66e-4e7f-b188-911a16ef4d9d [ 143.720633][ T7932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.235 (7932) [ 143.800173][ T7932] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.810006][ T7152] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.815365][ T7932] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 143.842083][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.881638][ T7923] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 143.909945][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.920705][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.922711][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.942352][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.944455][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.016351][ T7932] BTRFS info (device loop4): rebuilding free space tree [ 144.031445][ T7923] XFS (loop2): Ending clean mount [ 144.048812][ T7932] BTRFS info (device loop4): disabling free space tree [ 144.050799][ T7932] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.053400][ T7932] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.065666][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.264734][ T7996] Injecting memory failure for pfn 0x13f8f7 at process virtual address 0x20ffd000 [ 145.283244][ T7546] veth0_vlan: entered promiscuous mode [ 145.329898][ T7546] veth1_vlan: entered promiscuous mode [ 145.346016][ T7996] Memory failure: 0x13f8f7: recovery action for dirty LRU page: Recovered [ 145.347367][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'. [ 145.348539][ T7996] Injecting memory failure for pfn 0x13f8f8 at process virtual address 0x20ffe000 [ 145.348677][ T7996] Memory failure: 0x13f8f8: recovery action for dirty LRU page: Recovered [ 145.348694][ T7996] Injecting memory failure for pfn 0x13f8f9 at process virtual address 0x20fff000 [ 145.348763][ T7996] Memory failure: 0x13f8f9: recovery action for dirty LRU page: Recovered [ 145.413819][ T7296] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 145.418546][ T7546] veth0_macvtap: entered promiscuous mode [ 145.432452][ T7086] BTRFS info (device loop4): last unmount of filesystem 593130cc-f66e-4e7f-b188-911a16ef4d9d [ 145.489688][ T7546] veth1_macvtap: entered promiscuous mode [ 145.594513][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.597427][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.647429][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.677984][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.680748][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.683506][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.686212][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.716625][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.728085][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.730952][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.733631][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.738406][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.741184][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.744468][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.768681][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.772270][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.774993][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.777592][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.808254][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.810979][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.838291][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.838323][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.838336][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.838351][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.838361][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.838382][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.838393][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.838409][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.838419][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.839463][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.843549][ T7546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.843579][ T7546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.843599][ T7546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.843618][ T7546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.056241][ T2055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.056263][ T2055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.091929][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.094162][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.137285][ T8006] loop1: detected capacity change from 0 to 32768 [ 146.146567][ T8006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.244 (8006) [ 146.175985][ T8006] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.183855][ T8006] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 146.197451][ T8006] BTRFS info (device loop1): using free-space-tree [ 146.449677][ T8052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'. [ 146.474022][ T8022] 9pnet_fd: Insufficient options for proto=fd [ 147.117232][ T8052] loop4: detected capacity change from 0 to 32768 [ 147.143334][ T8052] btrfs: Unknown parameter 'fragment' [ 147.164127][ T8063] loop0: detected capacity change from 0 to 32768 [ 147.179799][ T8063] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.249 (8063) [ 147.220141][ T7595] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 147.238761][ T8063] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 147.241758][ T8063] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 147.244347][ T8063] BTRFS info (device loop0): disk space caching is enabled [ 147.297375][ T7152] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.351865][ T8063] BTRFS info (device loop0): rebuilding free space tree [ 147.395207][ T8079] loop2: detected capacity change from 0 to 32768 [ 147.397629][ T8079] btrfs: Deprecated parameter 'usebackuproot' [ 147.399370][ T8079] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 147.407593][ T8063] BTRFS info (device loop0): disabling free space tree [ 147.407594][ T8079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.250 (8079) [ 147.417196][ T8063] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.429410][ T8063] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.435337][ T8079] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.483173][ T8079] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 147.485024][ T8063] BTRFS info (device loop0): balance: start -sprofiles=0x100000000,usage=0..0,limit=0 [ 147.503922][ T8063] BTRFS info (device loop0): balance: ended with status: 0 [ 147.661628][ T8112] Injecting memory failure for pfn 0x13e179 at process virtual address 0x20ffd000 [ 147.679141][ T8112] Memory failure: 0x13e179: recovery action for dirty LRU page: Recovered [ 147.681543][ T8112] Injecting memory failure for pfn 0x13e178 at process virtual address 0x20ffe000 [ 147.684244][ T8112] Memory failure: 0x13e178: recovery action for dirty LRU page: Recovered [ 147.686656][ T8112] Injecting memory failure for pfn 0x13e177 at process virtual address 0x20fff000 [ 147.690356][ T8112] Memory failure: 0x13e177: recovery action for dirty LRU page: Recovered [ 147.756911][ T7546] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 147.780367][ T8079] BTRFS info (device loop2): rebuilding free space tree [ 147.814284][ T8079] BTRFS info (device loop2): disabling free space tree [ 147.816292][ T8079] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.858168][ T8079] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.095229][ T8138] Injecting memory failure for pfn 0x1b0317 at process virtual address 0x20ffd000 [ 148.217599][ T8138] Memory failure: 0x1b0317: recovery action for reserved kernel page: Ignored [ 148.886658][ T8157] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 148.945588][ T7296] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.976768][ T8157] batman_adv: batadv0: Adding interface: team0 [ 149.028306][ T8157] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.091596][ T8157] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 149.139473][ T8158] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 149.168100][ T8158] netlink: 2 bytes leftover after parsing attributes in process `syz.1.260'. [ 149.170952][ T8158] team0: entered promiscuous mode [ 149.180736][ T8158] team_slave_0: entered promiscuous mode [ 149.182524][ T8158] team_slave_1: entered promiscuous mode [ 149.208546][ T8161] loop4: detected capacity change from 0 to 256 [ 149.209669][ T8158] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.213886][ T8158] batman_adv: batadv0: Interface activated: team0 [ 149.274074][ T8158] batman_adv: batadv0: Interface deactivated: team0 [ 149.275968][ T8158] batman_adv: batadv0: Removing interface: team0 [ 149.324376][ T7595] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 149.355700][ T8158] bridge0: port 3(team0) entered blocking state [ 149.372959][ T8158] bridge0: port 3(team0) entered disabled state [ 149.437370][ T8158] team0: entered allmulticast mode [ 149.439252][ T8158] team_slave_0: entered allmulticast mode [ 149.476203][ T8158] team_slave_1: entered allmulticast mode [ 149.495308][ T8158] bridge0: port 3(team0) entered blocking state [ 149.497342][ T8158] bridge0: port 3(team0) entered forwarding state [ 149.544480][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.262'. [ 149.790169][ T8154] loop0: detected capacity change from 0 to 32768 [ 149.861879][ T8154] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.259 (8154) [ 149.891864][ T8154] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 149.894705][ T8154] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 149.918177][ T8154] BTRFS info (device loop0): disk space caching is enabled [ 150.038806][ T8154] BTRFS info (device loop0): rebuilding free space tree [ 150.049959][ T8191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.265'. [ 150.061396][ T8154] BTRFS info (device loop0): disabling free space tree [ 150.063409][ T8154] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.066151][ T8154] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.156113][ T8154] BTRFS info (device loop0): balance: start -sprofiles=0x100000000,usage=0..0,limit=89 [ 150.166317][ T8154] BTRFS info (device loop0): balance: ended with status: 0 [ 150.235192][ T7546] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 150.345426][ T8164] loop2: detected capacity change from 0 to 32768 [ 150.445282][ T8174] loop4: detected capacity change from 0 to 32768 [ 150.589437][ T8196] loop1: detected capacity change from 0 to 32768 [ 150.591871][ T8196] btrfs: Unknown parameter 'fragment' [ 150.651102][ T8216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.666051][ T8164] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 150.680541][ T8164] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 150.722292][ T7086] non-latin1 character 0x3ff found in JFS file name [ 150.744464][ T7086] mount with iocharset=utf8 to access [ 150.759632][ T8164] bcachefs (loop2): alloc_read... done [ 150.762751][ T8164] bcachefs (loop2): stripes_read... done [ 150.764425][ T8164] bcachefs (loop2): snapshots_read... done [ 150.770216][ T8164] bcachefs (loop2): journal_replay... done [ 150.771966][ T8164] bcachefs (loop2): resume_logged_ops... done [ 150.801158][ T8164] bcachefs (loop2): going read-write [ 150.803977][ T7086] read_mapping_page failed! [ 150.825421][ T8164] bcachefs (loop2): done starting filesystem [ 150.834643][ T7086] ERROR: (device loop4): txAbort: [ 150.834643][ T7086] [ 150.874757][ T7086] ERROR: (device loop4): remounting filesystem as read-only [ 151.814628][ T7296] bcachefs (loop2): shutting down [ 151.816321][ T7296] bcachefs (loop2): going read-only [ 151.831830][ T7296] bcachefs (loop2): finished waiting for writes to stop [ 151.912395][ T7296] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 152.113883][ T7296] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 152.127242][ T7296] bcachefs (loop2): shutdown complete, journal seq 15 [ 152.130224][ T7296] bcachefs (loop2): marking filesystem clean [ 152.151591][ T7296] bcachefs (loop2): shutdown complete [ 152.948627][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.976177][ T6364] IPVS: starting estimator thread 0... [ 152.979935][ T8244] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 152.997041][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 153.078165][ T8246] IPVS: using max 26 ests per chain, 62400 per kthread [ 153.158527][ T6376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.164418][ T6376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.168015][ T6376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.174521][ T6376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.176401][ T6376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.176837][ T6376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.214844][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.313341][ T8262] binder: 8258:8262 Acquire 1 refcount change on invalid ref -1 ret -22 [ 153.328406][ T8262] binder: 8258:8262 got transaction to invalid handle, 1 [ 153.330890][ T8262] binder: 8262:8258 cannot find target node [ 153.332618][ T8262] binder: 8258:8262 transaction call to 0:0 failed 4/29201/-22, size 104-24 line 3066 [ 153.388360][ T6364] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.551588][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.646819][ T8272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.288'. [ 153.721837][ T8256] loop1: detected capacity change from 0 to 32768 [ 153.724056][ T8256] btrfs: Deprecated parameter 'usebackuproot' [ 153.725770][ T8256] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 153.739284][ T8256] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.286 (8256) [ 153.751296][ T8256] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.754110][ T8256] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 153.854472][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.917553][ T8256] BTRFS info (device loop1): rebuilding free space tree [ 153.927376][ T8256] BTRFS info (device loop1): disabling free space tree [ 153.936593][ T8256] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.958287][ T8256] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.971281][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.277'. [ 154.253709][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 154.274056][ T42] bridge_slave_1: left allmulticast mode [ 154.275726][ T42] bridge_slave_1: left promiscuous mode [ 154.277785][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.500851][ T42] bridge_slave_0: left allmulticast mode [ 154.557587][ T42] bridge_slave_0: left promiscuous mode [ 154.699439][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.844794][ T7152] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.228617][ T5942] Bluetooth: hci2: command tx timeout [ 155.521023][ T8331] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 155.569238][ T8321] loop1: detected capacity change from 0 to 65536 [ 155.588500][ T8321] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 155.619335][ T8321] XFS (loop1): Ending clean mount [ 156.319550][ T7152] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 157.001187][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.041135][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.080988][ T42] bond0 (unregistering): Released all slaves [ 157.175526][ T8354] loop0: detected capacity change from 0 to 512 [ 157.225103][ T7350] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 157.299641][ T6376] Bluetooth: hci2: command tx timeout [ 157.642867][ T8365] Injecting memory failure for pfn 0x130475 at process virtual address 0x20ffd000 [ 157.651658][ T8365] Memory failure: 0x130475: recovery action for dirty LRU page: Recovered [ 157.654101][ T8365] Injecting memory failure for pfn 0x130476 at process virtual address 0x20ffe000 [ 157.656708][ T8365] Memory failure: 0x130476: recovery action for dirty LRU page: Recovered [ 157.659420][ T8365] Injecting memory failure for pfn 0x130477 at process virtual address 0x20fff000 [ 157.662241][ T8365] Memory failure: 0x130477: recovery action for dirty LRU page: Recovered [ 157.776985][ T8363] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 158.069131][ T8363] batman_adv: batadv0: Adding interface: team0 [ 158.070857][ T8363] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.077757][ T8363] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 158.166385][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.194893][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.197271][ T8252] bridge_slave_0: entered allmulticast mode [ 158.203613][ T8252] bridge_slave_0: entered promiscuous mode [ 158.343435][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 158.536845][ T8367] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 158.539396][ T8367] netlink: 2 bytes leftover after parsing attributes in process `syz.2.299'. [ 158.541909][ T8367] team0: entered promiscuous mode [ 158.543846][ T8367] team_slave_0: entered promiscuous mode [ 158.545461][ T8367] team_slave_1: entered promiscuous mode [ 158.547883][ T8367] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.581405][ T8367] batman_adv: batadv0: Interface activated: team0 [ 158.583372][ T8367] batman_adv: batadv0: Interface deactivated: team0 [ 158.585229][ T8367] batman_adv: batadv0: Removing interface: team0 [ 158.607398][ T8367] bridge0: port 3(team0) entered blocking state [ 158.611903][ T8367] bridge0: port 3(team0) entered disabled state [ 158.613738][ T8367] team0: entered allmulticast mode [ 158.615109][ T8367] team_slave_0: entered allmulticast mode [ 158.616733][ T8367] team_slave_1: entered allmulticast mode [ 158.628842][ T8367] bridge0: port 3(team0) entered blocking state [ 158.630698][ T8367] bridge0: port 3(team0) entered forwarding state [ 158.644641][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.647702][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.652766][ T8252] bridge_slave_1: entered allmulticast mode [ 158.662866][ T8252] bridge_slave_1: entered promiscuous mode [ 158.852438][ T6376] Bluetooth: hci0: command 0x080f tx timeout [ 158.979943][ T8380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.302'. [ 159.143409][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.191219][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.353185][ T8387] loop0: detected capacity change from 0 to 32768 [ 159.380540][ T8387] btrfs: Unknown parameter 'fragment' [ 159.398126][ T5942] Bluetooth: hci2: command tx timeout [ 159.505334][ T8252] team0: Port device team_slave_0 added [ 159.520528][ T8401] loop1: detected capacity change from 0 to 32768 [ 159.523747][ T8401] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.307 (8401) [ 159.539531][ T8401] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.542210][ T8401] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 159.544574][ T8401] BTRFS info (device loop1): using free-space-tree [ 159.683969][ T42] hsr_slave_0: left promiscuous mode [ 159.718461][ T42] hsr_slave_1: left promiscuous mode [ 159.830154][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.832203][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.888827][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.895927][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.343316][ T42] veth1_macvtap: left promiscuous mode [ 160.423343][ T42] veth0_macvtap: left promiscuous mode [ 160.424874][ T42] veth1_vlan: left promiscuous mode [ 160.426505][ T42] veth0_vlan: left promiscuous mode [ 160.660600][ T8404] loop2: detected capacity change from 0 to 65536 [ 160.752454][ T8404] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 160.800141][ T8404] XFS (loop2): Ending clean mount [ 160.834388][ T8404] XFS (loop2): Quotacheck needed: Please wait. [ 160.957300][ T8404] XFS (loop2): Quotacheck: Done. [ 161.030359][ T6427] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x8004 [ 161.034113][ T6427] XFS (loop2): Unmount and run xfs_repair [ 161.035781][ T6427] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 161.047413][ T6427] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 161.052000][ T6427] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 ................ [ 161.054755][ T6427] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 161.058451][ T6427] 00000030: 00 00 00 01 21 53 59 0a 00 00 00 05 00 00 00 03 ....!SY......... [ 161.061410][ T6427] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 00 00 00 00 ......;\........ [ 161.063998][ T6427] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 161.066521][ T6427] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 161.081349][ T6427] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 ................ [ 161.084727][ T8404] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x8004 len 2 error 74 [ 161.458299][ T5942] Bluetooth: hci2: command tx timeout [ 163.003786][ T42] team0 (unregistering): Port device team_slave_1 removed [ 163.201961][ T42] team0 (unregistering): Port device team_slave_0 removed [ 165.704364][ T8252] team0: Port device team_slave_1 added [ 165.728128][ T8458] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 165.758072][ T8458] batman_adv: batadv0: Adding interface: team0 [ 165.759953][ T8458] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.766920][ T8458] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 165.791440][ T8459] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 165.793983][ T8459] netlink: 2 bytes leftover after parsing attributes in process `syz.0.311'. [ 165.796710][ T8459] team0: entered promiscuous mode [ 165.798822][ T8459] team_slave_0: entered promiscuous mode [ 165.800501][ T8459] team_slave_1: entered promiscuous mode [ 165.802928][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.804943][ T8459] batman_adv: batadv0: Interface activated: team0 [ 165.806921][ T8459] batman_adv: batadv0: Interface deactivated: team0 [ 165.811022][ T8459] batman_adv: batadv0: Removing interface: team0 [ 165.817080][ T8459] bridge0: port 3(team0) entered blocking state [ 165.819910][ T8459] bridge0: port 3(team0) entered disabled state [ 165.823734][ T8459] team0: entered allmulticast mode [ 165.828074][ T8459] team_slave_0: entered allmulticast mode [ 165.829675][ T8459] team_slave_1: entered allmulticast mode [ 165.832348][ T8459] bridge0: port 3(team0) entered blocking state [ 165.834104][ T8459] bridge0: port 3(team0) entered forwarding state [ 165.851475][ T7152] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.881380][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.885370][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.898906][ T7296] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 165.904673][ T7296] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 165.912969][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.918323][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.933968][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.941743][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.153509][ T8477] Injecting memory failure for pfn 0x1304f4 at process virtual address 0x20ffd000 [ 166.157583][ T8477] Memory failure: 0x1304f4: recovery action for dirty LRU page: Recovered [ 166.160471][ T8477] Injecting memory failure for pfn 0x1304f5 at process virtual address 0x20ffe000 [ 166.190203][ T8477] Memory failure: 0x1304f5: recovery action for dirty LRU page: Recovered [ 166.192839][ T8477] Injecting memory failure for pfn 0x1304f6 at process virtual address 0x20fff000 [ 166.263580][ T8477] Memory failure: 0x1304f6: recovery action for dirty LRU page: Recovered [ 166.373230][ T8252] hsr_slave_0: entered promiscuous mode [ 166.448433][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 166.469467][ T8252] hsr_slave_1: entered promiscuous mode [ 166.512926][ T8252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.515492][ T8252] Cannot create hsr debugfs directory [ 166.517168][ T8482] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 166.535745][ T8482] bridge0: port 3(team0) entered disabled state [ 166.622911][ T8482] team0: left allmulticast mode [ 166.624695][ T8482] team_slave_0: left allmulticast mode [ 166.626444][ T8482] team_slave_1: left allmulticast mode [ 166.648767][ T8482] team0: left promiscuous mode [ 166.723671][ T8482] team_slave_0: left promiscuous mode [ 166.725603][ T8482] team_slave_1: left promiscuous mode [ 166.754996][ T8482] bridge0: port 3(team0) entered disabled state [ 166.779053][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 166.780559][ T8494] netlink: 232 bytes leftover after parsing attributes in process `syz.1.312'. [ 166.822049][ T8482] batman_adv: batadv0: Adding interface: team0 [ 166.832887][ T8482] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.842264][ T8482] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 166.848155][ T8480] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 166.850357][ T8480] netlink: 2 bytes leftover after parsing attributes in process `syz.0.315'. [ 166.858853][ T8480] team0: entered promiscuous mode [ 166.860383][ T8480] team_slave_0: entered promiscuous mode [ 166.862020][ T8480] team_slave_1: entered promiscuous mode [ 166.869758][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.871756][ T8480] batman_adv: batadv0: Interface activated: team0 [ 166.873614][ T8480] batman_adv: batadv0: Interface deactivated: team0 [ 166.875621][ T8480] batman_adv: batadv0: Removing interface: team0 [ 166.893810][ T8480] bridge0: port 3(team0) entered blocking state [ 166.895637][ T8480] bridge0: port 3(team0) entered disabled state [ 166.967761][ T8480] team0: entered allmulticast mode [ 166.969515][ T8480] team_slave_0: entered allmulticast mode [ 166.971113][ T8480] team_slave_1: entered allmulticast mode [ 166.973587][ T8480] bridge0: port 3(team0) entered blocking state [ 166.975376][ T8480] bridge0: port 3(team0) entered forwarding state [ 167.017876][ T8507] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 167.390512][ T8532] loop2: detected capacity change from 0 to 8 [ 167.442613][ T8468] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 167.811091][ T8543] pim6reg1: entered promiscuous mode [ 167.813125][ T8543] pim6reg1: entered allmulticast mode [ 167.946194][ T42] bridge_slave_1: left allmulticast mode [ 167.968077][ T42] bridge_slave_1: left promiscuous mode [ 167.970011][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.978433][ T8555] netlink: 172 bytes leftover after parsing attributes in process `syz.3.336'. [ 167.988065][ T42] bridge_slave_0: left allmulticast mode [ 167.989835][ T42] bridge_slave_0: left promiscuous mode [ 167.991542][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.052458][ T8559] netlink: 72 bytes leftover after parsing attributes in process `syz.0.338'. [ 168.057284][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 168.063779][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.338'. [ 168.130755][ T8567] loop1: detected capacity change from 0 to 128 [ 168.137407][ T8567] FAT-fs (loop1): Directory bread(block 32) failed [ 168.140647][ T8567] FAT-fs (loop1): Directory bread(block 33) failed [ 168.142611][ T8567] FAT-fs (loop1): Directory bread(block 34) failed [ 168.154484][ T8567] FAT-fs (loop1): Directory bread(block 35) failed [ 168.156677][ T8567] FAT-fs (loop1): Directory bread(block 36) failed [ 168.163642][ T8567] FAT-fs (loop1): Directory bread(block 37) failed [ 168.168583][ T8567] FAT-fs (loop1): Directory bread(block 38) failed [ 168.184688][ T8567] FAT-fs (loop1): Directory bread(block 39) failed [ 168.186514][ T8567] FAT-fs (loop1): Directory bread(block 40) failed [ 168.197798][ T8567] FAT-fs (loop1): Directory bread(block 41) failed [ 168.406815][ T8575] loop1: detected capacity change from 0 to 2048 [ 168.440265][ T8575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.503304][ T8583] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.527803][ T8583] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1114 with error 28 [ 168.536841][ T8583] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.536841][ T8583] [ 168.546987][ T8583] EXT4-fs (loop1): Total free blocks count 0 [ 168.549019][ T8583] EXT4-fs (loop1): Free/Dirty block details [ 168.550628][ T8583] EXT4-fs (loop1): free_blocks=2415919104 [ 168.552092][ T8583] EXT4-fs (loop1): dirty_blocks=1600 [ 168.557119][ T8583] EXT4-fs (loop1): Block reservation details [ 168.563852][ T8583] EXT4-fs (loop1): i_reserved_data_blocks=115 [ 168.812592][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1114 with max blocks 2048 with error 28 [ 169.013540][ T8588] loop1: detected capacity change from 0 to 512 [ 169.016658][ T8588] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 169.022505][ T8588] UDF-fs: Scanning with blocksize 512 failed [ 169.036320][ T8588] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 169.040374][ T8588] UDF-fs: Scanning with blocksize 1024 failed [ 169.042871][ T8588] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 169.045241][ T8588] UDF-fs: Scanning with blocksize 2048 failed [ 169.047794][ T8588] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 169.055367][ T8588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.820699][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.864347][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.901814][ T42] bond0 (unregistering): Released all slaves [ 170.403296][ T8629] loop1: detected capacity change from 0 to 512 [ 170.410188][ T8629] EXT4-fs: Ignoring removed nobh option [ 170.440966][ T8629] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 170.444130][ T8629] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 170.476944][ T8629] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.365: bad orphan inode 13 [ 170.500942][ T8629] ext4_test_bit(bit=12, block=4) = 1 [ 170.508204][ T8629] is_bad_inode(inode)=0 [ 170.516215][ T8629] NEXT_ORPHAN(inode)=0 [ 170.539265][ T8629] max_ino=32 [ 170.540313][ T8629] i_nlink=1 [ 170.541613][ T8629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.597739][ T7152] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.701779][ T42] hsr_slave_0: left promiscuous mode [ 170.766796][ T42] hsr_slave_1: left promiscuous mode [ 170.808115][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.812202][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.817247][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.821860][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.853655][ T42] veth1_macvtap: left promiscuous mode [ 170.858240][ T42] veth0_macvtap: left promiscuous mode [ 170.866220][ T42] veth1_vlan: left promiscuous mode [ 170.869362][ T42] veth0_vlan: left promiscuous mode [ 173.618415][ T8741] Bluetooth: MGMT ver 1.22 [ 174.007472][ T42] team0 (unregistering): Port device team_slave_1 removed [ 174.231997][ T42] team0 (unregistering): Port device team_slave_0 removed [ 175.698102][ T6376] Bluetooth: hci0: command 0x080f tx timeout [ 175.700078][ T5942] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 176.657196][ T8766] bridge0: entered promiscuous mode [ 176.662886][ T8766] bridge0: entered allmulticast mode [ 176.738742][ T8252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.746520][ T8252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.784520][ T8252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.820413][ T8252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.941035][ T8800] syzkaller0: entered promiscuous mode [ 176.944923][ T8800] syzkaller0: entered allmulticast mode [ 177.003311][ T8796] syzkaller0: entered promiscuous mode [ 177.005995][ T8796] syzkaller0: entered allmulticast mode [ 177.205479][ T8830] Bluetooth: MGMT ver 1.22 [ 177.211836][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.215630][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.333378][ T6376] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.345286][ T6376] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.368131][ T6376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.373172][ T6376] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.375869][ T6376] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 187.379854][ T2322] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.381591][ T2322] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.388068][ T6376] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.453602][ T6376] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.459485][ T6378] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.468483][ T6381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.471521][ T6378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.473703][ T6378] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 187.475678][ T6378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.479124][ T6381] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 187.486195][ T6378] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 187.496579][ T6378] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 187.499438][ T6381] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 187.500570][ T6378] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 187.506571][ T6378] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 187.509702][ T6378] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 187.513212][ T6378] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 187.515517][ T6378] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 187.518175][ T6378] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 187.522996][ T6378] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 187.528655][ T6378] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 188.255759][ T8804] syzkaller0: entered promiscuous mode [ 188.257463][ T8804] syzkaller0: entered allmulticast mode [ 189.458084][ T6378] Bluetooth: hci6: command tx timeout [ 189.548102][ T6378] Bluetooth: hci7: command tx timeout [ 189.618185][ T6378] Bluetooth: hci8: command tx timeout [ 189.618210][ T6376] Bluetooth: hci9: command tx timeout [ 191.538087][ T6376] Bluetooth: hci6: command tx timeout [ 191.628068][ T6376] Bluetooth: hci7: command tx timeout [ 191.698997][ T6376] Bluetooth: hci9: command tx timeout [ 191.708103][ T6376] Bluetooth: hci8: command tx timeout [ 193.618170][ T6376] Bluetooth: hci6: command tx timeout [ 193.698096][ T6376] Bluetooth: hci7: command tx timeout [ 193.778071][ T6376] Bluetooth: hci8: command tx timeout [ 193.779594][ T6376] Bluetooth: hci9: command tx timeout [ 195.698107][ T6376] Bluetooth: hci6: command tx timeout [ 195.778059][ T6376] Bluetooth: hci7: command tx timeout [ 195.858065][ T6376] Bluetooth: hci9: command tx timeout [ 195.859629][ T6376] Bluetooth: hci8: command tx timeout [ 198.898208][ T31] INFO: task syz.3.19:6564 blocked for more than 145 seconds. [ 198.900306][ T31] Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 198.902268][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 198.904701][ T31] task:syz.3.19 state:D stack:0 pid:6564 tgid:6561 ppid:6373 flags:0x00000001 [ 198.907548][ T31] Call trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.910922][ T31] __switch_to+0x314/0x560 [ 198.912326][ T31] __schedule+0x14ac/0x24d8 [ 198.913511][ T31] schedule+0xbc/0x238 [ 198.914572][ T31] io_schedule+0x8c/0x124 [ 198.915765][ T31] folio_wait_bit_common+0x65c/0xb90 [ 198.917219][ T31] __folio_lock+0x2c/0x3c [ 198.943195][ T31] release_metapage+0x168/0xc4c [ 198.944620][ T31] __get_metapage+0xb10/0x1054 [ 198.945993][ T31] jfs_readdir+0x1ed4/0x37bc [ 198.947264][ T31] wrap_directory_iterator+0xa8/0xf4 [ 198.956584][ T31] shared_jfs_readdir+0x30/0x40 [ 198.958288][ T31] iterate_dir+0x408/0x648 [ 198.959527][ T31] __arm64_sys_getdents64+0x1c0/0x404 [ 198.960968][ T31] invoke_syscall+0x98/0x2b8 [ 198.962202][ T31] el0_svc_common+0x130/0x23c [ 198.963477][ T31] do_el0_svc+0x48/0x58 [ 198.964736][ T31] el0_svc+0x54/0x168 [ 198.965781][ T31] el0t_64_sync_handler+0x84/0xfc [ 198.967164][ T31] el0t_64_sync+0x190/0x194 [ 198.968642][ T31] [ 198.968642][ T31] Showing all locks held in the system: [ 198.970834][ T31] 1 lock held by khungtaskd/31: [ 198.972139][ T31] #0: ffff80008f4b7be0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 198.974687][ T31] 4 locks held by kworker/u8:2/42: [ 198.976100][ T31] #0: ffff0000c1881948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 198.980663][ T31] #1: ffff800094887c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 198.983376][ T31] #2: ffff800092137090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x13c/0x9b4 [ 198.985948][ T31] #3: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 198.988378][ T31] 2 locks held by kworker/u8:4/263: [ 198.989779][ T31] 3 locks held by kworker/u8:6/383: [ 198.992269][ T31] #0: ffff0000d193e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 198.995245][ T31] #1: ffff8000988b7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 198.998583][ T31] #2: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 199.001001][ T31] 2 locks held by getty/6144: [ 199.002315][ T31] #0: ffff0000d287d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 199.004906][ T31] #1: ffff8000980ee2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 [ 199.007633][ T31] 3 locks held by kworker/0:3/6364: [ 199.009102][ T31] #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 199.011878][ T31] #1: ffff800098ac7c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 199.014703][ T31] #2: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 199.017180][ T31] 2 locks held by syz.3.19/6564: [ 199.018661][ T31] #0: ffff0000d92ee848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x218/0x2a4 [ 199.021161][ T31] #1: ffff0000ef40b3c0 (&type->i_mutex_dir_key#10){++++}-{3:3}, at: wrap_directory_iterator+0x64/0xf4 [ 199.024098][ T31] 1 lock held by syz-executor/8252: [ 199.025475][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x704/0xe64 [ 199.028150][ T31] 1 lock held by syz.3.403/8788: [ 199.029425][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 199.031627][ T31] 1 lock held by syz.0.404/8791: [ 199.032926][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 199.035178][ T31] 1 lock held by syz.2.406/8793: [ 199.036542][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 199.039088][ T31] 1 lock held by syz.1.410/8830: [ 199.040443][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 199.042919][ T31] 1 lock held by syz-executor/8837: [ 199.044519][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x704/0xe64 [ 199.047339][ T31] 1 lock held by syz-executor/8841: [ 199.048938][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x704/0xe64 [ 199.051479][ T31] 1 lock held by syz-executor/8843: [ 199.052885][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x704/0xe64 [ 199.055458][ T31] 1 lock held by syz-executor/8845: [ 199.056846][ T31] #0: ffff8000921432e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x704/0xe64 [ 199.059575][ T31] [ 199.060210][ T31] ============================================= [ 199.060210][ T31] [ 199.062590][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 199.064450][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 199.067025][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 199.069782][ T31] Call trace: [ 199.070703][ T31] dump_backtrace+0x1b8/0x1e4 [ 199.072071][ T31] show_stack+0x2c/0x3c [ 199.073233][ T31] dump_stack_lvl+0xe4/0x150 [ 199.074468][ T31] dump_stack+0x1c/0x28 [ 199.075654][ T31] panic+0x300/0x884 [ 199.076680][ T31] hung_task_panic+0x0/0x2c [ 199.077904][ T31] kthread+0x288/0x310 [ 199.079111][ T31] ret_from_fork+0x10/0x20 [ 199.080305][ T31] SMP: stopping secondary CPUs [ 199.081647][ T31] Kernel Offset: disabled [ 199.082846][ T31] CPU features: 0x00,00000103,80100128,42017203 [ 199.084608][ T31] Memory Limit: none [ 199.798184][ T31] Rebooting in 86400 seconds..