last executing test programs: 2m34.296766715s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m34.088576037s ago: executing program 4: sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fb00000043980f"], 0x14}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x3, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 2m33.968523126s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe(&(0x7f00000000c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0) 2m33.580405946s ago: executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xa7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2m33.48243963s ago: executing program 4: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000000c, &(0x7f0000000100)={[{@errors_remount}, {@discard}, {@errors_continue}, {}, {@dmask}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x14fd, &(0x7f0000002a80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) read$ptp(r0, &(0x7f0000000100)=""/48, 0xfffffdef) read$FUSE(r0, &(0x7f0000004a40)={0x2020}, 0x2020) 2m33.213723502s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.004159546s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x5c, 0x30, 0x103, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x55, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 13.780210161s ago: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file3\x00', 0x0, 0x0, 0x0) 13.386718372s ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x12f0}}], 0x1, 0x0) 13.287900347s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1a343e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r2, 0x200000) preadv(r2, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1, 0x0, 0x0) 13.063211772s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 11.732681557s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7f) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop3', 0x20202, 0x0) syz_read_part_table(0x104c, &(0x7f0000001080)="$eJzsz9GJwlAQBdCbsJuXvy1hO7ASfy1HsR77sCZBlBGNITYgIpzz9e6bGYYJn9XnXHfHmvLw/F3NDb/JpSb5SbWkahmvdk3/eG1rN6RvaUvxP/tu3cZkfFn4d5pTl83hrbcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJe4BQAA//8zxBoa") r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "15f27cbc4b6a0384"}) dup2(r5, 0xffffffffffffffff) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f74f9b36096eff7fc6e5539b9b18098b9b4a1b2552091b080d29428f0e1ac6e7049b3468959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x28d}}, 0x1006) 11.403019478s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000005800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 6.889322895s ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='./file1\x00', 0x2008000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2, 0x294, &(0x7f0000000500)="$eJzs3c1qY1UcAPD/TZM0VSFZuBLBC7pwFabzBBOkwmBWSha60cHpgCSh0EDAD4xduRdc+Q6+gw/gxjdw4VJwZxfilfTem6+mrYE0HcLvt8k/55z/+cppC4V78tmbw/7zs9GLi29+j0YjicqTeBKXSbSiEqXvAgDYJ5dZFn9lubvaVqMeEVmzeFfZwfQAgHuwyd9/AGA/fPTxJx90ut2TD9O0ETH8ftxLIn/N6zsv4osYxGk8imb8E5HN5PFrT7snUU3T8p8B46PoRQw//bV43/kz4ir/OJrRup7//tPuyXGai3eGk3FvOvL0tRavJBGdLMk7ehzNeD0iq0XRyTz/8Zr86NXj3bd/Kub/72m0oxm/fR5nMYjnV13M8789TtP3sh///jpfQS8imYx7h1ft5rKDnX0oAAAAAAAAAAAAAAAAAAAAAADsvXY601q8P6e8DbDdXl9/4/1AxQ0/k4X7dR6laVpe4zPu1SLPr8Yb1ag+3MoBAAAAAAAAAAAAAAAAAADg5TH68qv+s8Hg9Hwp+CVbLbk7qC6UlI/1b5C+FPR/jtg86/8EcVBMbZBcGyIpq7Yw1uEmjY/WDRqVm/awOoh88j9sPrG3trXAW4PydPWfJXFH48b6Q7JwMo+Kzs5Hya2HdjnI1mzdwY1Z9S2tvf7qdjdzuuLabDOX2zSmn+RCSW3LPykrknv5/QMAAAAAAAAAAAAAAAAAAMzNH/qNP65VXjzIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5+bf/z8LorVashpMiuTb2pTB4flozbCtHS8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPfdfAAAA///SBV2L") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 6.801406069s ago: executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047440, 0xa5ada182b36b8cd6) 6.231710667s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x27}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 6.166869577s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x54}}, 0x0) 6.061968893s ago: executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 5.906783347s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1.09623924s ago: executing program 3: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)='id\x0f\xac\xd1\xeb\x00\x00\x00\x04\x00\x00\b\x003%\xfa\xbf\xef\xeb\x8e1w\xfd') r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="f65cd9b4c10065db3b5776fe055f15c99a7cece2fddc0f9d4e32260ba44c94a243489a5be4239664ff85a80edad944daac876e5cac2a2fd658d75e369b", 0x3d, r0) r2 = getgid() keyctl$search(0xa, r0, &(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r4) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6) r7 = add_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000180)="fb98", 0x2, 0xfffffffffffffffb) keyctl$read(0xb, r7, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) keyctl$link(0x8, r6, r7) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "52584a0dd465b5254432dd59bcb640901942e943f7b76a5c0100000000000090d9d47a4b6a1e03fb8888d9f595f4804bd3aea5f971309976f14b00", 0x13}, 0x48, r7) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r8) keyctl$read(0xb, r9, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) keyctl$restrict_keyring(0x1d, r9, 0x0, &(0x7f0000000200)='keyring\x00') keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, 0x0, r9}, &(0x7f0000000100)=""/107, 0x6b, &(0x7f00000001c0)={&(0x7f0000000040)={'sha256-arm64-neon\x00'}, &(0x7f0000000180)="12824e122e2dbf5a154e6bf7e4a3f5e3a642b5b488b69adb2ce4797d726ecf0b9a6ddfb7f0f9a5ed9b45f047dc8de91f719b754d4969aa", 0x37}) r10 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "e831bccdaf4ebe9106b904ebf3d045a733132af2c824259a31f57160d9b85129b355594a553ed476080b4d78a80decdc568a787e5788807a7ba205b2e7de8621", 0x1a}, 0x48, r5) keyctl$search(0xa, r9, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, r10) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r10) keyctl$search(0xa, r10, &(0x7f0000000580)='logon\x00', &(0x7f00000005c0)={'syz', 0x3}, r1) request_key(&(0x7f0000000440)='cifs.idmap\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='=^[@]\x00', 0xfffffffffffffffd) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="cd646da0cc1b6db91cafa91102fc7af5cbda1736fa3806cfac55ea1510b7ae28ff8a62a1a15a712fe87ef83f4b60432a581ceaa50d7c354f0ce433d67ca615a6560002052aab30854e057389c6", 0x4d, 0x0) request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000400)='T},!\x00', r0) keyctl$setperm(0x5, r12, 0x1000) keyctl$chown(0x4, r1, r11, r2) 555.590734ms ago: executing program 3: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x208400, &(0x7f0000000500)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c636f6465706167653d69736f383835392d392c747970653d8806e6d92c007c3da50838b213e45c60dfa80dde3ce87abe5e338e4e6a59adcbbcd8c1298ca6754466db1a8a1278dabca7f2fe40cf27dc1fb941304798bf42ba7569909de3630242504efec00c875fa448eb7bdaa7ba31d37ec3e7d64cd77624a0da2b05469cfb6ff12378569cc8b28d1168e0b17c24be8bc7e84cc44764d86c47497b7f98bc4582fe16504124539d5e1c09b9294efa2dd7"], 0x1, 0x2db, &(0x7f0000000600)="$eJzs3T9v004cx/HPOUmb/lF//rVFSCygQiVYKgoMiCUIZWVnQkCTShVREW2RgIWCGBEPgJ2nwINgAfEEYGLiAXQzusvZdRrbaUsT98/7JTWyz3fn7+ns+L6WIAJwZt1r/vx887f9M1JFFUl3pEBSXapKOqfz9RfrW2tbnXarqKOKa2H/jLotTV+dlfV2VlPbzrXwQrtX1XS6LM3094xDiqLo7q+yg0Dp3N2fIZDG/X3ojtdHHNewbEsXy45h1NITbHa0o5eaKTEcAMAx4J//gX9MTLsioyCQFv1j/1Q9/3fKDuBo3er0FUWFDVLPf7e6i4yd3//cod18zyVa9ngQZ4n7Caa2Z39M3SurZ4FpBmWVLpZgYnWtqqWVt2oFeqeGl6o27z5b3Us3NiDahYzctEB+bzXdn+yOxq0o94pDWl3rtMftRir+OIK5g53x35mv5rt5aEJ9UitZ/1UjY6fJzVS4Z6aCmo3/en6PU66VrSU/sEajEfRU+d+d5II/gzdglPXsjCTdZ/yCYDuJoChOd+5Z9b5W6I5ueUCruaxWYbKX02q+p1XFXwlLK886ha9ShiMeovloHpgF/dEXNVPr/8DGt6jUnVn0VW9cTX9ldMczll2z6mqGfU+O3dvlUhKBN37gsUHKe1uW44Oe6LZmNl+9flrpdNobduNxxsbz6Q3jS2rvpcw6w9+oqKCOtndLIutNFO2352iYwV870g7t90dSYm+frMr2LktKglFP01nZaH5T0QV5cjaiSMo5NLTvKRwjmyaedLdb1UTZEWHE7LrLdPM/t5L3qzqXoNiPsGCdXpxkqqfH5SSD610KzrrPyQNlcFP5GVzqjDdyckaXc12+Kl1JFRoVnjH0cZ4SpqkfesT7fwAAAAAAAAAAAAAAAAAAgJNmFP/SoOwxAgAAAAAAAAAAAAAAAAAAAABw0h3q93+z/o949/u/4Uh+/xfA0fgbAAD//wA5eM4=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000021c0)={'#! ', '', [], 0xa, "1c439a3a6596f50c3d108586161d030839204b069f5b74b5ba2df3e28158b6ed62e062b99ae6173a4b3ca08bcefd2ea922ee8960c40acf110abbdb2407520b42298234a92974c75481f13d057500f07e3264c4539cb1e48e670cdf485da8cbc7727a297314f15884a3eadae0b49a5ccf23a3b5589f2aae7042c527032ead85241280ae"}, 0x87) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x64842, 0x0) 504.958092ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x5c, 0x30, 0x103, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x55, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 398.641058ms ago: executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x28}], 0x1, 0x0) 297.445564ms ago: executing program 3: r0 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000100)=[@ioring_restriction_register_op={0x0, 0x1}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x2, 0x0) 258.57963ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 229.038944ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 153.016346ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000300000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0) 119.632181ms ago: executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "feaea2ef"}, 0x0, 0x2, {0x0}}) 52.273041ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7b535c9", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 1: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file3\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 02070][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.193148][ T6603] BTRFS info (device loop1): enabling ssd optimizations [ 218.301530][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.348258][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.373440][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.399740][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.406979][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.424015][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.518158][ T6442] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.529767][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.558206][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.591226][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.755321][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.772072][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.811838][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.821222][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.829787][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.859578][ T6520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.889905][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.979197][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.988138][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.011253][ T3574] Bluetooth: hci3: command tx timeout [ 219.016787][ T3770] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 219.029734][ T6536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.090838][ T3574] Bluetooth: hci2: command tx timeout [ 219.107902][ T6536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.145342][ T6536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.220934][ T6536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.270758][ T3770] usb 2-1: Using ep0 maxpacket: 8 [ 219.395694][ T3770] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 219.474225][ T6644] loop2: detected capacity change from 0 to 32768 [ 219.484162][ T6644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6644) [ 219.515788][ T6644] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.526187][ T6644] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 219.535013][ T6644] BTRFS info (device loop2): using free space tree [ 219.595997][ T3770] usb 2-1: New USB device found, idVendor=045e, idProduct=00db, bcdDevice= 0.40 [ 219.609783][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.621167][ T3770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.653348][ T3770] usb 2-1: Product: syz [ 219.658690][ T3770] usb 2-1: Manufacturer: 줽⛫ֿ皺錢ꔲ䨁箌ⴃ﹓䍤옿祩턩鬗⬇ﮨ餶侦㕿Ꮶ巸ﰼ唈唟핵䥢耋ȷ綾ٌ󒛴 [ 219.691386][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.718607][ T3770] usb 2-1: SerialNumber: syz [ 219.736162][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.745868][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.756631][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.767675][ T3770] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 219.776005][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.786244][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.793402][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.801450][ T6644] BTRFS info (device loop2): enabling ssd optimizations [ 219.801733][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.826072][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.835262][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.842414][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.850882][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.859751][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.869697][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.991744][ T3781] usb 2-1: USB disconnect, device number 4 [ 220.045553][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.062232][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.075678][ T6665] dlm: no local IP address has been set [ 220.081830][ T6665] dlm: cannot start dlm midcomms -107 [ 220.123507][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.138137][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.153078][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.162158][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.170823][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.285366][ T6371] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.285457][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.304167][ T6536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.333626][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.379926][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.397958][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.431561][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.439138][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.742372][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.753705][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.876214][ T6520] device veth0_vlan entered promiscuous mode [ 220.884107][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.903143][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.927399][ T6520] device veth1_vlan entered promiscuous mode [ 220.971160][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.979153][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.002794][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.033218][ T6683] loop2: detected capacity change from 0 to 1024 [ 221.041606][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.062674][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.081287][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.090972][ T3574] Bluetooth: hci3: command tx timeout [ 221.097197][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.127706][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.154891][ T6520] device veth0_macvtap entered promiscuous mode [ 221.194131][ T6520] device veth1_macvtap entered promiscuous mode [ 221.238422][ T6683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.274407][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.325112][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.332075][ T6686] loop1: detected capacity change from 0 to 32768 [ 221.343142][ T6686] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6686) [ 221.358785][ T6686] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 221.365648][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.369034][ T6686] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 221.388105][ T6686] BTRFS info (device loop1): using free space tree [ 221.396120][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.406309][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.417491][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.427772][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.438357][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.448467][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.459309][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.470234][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.481296][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.492829][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.499272][ T6371] EXT4-fs (loop2): unmounting filesystem. [ 221.503555][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.516867][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.527448][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.539355][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.549765][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.560540][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.572555][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.584302][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.599076][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.610531][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.620120][ T6705] loop2: detected capacity change from 0 to 512 [ 221.621995][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.637102][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.648494][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.693785][ T3859] device hsr_slave_0 left promiscuous mode [ 221.700484][ T3859] device hsr_slave_1 left promiscuous mode [ 221.700835][ T6686] BTRFS info (device loop1): enabling ssd optimizations [ 221.725298][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.727163][ T6705] EXT4-fs (loop2): filesystem is read-only [ 221.734719][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.750464][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.756655][ T6705] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 221.770754][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.783033][ T3859] device bridge_slave_1 left promiscuous mode [ 221.789267][ T6705] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 221.789529][ T3859] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.834272][ T3859] device bridge_slave_0 left promiscuous mode [ 221.859385][ T3859] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.902309][ T26] audit: type=1326 audit(1718049625.683:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2d7a7cf69 code=0x0 [ 221.926467][ T3859] device hsr_slave_0 left promiscuous mode [ 221.937092][ T3859] device hsr_slave_1 left promiscuous mode [ 221.949482][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.960343][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.978668][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.989641][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.013754][ T3859] device bridge_slave_1 left promiscuous mode [ 222.046689][ T3859] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.096822][ T6442] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.108156][ T3859] device bridge_slave_0 left promiscuous mode [ 222.114788][ T3859] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.169925][ T3859] device hsr_slave_0 left promiscuous mode [ 222.301169][ T3859] device hsr_slave_1 left promiscuous mode [ 222.317410][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.336567][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.363413][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.392440][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.417205][ T6714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 222.419209][ T3859] device bridge_slave_1 left promiscuous mode [ 222.451104][ T3859] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.480270][ T3859] device bridge_slave_0 left promiscuous mode [ 222.497724][ T3859] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.540453][ T3859] device veth1_macvtap left promiscuous mode [ 222.548106][ T3859] device veth0_macvtap left promiscuous mode [ 222.554511][ T3859] device veth1_vlan left promiscuous mode [ 222.560317][ T3859] device veth0_vlan left promiscuous mode [ 222.567997][ T3859] device veth1_macvtap left promiscuous mode [ 222.574305][ T3859] device veth0_macvtap left promiscuous mode [ 222.586508][ T3859] device veth1_vlan left promiscuous mode [ 222.603843][ T3859] device veth0_vlan left promiscuous mode [ 222.619705][ T3859] device veth1_macvtap left promiscuous mode [ 222.628602][ T3859] device veth0_macvtap left promiscuous mode [ 222.641106][ T3859] device veth1_vlan left promiscuous mode [ 222.651286][ T3859] device veth0_vlan left promiscuous mode [ 222.996875][ T6732] loop1: detected capacity change from 0 to 1024 [ 223.077596][ T6732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.161787][ T6740] loop2: detected capacity change from 0 to 512 [ 223.170023][ T6740] EXT4-fs (loop2): filesystem is read-only [ 223.177157][ T6740] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 223.188997][ T6740] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 223.205223][ T6442] EXT4-fs (loop1): unmounting filesystem. [ 223.240341][ T26] audit: type=1326 audit(1718049627.013:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2d7a7cf69 code=0x0 [ 223.335581][ T6742] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.649720][ T3859] team0 (unregistering): Port device team_slave_1 removed [ 223.719386][ T3859] team0 (unregistering): Port device team_slave_0 removed [ 223.744159][ T6747] loop1: detected capacity change from 0 to 32768 [ 223.752255][ T6747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6747) [ 223.777002][ T6747] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.778087][ T3859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.787262][ T6747] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 223.804695][ T6747] BTRFS info (device loop1): using free space tree [ 223.819722][ T3859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.911755][ T3859] bond0 (unregistering): Released all slaves [ 223.946249][ T6747] BTRFS info (device loop1): enabling ssd optimizations [ 224.195335][ T6767] dlm: no local IP address has been set [ 224.201098][ T6767] dlm: cannot start dlm midcomms -107 [ 224.235535][ T6769] loop2: detected capacity change from 0 to 64 [ 224.333152][ T3859] team0 (unregistering): Port device team_slave_1 removed [ 224.425511][ T6442] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.450016][ T3859] team0 (unregistering): Port device team_slave_0 removed [ 224.627715][ T3859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.691723][ T3859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.867511][ T3859] bond0 (unregistering): Released all slaves [ 225.043433][ T6787] loop2: detected capacity change from 0 to 1024 [ 225.102288][ T6787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.143000][ T3859] team0 (unregistering): Port device team_slave_1 removed [ 225.177112][ T6371] EXT4-fs (loop2): unmounting filesystem. [ 225.214705][ T3859] team0 (unregistering): Port device team_slave_0 removed [ 225.262668][ T3859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.288014][ T3859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.394257][ T3859] bond0 (unregistering): Released all slaves [ 225.499071][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.513200][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.537436][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.553728][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.572917][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.589721][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.608594][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.633372][ T6520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.661082][ T6520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.669851][ T6520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.690718][ T6520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.750266][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.768485][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.791530][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.848543][ T6536] device veth0_vlan entered promiscuous mode [ 225.849421][ T6797] loop1: detected capacity change from 0 to 1024 [ 225.877837][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.901579][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.903452][ T6797] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 225.925422][ T6536] device veth1_vlan entered promiscuous mode [ 225.948643][ T6797] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 225.969184][ T6797] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 225.978188][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.986837][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.999722][ T6795] loop2: detected capacity change from 0 to 32768 [ 226.007167][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.007661][ T6797] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 226.069966][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.089551][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.099022][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.110358][ T6184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.135439][ T6797] loop1: detected capacity change from 0 to 512 [ 226.137014][ T6795] XFS (loop2): Mounting V5 Filesystem [ 226.146526][ T6184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.181045][ T6797] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 226.183624][ T6536] device veth0_macvtap entered promiscuous mode [ 226.233108][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.256616][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.306087][ T6536] device veth1_macvtap entered promiscuous mode [ 226.321558][ T6795] XFS (loop2): Ending clean mount [ 226.340002][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.360451][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.386719][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.435634][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.460714][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.480727][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.490619][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.521396][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.545840][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.566784][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.591480][ T6371] XFS (loop2): Unmounting Filesystem [ 226.592292][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.614859][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.635175][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.646447][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.663836][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.684211][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.703323][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.734178][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.745235][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.755158][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.777245][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.793973][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.817989][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.854320][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.895536][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.905532][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.936730][ T6536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.947632][ T6536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.956676][ T6536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.965692][ T6536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.111016][ T41] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 227.118831][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.135261][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.179111][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.198435][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.230906][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.285878][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.423235][ T6827] loop3: detected capacity change from 0 to 1024 [ 227.447765][ T6827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.521280][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.535668][ T41] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.572412][ T41] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.585981][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.597086][ T41] usb 1-1: config 0 descriptor?? [ 227.762958][ T6837] loop1: detected capacity change from 0 to 256 [ 227.831987][ T6837] exfat: Deprecated parameter 'namecase' [ 227.875525][ T6837] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 228.073467][ T41] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 228.142605][ T41] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 228.721283][ T6840] loop3: detected capacity change from 0 to 32768 [ 228.755727][ T6840] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6840) [ 228.779795][ T6672] usb 1-1: USB disconnect, device number 5 [ 228.811896][ T6847] loop2: detected capacity change from 0 to 4096 [ 228.845923][ T6840] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.879467][ T6840] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 228.914608][ T6840] BTRFS info (device loop3): setting nodatacow, compression disabled [ 228.930777][ T3574] Bluetooth: hci3: command tx timeout [ 228.957071][ T6840] BTRFS info (device loop3): turning on flush-on-commit [ 228.986611][ T6854] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.031955][ T6840] BTRFS info (device loop3): max_inline at 0 [ 229.050242][ T6840] BTRFS info (device loop3): enabling auto defrag [ 229.069079][ T6840] BTRFS info (device loop3): max_inline at 0 [ 229.089351][ T6840] BTRFS info (device loop3): using free space tree [ 229.230895][ T6840] BTRFS info (device loop3): enabling ssd optimizations [ 229.423020][ T6536] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.702009][ T6877] loop0: detected capacity change from 0 to 1024 [ 229.768267][ T6877] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.090816][ T3615] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 230.210251][ T6885] loop0: detected capacity change from 0 to 256 [ 230.232380][ T6885] exfat: Deprecated parameter 'namecase' [ 230.248533][ T6882] loop3: detected capacity change from 0 to 4096 [ 230.262416][ T6885] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 230.288168][ T6882] ntfs: (device loop3): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 230.320135][ T6882] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 230.346731][ T6882] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 230.390912][ T6882] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 230.425111][ T6882] ntfs: (device loop3): map_mft_record_page(): Mft record 0x4 is corrupt. Run chkdsk. [ 230.457515][ T6882] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 230.465612][ T6882] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 230.519361][ T6882] ntfs: (device loop3): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 230.586405][ T6882] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 230.630821][ T3615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.658233][ T3615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.783814][ T3615] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 231.049390][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.497539][ T3615] usb 2-1: config 0 descriptor?? [ 231.921237][ T6906] loop2: detected capacity change from 0 to 512 [ 232.172964][ T6906] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 232.184967][ T6906] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 232.195159][ T6906] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 232.213306][ T6906] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 232.228329][ T6906] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 232.243429][ T6906] EXT4-fs (loop2): Remounting filesystem read-only [ 232.250268][ T6906] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 232.272234][ T6906] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 232.378360][ T3615] hid-multitouch 0003:0EEF:72D0.0004: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.1-1/input0 [ 232.418639][ T3615] usb 2-1: USB disconnect, device number 5 [ 232.584507][ T6371] EXT4-fs (loop2): unmounting filesystem. [ 232.660619][ T6910] loop3: detected capacity change from 0 to 32768 [ 232.671763][ T6910] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6910) [ 232.711257][ T6910] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.721590][ T6910] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 232.730256][ T6910] BTRFS info (device loop3): using free space tree [ 232.919487][ T6910] BTRFS info (device loop3): enabling ssd optimizations [ 233.030090][ T6935] loop1: detected capacity change from 0 to 64 [ 233.038440][ T6902] loop0: detected capacity change from 0 to 32768 [ 233.061986][ T6902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6902) [ 233.209565][ T6902] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.240752][ T6902] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 233.261943][ T6902] BTRFS info (device loop0): setting nodatacow, compression disabled [ 233.297808][ T6910] BTRFS warning (device loop3): failed to trim 3 block group(s), last error -512 [ 233.316342][ T6902] BTRFS info (device loop0): turning on flush-on-commit [ 233.361380][ T6902] BTRFS info (device loop0): max_inline at 0 [ 233.367431][ T6902] BTRFS info (device loop0): enabling auto defrag [ 233.375358][ T6902] BTRFS info (device loop0): max_inline at 0 [ 233.382590][ T6536] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 233.403295][ T6902] BTRFS info (device loop0): using free space tree [ 233.403602][ T6930] loop2: detected capacity change from 0 to 4096 [ 233.565717][ T6949] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.717819][ T6902] BTRFS info (device loop0): enabling ssd optimizations [ 233.909440][ T6967] loop1: detected capacity change from 0 to 128 [ 233.936451][ T6520] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.979592][ T6967] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 234.050936][ T6967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.109097][ T6971] loop3: detected capacity change from 0 to 1024 [ 234.171341][ T6971] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 234.204569][ T6971] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 234.249173][ T6971] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 234.287213][ T6971] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 234.417418][ T6972] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 234.421515][ T6971] loop3: detected capacity change from 0 to 512 [ 234.454776][ T6971] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 234.504208][ T6972] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 234.730755][ T3620] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 234.773353][ T6980] loop3: detected capacity change from 0 to 256 [ 235.113906][ T3620] usb 2-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 235.140768][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 235.150507][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.173123][ T3620] usb 2-1: config 0 descriptor?? [ 235.212712][ T3620] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 235.219639][ T3620] usb 2-1: No valid video chain found. [ 235.366068][ T6996] loop2: detected capacity change from 0 to 8 [ 235.401817][ T6996] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 235.468624][ T3620] usb 2-1: USB disconnect, device number 6 [ 235.628371][ T7005] fuse: Bad value for 'fd' [ 235.770436][ T7007] loop0: detected capacity change from 0 to 256 [ 236.216284][ T7029] loop1: detected capacity change from 0 to 8 [ 236.229471][ T7029] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 236.487730][ T7030] loop3: detected capacity change from 0 to 32768 [ 236.507799][ T7030] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7030) [ 236.546073][ T7030] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.556409][ T7030] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 236.565656][ T7030] BTRFS info (device loop3): using free space tree [ 236.679442][ T7045] loop0: detected capacity change from 0 to 256 [ 236.784655][ T7030] BTRFS info (device loop3): enabling ssd optimizations [ 236.810932][ T4573] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 237.123696][ T7030] BTRFS warning (device loop3): failed to trim 2 block group(s), last error -512 [ 237.155968][ T7031] loop2: detected capacity change from 0 to 32768 [ 237.182953][ T4573] usb 2-1: device descriptor read/all, error -71 [ 237.196299][ T6536] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.226020][ T7031] XFS: ikeep mount option is deprecated. [ 237.242288][ T7031] XFS: ikeep mount option is deprecated. [ 237.248052][ T7031] XFS: noikeep mount option is deprecated. [ 237.429606][ T7031] XFS (loop2): Mounting V5 Filesystem [ 237.553883][ T7031] XFS (loop2): Ending clean mount [ 237.569466][ T7031] XFS (loop2): Quotacheck needed: Please wait. [ 237.618948][ T7031] XFS (loop2): Quotacheck: Done. [ 237.782161][ T6371] XFS (loop2): Unmounting Filesystem [ 237.857893][ T7074] loop3: detected capacity change from 0 to 2048 [ 237.928413][ T7074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.031180][ T7077] loop1: detected capacity change from 0 to 8 [ 238.038246][ T7077] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 238.283197][ T7081] loop3: detected capacity change from 0 to 512 [ 238.325846][ T7085] loop2: detected capacity change from 0 to 256 [ 238.340083][ T7084] loop1: detected capacity change from 0 to 256 [ 238.393510][ T7081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.402900][ T7081] ext4 filesystem being mounted at /root/syzkaller-testdir828512672/syzkaller.SqnqPC/19/file0 supports timestamps until 2038 (0x7fffffff) [ 238.815690][ T6536] EXT4-fs (loop3): unmounting filesystem. [ 239.015156][ T3617] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 239.060234][ T7104] loop3: detected capacity change from 0 to 4096 [ 239.112838][ T7104] NILFS (loop3): invalid segment: Checksum error in segment payload [ 239.129796][ T7104] NILFS (loop3): trying rollback from an earlier position [ 239.179321][ T7104] NILFS (loop3): recovery complete [ 239.206927][ T7107] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.730392][ T7113] loop1: detected capacity change from 0 to 8 [ 239.782625][ T7113] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 239.841587][ T7115] loop3: detected capacity change from 0 to 256 [ 240.020932][ T7117] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.052354][ T7117] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 240.619366][ T7134] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 240.765002][ T7136] loop2: detected capacity change from 0 to 4096 [ 240.824720][ T7136] NILFS (loop2): invalid segment: Checksum error in segment payload [ 240.838577][ T7122] loop3: detected capacity change from 0 to 4096 [ 240.863240][ T7136] NILFS (loop2): trying rollback from an earlier position [ 240.928320][ T7136] NILFS (loop2): recovery complete [ 240.951473][ T7144] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.913364][ T7147] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.229916][ T7154] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 242.370788][ T3569] Bluetooth: hci5: command 0x0406 tx timeout [ 243.063184][ T7174] loop3: detected capacity change from 0 to 2048 [ 243.089563][ T7174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.273921][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.118624][ T7199] loop1: detected capacity change from 0 to 512 [ 244.483032][ T7198] loop3: detected capacity change from 0 to 2048 [ 244.599706][ T7198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.789332][ T7199] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 244.801001][ T7199] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 244.811696][ T7199] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 244.827064][ T7199] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 244.835426][ T7199] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 244.852952][ T7199] EXT4-fs (loop1): Remounting filesystem read-only [ 244.859559][ T7199] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 244.876321][ T7199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 245.094197][ T6442] EXT4-fs (loop1): unmounting filesystem. [ 245.259098][ T7216] loop1: detected capacity change from 0 to 256 [ 245.368751][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.406579][ T7219] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 246.421845][ T7229] loop1: detected capacity change from 0 to 2048 [ 246.478863][ T7229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.532019][ T7250] loop2: detected capacity change from 0 to 256 [ 247.620847][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.627966][ T7258] tls_set_device_offload_rx: netdev not found [ 247.811021][ T3574] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 247.819950][ T3574] Bluetooth: hci3: Injecting HCI hardware error event [ 247.831144][ T3569] Bluetooth: hci3: hardware error 0x00 [ 247.896433][ T7266] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.943139][ T7266] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 249.252017][ T7286] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 249.434965][ T7289] loop0: detected capacity change from 0 to 512 [ 249.613897][ T7289] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 249.625733][ T7289] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 249.635939][ T7289] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 249.654439][ T7289] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 249.663446][ T7289] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 249.682687][ T7289] EXT4-fs (loop0): Remounting filesystem read-only [ 249.689603][ T7289] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 249.705731][ T7289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 249.893716][ T3569] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 250.035583][ T6520] EXT4-fs (loop0): unmounting filesystem. [ 250.154363][ T7270] loop2: detected capacity change from 0 to 40427 [ 250.168260][ T7270] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 250.177730][ T7270] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 250.225746][ T7270] F2FS-fs (loop2): Found nat_bits in checkpoint [ 250.348906][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.366439][ T7270] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 250.374671][ T7270] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 250.429011][ T26] audit: type=1800 audit(1718049654.203:192): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 250.480931][ T7270] syz-executor.2: attempt to access beyond end of device [ 250.480931][ T7270] loop2: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 250.527233][ T7270] syz-executor.2: attempt to access beyond end of device [ 250.527233][ T7270] loop2: rw=0, sector=53256, nr_sectors = 8 limit=40427 [ 250.650214][ T3574] Bluetooth: hci4: sending frame failed (-49) [ 250.660615][ T3569] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 250.861595][ T3614] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.079290][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.090331][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.100148][ T3614] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 252.109280][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.119014][ T3614] usb 2-1: config 0 descriptor?? [ 252.452576][ T7318] loop3: detected capacity change from 0 to 32768 [ 252.470378][ T7318] XFS: ikeep mount option is deprecated. [ 252.476155][ T7318] XFS: ikeep mount option is deprecated. [ 252.490823][ T7318] XFS: noikeep mount option is deprecated. [ 252.495430][ T4573] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 252.556767][ T7318] XFS (loop3): Mounting V5 Filesystem [ 252.595294][ T3614] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 252.613253][ T3614] lg-g15 0003:046D:C222.0005: unbalanced collection at end of report description [ 252.638516][ T3614] lg-g15: probe of 0003:046D:C222.0005 failed with error -22 [ 252.660038][ T7318] XFS (loop3): Ending clean mount [ 252.680499][ T7318] XFS (loop3): Quotacheck needed: Please wait. [ 252.758301][ T7318] XFS (loop3): Quotacheck: Done. [ 252.786638][ T7332] loop0: detected capacity change from 0 to 32768 [ 252.803729][ T3614] usb 2-1: USB disconnect, device number 10 [ 252.849131][ T6536] XFS (loop3): Unmounting Filesystem [ 252.859903][ T7332] XFS (loop0): Mounting V5 Filesystem [ 252.906119][ T4573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.922943][ T4573] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.936400][ T4573] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.949427][ T4573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.975573][ T4573] usb 3-1: config 0 descriptor?? [ 252.976114][ T7332] XFS (loop0): Ending clean mount [ 253.126641][ T6520] XFS (loop0): Unmounting Filesystem [ 253.455294][ T4573] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 253.511420][ T4573] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 253.637785][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.815714][ T7368] netlink: 'syz-executor.1': attribute type 28 has an invalid length. [ 253.852706][ T7368] device wlan0 entered promiscuous mode [ 253.972964][ T26] audit: type=1800 audit(1718049657.753:193): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1954 res=0 errno=0 [ 254.235277][ T7358] loop3: detected capacity change from 0 to 40427 [ 254.243513][ T7358] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 254.251822][ T7358] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 254.550109][ T7358] F2FS-fs (loop3): Found nat_bits in checkpoint [ 255.033538][ T7358] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 255.044351][ T7358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 255.076257][ T7358] syz-executor.3: attempt to access beyond end of device [ 255.076257][ T7358] loop3: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 255.081376][ T26] audit: type=1800 audit(1718049658.853:194): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 255.116628][ T7358] syz-executor.3: attempt to access beyond end of device [ 255.116628][ T7358] loop3: rw=0, sector=53256, nr_sectors = 8 limit=40427 [ 255.284108][ T6667] usb 3-1: USB disconnect, device number 3 [ 255.736146][ T7395] loop0: detected capacity change from 0 to 512 [ 255.752379][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.758719][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.915986][ T7395] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 255.927700][ T7395] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 255.937865][ T7395] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 255.954358][ T7395] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 255.964613][ T7395] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 255.978713][ T7395] EXT4-fs (loop0): Remounting filesystem read-only [ 255.987081][ T7395] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 256.001092][ T7395] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 256.339054][ T6520] EXT4-fs (loop0): unmounting filesystem. [ 256.590950][ T7386] loop1: detected capacity change from 0 to 32768 [ 256.600456][ T7401] loop0: detected capacity change from 0 to 2048 [ 256.654843][ T7401] EXT4-fs: Ignoring removed nobh option [ 256.690774][ T7401] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.756217][ T7386] XFS (loop1): Mounting V5 Filesystem [ 256.762698][ T7401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 257.020500][ T7386] XFS (loop1): Ending clean mount [ 257.028911][ T7391] loop2: detected capacity change from 0 to 32768 [ 257.046843][ T7411] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 257.081758][ T7391] XFS: ikeep mount option is deprecated. [ 257.087445][ T7391] XFS: ikeep mount option is deprecated. [ 257.117874][ T7422] netlink: 'syz-executor.3': attribute type 28 has an invalid length. [ 257.137924][ T7422] device wlan0 entered promiscuous mode [ 257.144242][ T7411] EXT4-fs (loop0): Remounting filesystem read-only [ 257.312653][ T7391] XFS (loop2): Mounting V5 Filesystem [ 257.379287][ T6442] XFS (loop1): Unmounting Filesystem [ 257.413048][ T6520] EXT4-fs (loop0): unmounting filesystem. [ 257.502522][ T7391] XFS (loop2): Ending clean mount [ 257.518825][ T26] audit: type=1800 audit(1718049661.293:195): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=9289 res=0 errno=0 [ 257.565538][ T26] audit: type=1804 audit(1718049661.333:196): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958552381/syzkaller.O5Rbih/85/file0/bus" dev="loop2" ino=9289 res=1 errno=0 [ 257.659359][ T6371] XFS (loop2): Unmounting Filesystem [ 257.707412][ T26] audit: type=1800 audit(1718049661.483:197): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1953 res=0 errno=0 [ 258.219138][ T7440] loop3: detected capacity change from 0 to 40427 [ 258.233384][ T7440] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 258.246585][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.258080][ T7440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 258.289454][ T7440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 258.301670][ T7446] team0: Port device bridge1 added [ 258.370516][ T7440] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 258.391519][ T7440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 258.418951][ T26] audit: type=1800 audit(1718049662.193:198): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 258.443993][ T7440] syz-executor.3: attempt to access beyond end of device [ 258.443993][ T7440] loop3: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 258.462610][ T7440] syz-executor.3: attempt to access beyond end of device [ 258.462610][ T7440] loop3: rw=0, sector=53256, nr_sectors = 8 limit=40427 [ 260.176027][ T7472] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 260.200710][ T7472] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.599739][ T7468] loop0: detected capacity change from 0 to 32768 [ 260.681536][ T7468] XFS (loop0): Mounting V5 Filesystem [ 260.795065][ T7468] XFS (loop0): Ending clean mount [ 261.001575][ T6520] XFS (loop0): Unmounting Filesystem [ 261.089054][ T7476] loop1: detected capacity change from 0 to 32768 [ 261.098148][ T7476] XFS: ikeep mount option is deprecated. [ 261.113506][ T7476] XFS: ikeep mount option is deprecated. [ 261.193171][ T7476] XFS (loop1): Mounting V5 Filesystem [ 261.318257][ T7476] XFS (loop1): Ending clean mount [ 261.361961][ T26] audit: type=1800 audit(1718049665.133:199): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=9289 res=0 errno=0 [ 261.429259][ T26] audit: type=1804 audit(1718049665.183:200): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3673719683/syzkaller.yLnUTX/89/file0/bus" dev="loop1" ino=9289 res=1 errno=0 [ 261.477515][ T7505] loop3: detected capacity change from 0 to 256 [ 261.498572][ T7505] exfat: Deprecated parameter 'utf8' [ 261.504389][ T6442] XFS (loop1): Unmounting Filesystem [ 261.516008][ T7505] exfat: Deprecated parameter 'namecase' [ 261.605161][ T7505] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 261.640202][ T6667] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 261.934676][ T7514] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 261.945572][ T7514] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.231998][ T6667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 262.311103][ T6667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 262.477501][ T6667] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.691338][ T6667] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.700438][ T6667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.802353][ T6667] usb 1-1: config 0 descriptor?? [ 262.821253][ T7503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 263.108713][ T7541] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 263.127234][ T7541] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.172393][ T7543] loop1: detected capacity change from 0 to 2048 [ 263.235638][ T7543] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 8192 [ 263.263443][ T7543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 263.418960][ T6667] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 263.431254][ T6667] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 263.441765][ T6667] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 264.355808][ T6442] EXT4-fs (loop1): unmounting filesystem. [ 264.393882][ T7559] loop3: detected capacity change from 0 to 1024 [ 264.421282][ T3617] usb 1-1: USB disconnect, device number 6 [ 264.556242][ T5828] hfsplus: b-tree write err: -5, ino 4 [ 264.667192][ T7569] loop3: detected capacity change from 0 to 256 [ 265.143921][ T7571] loop2: detected capacity change from 0 to 8192 [ 265.770172][ T7580] loop1: detected capacity change from 0 to 2048 [ 265.829348][ T7580] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 8192 [ 265.994667][ T7580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 266.011096][ T7586] loop2: detected capacity change from 0 to 2048 [ 266.039563][ T26] audit: type=1800 audit(1718049669.813:201): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 266.069467][ T26] audit: type=1800 audit(1718049669.843:202): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 266.923769][ T7586] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 8192 [ 266.936191][ T7590] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #18: block 112: comm syz-executor.1: lblock 0 mapped to illegal pblock 112 (length 1) [ 267.001205][ T7586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 267.011287][ T7596] loop3: detected capacity change from 0 to 512 [ 267.018495][ T7596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.020581][ T7598] loop0: detected capacity change from 0 to 2048 [ 267.029806][ T7590] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #18: block 112: comm syz-executor.1: lblock 0 mapped to illegal pblock 112 (length 1) [ 267.052766][ T7598] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 267.085276][ T7598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.107605][ T7596] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 267.133332][ T7596] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 267.148421][ T7590] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz-executor.1: Invalid block bitmap block 0 in block_group 0 [ 267.170298][ T7596] EXT4-fs error (device loop3): __ext4_iget:5044: inode #13: block 262144: comm syz-executor.3: invalid block [ 267.235791][ T7596] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 267.266979][ T7590] EXT4-fs error (device loop1): ext4_discard_preallocations:5123: comm syz-executor.1: Error -117 reading block bitmap for 0 [ 267.291326][ T7596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 267.327829][ T6442] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 16: comm syz-executor.1: lblock 0 mapped to illegal pblock 16 (length 1) [ 267.354688][ T7596] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 4: comm syz-executor.3: lblock 0 mapped to illegal pblock 4 (length 1) [ 267.381143][ T6442] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 267.384241][ T6371] EXT4-fs (loop2): unmounting filesystem. [ 267.400346][ T6442] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #18: comm syz-executor.1: mark_inode_dirty error [ 267.425719][ T6442] EXT4-fs (loop1): unmounting filesystem. [ 267.450031][ T7604] loop0: detected capacity change from 0 to 256 [ 267.496129][ T6536] EXT4-fs (loop3): unmounting filesystem. [ 267.682490][ T7606] loop2: detected capacity change from 0 to 4096 [ 267.704698][ T7606] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 267.754343][ T7612] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.816891][ T5828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.849694][ T7606] ntfs: (device loop2): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 267.893734][ T7606] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 267.950968][ T7606] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 269.401176][ T7620] loop0: detected capacity change from 0 to 512 [ 269.447034][ T7606] ntfs: volume version 3.1. [ 269.499484][ T5828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.557233][ T7620] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 269.568849][ T7620] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 269.579192][ T7620] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 269.593286][ T7620] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 269.601619][ T7620] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 269.619922][ T7620] EXT4-fs (loop0): Remounting filesystem read-only [ 269.626628][ T7620] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 269.648670][ T7620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.719391][ T7606] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 269.774615][ T7606] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 269.880130][ T6520] EXT4-fs (loop0): unmounting filesystem. [ 269.898471][ T26] audit: type=1800 audit(1718049673.673:203): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 269.988065][ T26] audit: type=1800 audit(1718049673.703:204): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 270.022385][ T5828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.128344][ T5828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.527549][ T3574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.543657][ T3574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.552681][ T3574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.561575][ T3574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.569219][ T3574] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.576806][ T3574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.696227][ T7634] loop2: detected capacity change from 0 to 32768 [ 270.745813][ T7634] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7634) [ 270.827193][ T7634] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 270.885917][ T7634] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 270.916711][ T7634] BTRFS info (device loop2): using free space tree [ 271.113937][ T26] audit: type=1800 audit(1718049674.893:205): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 271.239684][ T7634] BTRFS info (device loop2): enabling ssd optimizations [ 271.284755][ T26] audit: type=1800 audit(1718049675.063:206): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 271.334295][ T7647] chnl_net:caif_netlink_parms(): no params data found [ 271.341628][ T6371] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 271.582538][ T7643] loop3: detected capacity change from 0 to 32768 [ 271.590061][ T7643] XFS: ikeep mount option is deprecated. [ 271.661932][ T7643] XFS: ikeep mount option is deprecated. [ 271.758214][ T5828] device hsr_slave_0 left promiscuous mode [ 271.766623][ T7643] XFS (loop3): Mounting V5 Filesystem [ 271.785496][ T5828] device hsr_slave_1 left promiscuous mode [ 271.816626][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.829233][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.839003][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.846633][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.864567][ T5828] device bridge_slave_1 left promiscuous mode [ 271.880842][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.904577][ T7643] XFS (loop3): Ending clean mount [ 271.941243][ T5828] device bridge_slave_0 left promiscuous mode [ 271.953548][ T7699] loop0: detected capacity change from 0 to 4096 [ 271.953862][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.046835][ T5828] device veth1_macvtap left promiscuous mode [ 272.062963][ T5828] device veth0_macvtap left promiscuous mode [ 272.069126][ T5828] device veth1_vlan left promiscuous mode [ 272.072991][ T7699] ntfs: volume version 3.1. [ 272.086098][ T5828] device veth0_vlan left promiscuous mode [ 272.111691][ T6536] XFS (loop3): Unmounting Filesystem [ 272.393850][ T7707] loop2: detected capacity change from 0 to 512 [ 272.449456][ T7707] EXT4-fs error (device loop2): __ext4_iget:5044: inode #3: block 127754: comm syz-executor.2: invalid block [ 272.492990][ T7707] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz-executor.2: Bad quota inode: 3, type: 0 [ 272.520694][ T7707] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 272.548735][ T7707] EXT4-fs (loop2): mount failed [ 272.598558][ T7713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.616993][ T3574] Bluetooth: hci0: command tx timeout [ 272.772227][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 272.816328][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 272.845071][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.875429][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.040036][ T5828] bond0 (unregistering): Released all slaves [ 273.237619][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.308930][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.327087][ T7647] device bridge_slave_0 entered promiscuous mode [ 273.338401][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.350025][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.365290][ T7647] device bridge_slave_1 entered promiscuous mode [ 273.388733][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.509042][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.533848][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.395571][ T7647] team0: Port device team_slave_0 added [ 274.469403][ T7647] team0: Port device team_slave_1 added [ 274.526940][ T7736] loop3: detected capacity change from 0 to 4096 [ 274.557493][ T7736] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 274.572653][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.579633][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.634312][ T7736] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 274.652449][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.690926][ T3574] Bluetooth: hci0: command tx timeout [ 274.762635][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.769605][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.807763][ T7744] loop2: detected capacity change from 0 to 2048 [ 274.873762][ T6536] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 274.884881][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.908483][ T7744] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 274.978997][ T7741] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 275.148176][ T7647] device hsr_slave_0 entered promiscuous mode [ 275.181891][ T7647] device hsr_slave_1 entered promiscuous mode [ 275.534294][ T6371] EXT4-fs (loop2): unmounting filesystem. [ 275.538402][ T7762] loop3: detected capacity change from 0 to 4096 [ 275.609185][ T7762] __ntfs_warning: 8 callbacks suppressed [ 275.609201][ T7762] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 275.851341][ T7762] ntfs: (device loop3): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 275.895125][ T7762] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 275.926564][ T7762] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 275.961039][ T7762] ntfs: volume version 3.1. [ 276.037530][ T7762] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 276.080878][ T7762] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 276.305206][ T7647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.358587][ T7647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.388139][ T7771] netlink: 65051 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.419660][ T7647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.440447][ T3569] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.452348][ T3569] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.462516][ T3569] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.470355][ T3569] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.480767][ T7647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.487713][ T3581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.498667][ T3581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.506242][ T7767] loop0: detected capacity change from 0 to 32768 [ 276.607926][ T7767] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 276.607926][ T7767] [ 276.774198][ T7777] loop3: detected capacity change from 0 to 2048 [ 276.780914][ T3581] Bluetooth: hci0: command tx timeout [ 276.871127][ T7777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.989434][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.094266][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.111980][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.123016][ T7647] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.171908][ T7772] chnl_net:caif_netlink_parms(): no params data found [ 277.200218][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.211362][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.219842][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.226987][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.286382][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.313506][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.328128][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.335307][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.348900][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.426209][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.452033][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.466461][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.478934][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.543961][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.561557][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.570363][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.575914][ T7790] loop0: detected capacity change from 0 to 1024 [ 277.591569][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.600064][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.603921][ T6536] EXT4-fs (loop3): unmounting filesystem. [ 277.641613][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.650048][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.688900][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.853066][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.860257][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.882002][ T7772] device bridge_slave_0 entered promiscuous mode [ 277.930996][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.938140][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.972609][ T7772] device bridge_slave_1 entered promiscuous mode [ 278.104719][ T5828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.150199][ T7772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.203834][ T7772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.254175][ T5828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.371119][ T7772] team0: Port device team_slave_0 added [ 278.407244][ T7772] team0: Port device team_slave_1 added [ 278.427733][ T5828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.531331][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.531332][ T3581] Bluetooth: hci1: command tx timeout [ 278.538291][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.538315][ T7772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.556838][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.656545][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.690176][ T7772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.691326][ T3574] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.714464][ T3574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.724894][ T3574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.735575][ T3574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.743203][ T3574] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.753998][ T3569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.763841][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.777086][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.795979][ T7647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.819753][ T5828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.850829][ T3574] Bluetooth: hci0: command tx timeout [ 278.949107][ T7772] device hsr_slave_0 entered promiscuous mode [ 278.964066][ T7772] device hsr_slave_1 entered promiscuous mode [ 278.974941][ T7772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.985810][ T7772] Cannot create hsr debugfs directory [ 278.998846][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.011447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.020577][ T26] audit: type=1800 audit(1718049682.793:209): pid=7816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 279.091446][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.099824][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.153925][ T7647] device veth0_vlan entered promiscuous mode [ 279.190030][ T6667] kernel write not supported for file bpf-prog (pid: 6667 comm: kworker/1:12) [ 279.201792][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.218439][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.240180][ T7647] device veth1_vlan entered promiscuous mode [ 279.455397][ T5828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.534577][ T7647] device veth0_macvtap entered promiscuous mode [ 279.547531][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.561582][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.570143][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.579196][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.625981][ T5828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.702813][ T7647] device veth1_macvtap entered promiscuous mode [ 279.721070][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.729333][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.758371][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.781141][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.801575][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.820931][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.841706][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.861103][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.876211][ T7824] loop0: detected capacity change from 0 to 32768 [ 279.882946][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.894966][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.905082][ T7824] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7824) [ 279.922720][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.935494][ T7824] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.948436][ T5828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.961372][ T7824] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 279.970066][ T7824] BTRFS info (device loop0): enabling auto defrag [ 279.982294][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.011400][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.021713][ T7824] BTRFS info (device loop0): doing ref verification [ 280.022989][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.042215][ T7824] BTRFS info (device loop0): max_inline at 0 [ 280.047984][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.062016][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.070732][ T7824] BTRFS info (device loop0): force clearing of disk cache [ 280.077875][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.080114][ T7824] BTRFS info (device loop0): turning on sync discard [ 280.090949][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.113392][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.120690][ T7824] BTRFS info (device loop0): disabling tree log [ 280.126738][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.129425][ T7824] BTRFS info (device loop0): using free space tree [ 280.146170][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.166602][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.183289][ T5828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.208306][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 280.226463][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.239631][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.254651][ T7647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.274728][ T7647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.288105][ T7647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.310590][ T7647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.442018][ T7824] BTRFS info (device loop0): enabling ssd optimizations [ 280.485857][ T7824] BTRFS info (device loop0): rebuilding free space tree [ 280.557992][ T3859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.592019][ T3859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.613413][ T3569] Bluetooth: hci1: command tx timeout [ 280.632203][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.639318][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.648059][ T7809] device bridge_slave_0 entered promiscuous mode [ 280.656130][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.683670][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.705770][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.739810][ T7809] device bridge_slave_1 entered promiscuous mode [ 280.759496][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.779521][ T6520] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.828437][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.861054][ T3569] Bluetooth: hci3: command tx timeout [ 281.042733][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.062725][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.177243][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.327662][ T7851] loop1: detected capacity change from 0 to 2048 [ 281.373120][ T7809] team0: Port device team_slave_0 added [ 281.403486][ T7809] team0: Port device team_slave_1 added [ 281.406287][ T7852] loop0: detected capacity change from 0 to 4096 [ 281.418491][ T7852] ntfs3: Unknown parameter 'fma{k' [ 281.425008][ T7851] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 8192 [ 281.443030][ T7851] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 281.591737][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.616461][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.669584][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.727094][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.744017][ T7647] EXT4-fs (loop1): unmounting filesystem. [ 281.749879][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.785109][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.021881][ T7809] device hsr_slave_0 entered promiscuous mode [ 282.039610][ T7809] device hsr_slave_1 entered promiscuous mode [ 282.061482][ T7809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.069094][ T7809] Cannot create hsr debugfs directory [ 282.137699][ T7772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.224566][ T7772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.293606][ T7772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.306979][ T7772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.423640][ T7871] loop1: detected capacity change from 0 to 2048 [ 282.513161][ T7871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 282.692906][ T3574] Bluetooth: hci1: command tx timeout [ 282.844253][ T7772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.875697][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.887613][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.911746][ T7772] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.931595][ T3574] Bluetooth: hci3: command tx timeout [ 282.981396][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.990185][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.006545][ T4573] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.013809][ T4573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.026773][ T7647] EXT4-fs (loop1): unmounting filesystem. [ 283.033812][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.048127][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.092127][ T4573] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.099284][ T4573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.172630][ T5828] device hsr_slave_0 left promiscuous mode [ 283.187110][ T5828] device hsr_slave_1 left promiscuous mode [ 283.208721][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.230849][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.263640][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.280831][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.300951][ T5828] device bridge_slave_1 left promiscuous mode [ 283.307234][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.351152][ T5828] device bridge_slave_0 left promiscuous mode [ 283.363005][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.412776][ T5828] device hsr_slave_0 left promiscuous mode [ 283.431056][ T5828] device hsr_slave_1 left promiscuous mode [ 283.437574][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.464994][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.491668][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.510759][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.528329][ T5828] device bridge_slave_1 left promiscuous mode [ 283.555111][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.573080][ T7892] loop0: detected capacity change from 0 to 16 [ 283.588058][ T5828] device bridge_slave_0 left promiscuous mode [ 283.595246][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.595311][ T7892] erofs: (device loop0): mounted with root inode @ nid 36. [ 283.642522][ T3569] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 283.671056][ T5828] device veth1_macvtap left promiscuous mode [ 283.680402][ T7892] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 283.693603][ T5828] device veth0_macvtap left promiscuous mode [ 283.694351][ T3574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.699817][ T5828] device veth1_vlan left promiscuous mode [ 283.713777][ T5828] device veth0_vlan left promiscuous mode [ 283.719709][ T3574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.731675][ T3574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.741393][ T3574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.749052][ T5828] device veth1_macvtap left promiscuous mode [ 283.761560][ T3574] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.769748][ T3574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.769851][ T5828] device veth0_macvtap left promiscuous mode [ 283.819228][ T26] audit: type=1800 audit(1718049687.593:210): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 283.830708][ T5828] device veth1_vlan left promiscuous mode [ 283.884235][ T5828] device veth0_vlan left promiscuous mode [ 284.054289][ T7900] loop0: detected capacity change from 0 to 2048 [ 284.136269][ T7900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.399311][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 284.416232][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 284.438494][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.464364][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.557714][ T5828] bond0 (unregistering): Released all slaves [ 284.716734][ T5828] team0 (unregistering): Port device bridge1 removed [ 284.770916][ T3574] Bluetooth: hci1: command tx timeout [ 284.908497][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 284.933170][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 284.968538][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.994313][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.010718][ T3569] Bluetooth: hci3: command tx timeout [ 285.114098][ T5828] bond0 (unregistering): Released all slaves [ 285.181913][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.189975][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.200179][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.229141][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.243988][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.289416][ T7772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.319902][ T7772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.348716][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.363562][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.372646][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.381183][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.390247][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.399273][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.408106][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.480304][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.503743][ T6520] EXT4-fs (loop0): unmounting filesystem. [ 285.810929][ T3569] Bluetooth: hci0: command tx timeout [ 285.868522][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.899585][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.911585][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.924824][ T7809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.972286][ T7809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.028421][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.038055][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.054747][ T7809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.076472][ T7894] chnl_net:caif_netlink_parms(): no params data found [ 286.094112][ T7809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.183915][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.193360][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.209334][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.218605][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.244616][ T7772] device veth0_vlan entered promiscuous mode [ 286.293352][ T3574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.324896][ T3574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.334385][ T3574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.344838][ T3574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.363356][ T3574] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.377580][ T3574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.433968][ T7772] device veth1_vlan entered promiscuous mode [ 286.481207][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.488320][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.519141][ T7894] device bridge_slave_0 entered promiscuous mode [ 286.541179][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.548305][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.581928][ T7894] device bridge_slave_1 entered promiscuous mode [ 286.661413][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.715297][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.793747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.813581][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.850494][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.883271][ T7894] team0: Port device team_slave_0 added [ 286.893250][ T7772] device veth0_macvtap entered promiscuous mode [ 286.928652][ T7894] team0: Port device team_slave_1 added [ 286.958537][ T7772] device veth1_macvtap entered promiscuous mode [ 287.052190][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.059266][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.100298][ T3569] Bluetooth: hci3: command tx timeout [ 287.121451][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.141795][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.150155][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.188711][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.213570][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.238971][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.270672][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.280525][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.310676][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.320522][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.350670][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.372207][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.434652][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.451461][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.526201][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.558789][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.574383][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.611334][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.655087][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.674548][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.700901][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.720656][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.740669][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.762805][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.778922][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.802316][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.831850][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.853789][ T7772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.887409][ T7772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.900744][ T3574] Bluetooth: hci0: command tx timeout [ 287.920717][ T7772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.929446][ T7772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.964786][ T7913] chnl_net:caif_netlink_parms(): no params data found [ 288.034423][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.051459][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.059956][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.067094][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.101018][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.109872][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.131234][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.138356][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.161058][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.209154][ T7894] device hsr_slave_0 entered promiscuous mode [ 288.233090][ T7894] device hsr_slave_1 entered promiscuous mode [ 288.240791][ T7894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.248379][ T7894] Cannot create hsr debugfs directory [ 288.290433][ T7809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.321491][ T7809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.352210][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.360460][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.381639][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.391628][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.400272][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.432563][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.441267][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.449766][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.451114][ T3574] Bluetooth: hci2: command tx timeout [ 288.466858][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.481709][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.542271][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.550324][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.822627][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.843002][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.864250][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.884937][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.904245][ T7913] device bridge_slave_0 entered promiscuous mode [ 288.944233][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.977658][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.001745][ T7913] device bridge_slave_1 entered promiscuous mode [ 289.060076][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.086936][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.100731][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.141454][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.168156][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.235242][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.298360][ T5828] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.327929][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.354142][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.369564][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.432125][ T5828] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.489251][ T7894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.547900][ T7913] team0: Port device team_slave_0 added [ 289.564823][ T7913] team0: Port device team_slave_1 added [ 289.650122][ T7894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.678248][ T5828] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.700322][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.718487][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.767570][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.800033][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.812488][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.846010][ T7894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.869952][ T5828] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.883737][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.891007][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.920372][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.966856][ T7894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.971191][ T3574] Bluetooth: hci0: command tx timeout [ 289.991743][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.000234][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.010578][ T7809] device veth0_vlan entered promiscuous mode [ 290.042858][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.058658][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.141969][ T7809] device veth1_vlan entered promiscuous mode [ 290.160002][ T7913] device hsr_slave_0 entered promiscuous mode [ 290.182196][ T7913] device hsr_slave_1 entered promiscuous mode [ 290.204944][ T7913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.222379][ T7913] Cannot create hsr debugfs directory [ 290.365898][ T7809] device veth0_macvtap entered promiscuous mode [ 290.401725][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.421495][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.438923][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.443109][ T7935] loop2: detected capacity change from 0 to 256 [ 290.462118][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.504355][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.514842][ T7809] device veth1_macvtap entered promiscuous mode [ 290.530904][ T3574] Bluetooth: hci2: command tx timeout [ 290.567095][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.589031][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.600278][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.619959][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.632761][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.652976][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.668411][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.687358][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.705442][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.723921][ T7894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.753569][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.773294][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.790270][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.801235][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.839426][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.849511][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.876062][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.889217][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.904211][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.917523][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.936844][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.954430][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.989364][ T7894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.002476][ T7894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.012364][ T7894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.044629][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.064535][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.084481][ T7809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.100923][ T7809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.109655][ T7809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.137020][ T7809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.433857][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.452176][ T26] audit: type=1326 audit(1718049695.233:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848827cf69 code=0x7ffc0000 [ 291.490116][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.495337][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.520735][ T26] audit: type=1326 audit(1718049695.263:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f848827cf69 code=0x7ffc0000 [ 291.560072][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.569200][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.685895][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.701176][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 291.762247][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.774274][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.795737][ T7894] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.807556][ T7951] loop3: detected capacity change from 0 to 16 [ 291.838011][ T7951] erofs: (device loop3): mounted with root inode @ nid 36. [ 291.879907][ T3574] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 291.907601][ T7951] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 291.940326][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.961473][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.969972][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.977121][ T7847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.987438][ T26] audit: type=1800 audit(1718049695.773:213): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 291.987779][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.016542][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.025152][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.032286][ T7847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.040056][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.050903][ T3574] Bluetooth: hci0: command tx timeout [ 292.089065][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.099537][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.129852][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.141428][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.150548][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.184728][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.210404][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.283295][ T7913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.301789][ T7913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.340098][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.358610][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.398140][ T7913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.425626][ T7913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.447880][ T7894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.480577][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.513943][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.533046][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.614960][ T3574] Bluetooth: hci2: command tx timeout [ 292.674120][ T7955] loop3: detected capacity change from 0 to 32768 [ 292.698804][ T7955] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7955) [ 292.747572][ T7955] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 292.795948][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.811325][ T7955] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 292.835195][ T7955] BTRFS info (device loop3): enabling auto defrag [ 292.841411][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.852532][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.867502][ T7955] BTRFS info (device loop3): doing ref verification [ 292.873203][ T7913] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.889040][ T7955] BTRFS info (device loop3): max_inline at 0 [ 292.900548][ T7955] BTRFS info (device loop3): force clearing of disk cache [ 292.912560][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.925879][ T7955] BTRFS info (device loop3): turning on sync discard [ 292.926245][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.961490][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.968630][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.968910][ T7955] BTRFS info (device loop3): disabling tree log [ 293.003614][ T5828] device hsr_slave_0 left promiscuous mode [ 293.006584][ T7955] BTRFS info (device loop3): using free space tree [ 293.019516][ T5828] device hsr_slave_1 left promiscuous mode [ 293.037488][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.046829][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.064779][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.085820][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.100428][ T5828] device bridge_slave_1 left promiscuous mode [ 293.110928][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.127599][ T5828] device bridge_slave_0 left promiscuous mode [ 293.135950][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.157155][ T5828] device hsr_slave_0 left promiscuous mode [ 293.173698][ T5828] device hsr_slave_1 left promiscuous mode [ 293.180539][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.188814][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.198582][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.206143][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.215592][ T5828] device bridge_slave_1 left promiscuous mode [ 293.222004][ T7955] BTRFS info (device loop3): enabling ssd optimizations [ 293.222118][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.238270][ T5828] device bridge_slave_0 left promiscuous mode [ 293.244713][ T7955] BTRFS info (device loop3): rebuilding free space tree [ 293.252288][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.275295][ T5828] device veth1_macvtap left promiscuous mode [ 293.281611][ T5828] device veth0_macvtap left promiscuous mode [ 293.287925][ T5828] device veth1_vlan left promiscuous mode [ 293.294192][ T5828] device veth0_vlan left promiscuous mode [ 293.301993][ T5828] device veth1_macvtap left promiscuous mode [ 293.308049][ T5828] device veth0_macvtap left promiscuous mode [ 293.314319][ T5828] device veth1_vlan left promiscuous mode [ 293.320125][ T5828] device veth0_vlan left promiscuous mode [ 293.379379][ T7809] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.017047][ T7979] could not allocate digest TFM handle sha256-arm64-neon [ 294.159403][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 294.197007][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 294.235373][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.272995][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.398268][ T5828] bond0 (unregistering): Released all slaves [ 294.666626][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 294.685359][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 294.693167][ T3574] Bluetooth: hci2: command tx timeout [ 294.705821][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.724855][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.807684][ T5828] bond0 (unregistering): Released all slaves [ 294.892903][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.902496][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.911836][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.920310][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.927467][ T3647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.940056][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.956507][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.055916][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.076924][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.097754][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.114591][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.127866][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.140305][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.155788][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.201643][ T7913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.220317][ T7913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.263013][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.280351][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.289743][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.305881][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.316940][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.330803][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.339772][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.367667][ T7894] device veth0_vlan entered promiscuous mode [ 295.386948][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.403375][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.419947][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.436021][ T7894] device veth1_vlan entered promiscuous mode [ 295.460309][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.477854][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.488452][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.586503][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.605753][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.623795][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.638236][ T7894] device veth0_macvtap entered promiscuous mode [ 295.654478][ T7894] device veth1_macvtap entered promiscuous mode [ 295.699123][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.710403][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.727581][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.740091][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.756990][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.767656][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.811947][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.830490][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.843574][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.864026][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.881526][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.893339][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.911201][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.924213][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.935320][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.954321][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.992311][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.027820][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.048304][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.074954][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.103439][ T7894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.114103][ T7894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.123588][ T7894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.133401][ T7894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.158823][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.167104][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.179100][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.316881][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.331768][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.392327][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.396327][ T7913] device veth0_vlan entered promiscuous mode [ 296.425120][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.446101][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.462272][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.480885][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.540284][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.551542][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.561841][ T7913] device veth1_vlan entered promiscuous mode [ 296.572002][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.593472][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.646833][ T8013] could not allocate digest TFM handle sha256-arm64-neon [ 296.654233][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.678760][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.707777][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.745885][ T7913] device veth0_macvtap entered promiscuous mode [ 296.762438][ T8020] loop3: detected capacity change from 0 to 64 [ 296.786434][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.805595][ T26] audit: type=1800 audit(1718049700.583:214): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=2EAD85241280AE dev="loop3" ino=22 res=0 errno=0 [ 296.811380][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.890549][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.915104][ T7913] device veth1_macvtap entered promiscuous mode [ 296.938245][ T8022] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.968955][ T8022] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.016492][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.069437][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.086386][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.110729][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.130661][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.159146][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.191633][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.212710][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.245047][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.260542][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.268397][ T27] INFO: task kworker/u4:13:3959 blocked for more than 143 seconds. 2024/06/10 20:01:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 297.301841][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.333200][ T27] Not tainted 6.1.92-syzkaller #0 [ 297.343592][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.403879][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.470665][ T27] task:kworker/u4:13 state:D stack:20344 pid:3959 ppid:2 flags:0x00004000 [ 297.479940][ T27] Workqueue: writeback wb_workfn (flush-7:4) [ 297.516657][ T27] Call Trace: [ 297.519989][ T27] [ 297.535868][ T27] __schedule+0x142d/0x4550 [ 297.540465][ T27] ? __sched_text_start+0x8/0x8 [ 297.560684][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 297.566194][ T27] ? blk_check_plugged+0x250/0x250 [ 297.580677][ T27] ? wq_worker_sleeping+0x5f/0x270 [ 297.585878][ T27] schedule+0xbf/0x180 [ 297.606201][ T27] schedule_preempt_disabled+0xf/0x20 [ 297.614320][ T27] __mutex_lock+0x6b9/0xd80 [ 297.618850][ T27] ? __mutex_lock+0x53c/0xd80 [ 297.645929][ T27] ? exfat_write_inode+0x65/0x110 [ 297.665773][ T27] ? mutex_lock_nested+0x10/0x10 [ 297.670833][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 297.676045][ T27] exfat_write_inode+0x65/0x110 [ 297.706088][ T27] __writeback_single_inode+0x67d/0x11e0 [ 297.711844][ T27] writeback_sb_inodes+0xc2b/0x1b20 [ 297.717069][ T27] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 297.751457][ T27] ? queue_io+0x630/0x630 [ 297.755868][ T27] ? __writeback_inodes_wb+0x400/0x400 [ 297.786060][ T27] __writeback_inodes_wb+0x114/0x400 [ 297.791458][ T27] wb_writeback+0x4b1/0xe10 [ 297.812381][ T27] ? percpu_ref_tryget+0x260/0x260 [ 297.817559][ T27] ? _find_next_bit+0x11b/0x120 [ 297.847241][ T27] wb_workfn+0xc9e/0x1020 [ 297.851706][ T27] ? inode_wait_for_writeback+0x280/0x280 [ 297.857453][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 297.892722][ T27] ? print_irqtrace_events+0x210/0x210 [ 297.920781][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 297.930820][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 297.936068][ T27] ? process_one_work+0x7a9/0x11d0 [ 297.952996][ T27] process_one_work+0x8a9/0x11d0 [ 297.958022][ T27] ? worker_detach_from_pool+0x260/0x260 [ 297.992118][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 298.010702][ T27] ? kthread_data+0x4e/0xc0 [ 298.015269][ T27] ? wq_worker_running+0x97/0x190 [ 298.020311][ T27] worker_thread+0xa47/0x1200 [ 298.040680][ T27] ? _raw_spin_unlock+0x40/0x40 [ 298.045595][ T27] kthread+0x28d/0x320 [ 298.049671][ T27] ? worker_clr_flags+0x190/0x190 [ 298.062092][ T27] ? kthread_blkcg+0xd0/0xd0 [ 298.066747][ T27] ret_from_fork+0x1f/0x30 [ 298.085961][ T27] [ 298.110786][ T27] [ 298.110786][ T27] Showing all locks held in the system: [ 298.118551][ T27] 1 lock held by rcu_tasks_kthre/12: [ 298.181953][ T27] #0: ffffffff8d12ae50 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 298.230733][ T27] 1 lock held by rcu_tasks_trace/13: [ 298.236069][ T27] #0: ffffffff8d12b650 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 298.310651][ T27] 1 lock held by khungtaskd/27: [ 298.315544][ T27] #0: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 298.390782][ T27] 2 locks held by getty/3300: [ 298.420768][ T27] #0: ffff88814c4d0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 298.430587][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [