last executing test programs: 20.501365722s ago: executing program 4 (id=1058): truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0xa}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_BOS={0x5, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) lseek(r5, 0x9, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r7, r7, 0x0, 0x7a680000) pwritev2(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="f4", 0x1}], 0x1, 0x0, 0x0, 0x14) 19.534665165s ago: executing program 4 (id=1066): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x4, 0x54f9, &(0x7f000000ab40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=@v2={0x5, 0x0, 0x0, 0x0, 0x89, "54f73d58899afc1ea27ff45f975a97f035447ddce6392edf077197e75815e182f0dd95461ee2c9ae3a3972b725e7ad9f900a981897999dfdec169aa4e6ae5ebb14ab291678d4b01c28834119c7aadfd3f9f18b45affedc1a3713d7d0127b73a82c48d02c02572baff14a4aae53b1455d62bd421e0d52e9fa92d427feb7da4e34fa44a93d79f5bc5c4d"}, 0x92, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', 0x0, 0xfd99) 19.489159829s ago: executing program 0 (id=1067): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1008800, &(0x7f0000000100)=ANY=[], 0x1, 0x1e5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0) 18.588863476s ago: executing program 0 (id=1080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, 0x3c, 0x0) 17.843292849s ago: executing program 4 (id=1083): unshare(0x400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) connect$inet(r1, 0x0, 0x0) 17.472764131s ago: executing program 0 (id=1088): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x7, 0x0, 0x2) 17.446511813s ago: executing program 4 (id=1089): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000400)={[{@dioread_nolock}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@noinit_itable}, {@errors_continue}, {@usrjquota}, {@orlov}, {@minixdf}, {@resgid}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$eJzs289vFFUcAPDvzLag/GpFREHQKhobf7S0oHLwotHEgyYmesBjbQtBFmpoTYQ0Wo3BoyHxbjya+Bd40otRTyZe9W5IiDYmoKea2Z0pu0u39Mcui8znkwy8t/N23/vum7fz9r1uAKU1lP2TROyIiN8iYqCebS4wVP/v2uL85D+L85NJLC29+WdSK3d1cX6yKFo8b3ueGU4j0k+TvJJms+cvnJ6oVqfP5fnRuTPvjc6ev/DMqTMTJ6dPTp8dP3bs6JGx558bf7YjcWZxXd3/4cyBfa++fen1yeOX3vnpm6y9ew/WzzfG0SlDWeB/LdW0nnu805X12M6GdNLXw4awLpWIyLqrvzb+B6IS1ztvIF75pKeNA7oquzdtbX96YQm4gyXR6xYAvVHc6LPvv8Vxi6Yet4UrL9a/AGVxX8uP+pm+SPMy/V2sfygiji/8+2V2RJfWIQAAGn2XzX+eXmn+l8behnK78j2UwYi4JyJ2R8S9EbEnIu6LqJW9PyIeWGf9rVtDN85/0ssbCmyNsvnfC/neVvP8r5j9xWAlz+2sxd+fnDhVnT6cvyfD0b81y4+tUsf3L//6ebtzjfO/7MjqL+aCeTsu97Us0E1NzE10alJ65eOI/X0rxZ8s7wQkEbEvIvav76V3FYlTT359oF2hm8e/ig7sMy19FfFEvf8XoiX+QrL6/uToXVGdPjxaXBU3+vmXi2+0q39T8XdA1v/bmq//lhIDfyeN+7Wz66/j4u+ftf1Os9Hrf0vyVm3Pekv+2AcTc3PnxiK2JK/V8k2Pj19/bpEvymfxDx9aefzvzp+Txf9gRGQX8cGIeCgiHs7b/khEPBoRh1aJ/8eXHnt34/F3Vxb/1Iqff8vX/2Bz/68/UTn9w7ft6l9b/x+tpYbzR2qffzex1gZu5r0DAACA/4s0InZEko4sp9N0ZKT+N/x7YltanZmde+rEzPtnp+q/ERiM/rRY6RpoWA8dSxbyV6znx/O14uL8kXzd+IvK3bX8yORMdarHsUPZbW8z/jN/VHrdOqDr/F4Lyqt1/Kc9agdw67n/Q3kZ/1Bexj+U10rj/6OWvL0AuDO5/0N5Gf9QXsY/lJfxD6W0md/1S5Q5Eelt0QyJLiV6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGf8FAAD//yWS7pw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 17.053778176s ago: executing program 4 (id=1096): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000380)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file2\x00', 0x0, 0x1000, 0x0) 16.856274373s ago: executing program 0 (id=1099): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file4\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x1, 0x211, &(0x7f0000000100)="$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") r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000340)=""/182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 16.772671031s ago: executing program 4 (id=1100): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303, 0x36}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) 16.752507152s ago: executing program 3 (id=1101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 16.511827153s ago: executing program 3 (id=1103): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.798910193s ago: executing program 0 (id=1104): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) recvmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fe47, 0x0, {}, {0x0, 0xea60}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) 15.768872406s ago: executing program 3 (id=1105): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "87d76025c518a942888499d8fe83bf94241848bc23b183ab24ea0eee892dc70c4ea6f5a235d88124b2790fb027430e27ae472dae36fb1dc328d67826fffc0f87"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$setperm(0x5, r0, 0x0) 15.632476167s ago: executing program 3 (id=1106): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000400)={[{@dioread_nolock}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@noinit_itable}, {@errors_continue}, {@usrjquota}, {@orlov}, {@minixdf}, {@resgid}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 15.537194566s ago: executing program 0 (id=1109): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x7, 0x0, 0x2) 15.475954971s ago: executing program 1 (id=1110): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000280)) 15.36815317s ago: executing program 3 (id=1111): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000380)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file2\x00', 0x0, 0x1000, 0x0) 15.181031646s ago: executing program 3 (id=1114): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'pimreg0\x00'}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/238, 0x27, 0xee, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) 14.186491421s ago: executing program 1 (id=1116): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000c40)={&(0x7f0000000300)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpquota}, {@filestreams}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb8ab, &(0x7f000000b880)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) 13.453362643s ago: executing program 1 (id=1119): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) recvmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fe47, 0x0, {}, {0x0, 0xea60}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) 13.254506771s ago: executing program 1 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x38}}, 0x0) 13.219730883s ago: executing program 1 (id=1121): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000400)={[{@dioread_nolock}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@noinit_itable}, {@errors_continue}, {@usrjquota}, {@orlov}, {@minixdf}, {@resgid}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$eJzs289vFFUcAPDvzLag/GpFREHQKhobf7S0oHLwotHEgyYmesBjbQtBFmpoTYQ0Wo3BoyHxbjya+Bd40otRTyZe9W5IiDYmoKea2Z0pu0u39Mcui8znkwy8t/N23/vum7fz9r1uAKU1lP2TROyIiN8iYqCebS4wVP/v2uL85D+L85NJLC29+WdSK3d1cX6yKFo8b3ueGU4j0k+TvJJms+cvnJ6oVqfP5fnRuTPvjc6ev/DMqTMTJ6dPTp8dP3bs6JGx558bf7YjcWZxXd3/4cyBfa++fen1yeOX3vnpm6y9ew/WzzfG0SlDWeB/LdW0nnu805X12M6GdNLXw4awLpWIyLqrvzb+B6IS1ztvIF75pKeNA7oquzdtbX96YQm4gyXR6xYAvVHc6LPvv8Vxi6Yet4UrL9a/AGVxX8uP+pm+SPMy/V2sfygiji/8+2V2RJfWIQAAGn2XzX+eXmn+l8behnK78j2UwYi4JyJ2R8S9EbEnIu6LqJW9PyIeWGf9rVtDN85/0ssbCmyNsvnfC/neVvP8r5j9xWAlz+2sxd+fnDhVnT6cvyfD0b81y4+tUsf3L//6ebtzjfO/7MjqL+aCeTsu97Us0E1NzE10alJ65eOI/X0rxZ8s7wQkEbEvIvav76V3FYlTT359oF2hm8e/ig7sMy19FfFEvf8XoiX+QrL6/uToXVGdPjxaXBU3+vmXi2+0q39T8XdA1v/bmq//lhIDfyeN+7Wz66/j4u+ftf1Os9Hrf0vyVm3Pekv+2AcTc3PnxiK2JK/V8k2Pj19/bpEvymfxDx9aefzvzp+Txf9gRGQX8cGIeCgiHs7b/khEPBoRh1aJ/8eXHnt34/F3Vxb/1Iqff8vX/2Bz/68/UTn9w7ft6l9b/x+tpYbzR2qffzex1gZu5r0DAACA/4s0InZEko4sp9N0ZKT+N/x7YltanZmde+rEzPtnp+q/ERiM/rRY6RpoWA8dSxbyV6znx/O14uL8kXzd+IvK3bX8yORMdarHsUPZbW8z/jN/VHrdOqDr/F4Lyqt1/Kc9agdw67n/Q3kZ/1Bexj+U10rj/6OWvL0AuDO5/0N5Gf9QXsY/lJfxD6W0md/1S5Q5Eelt0QyJLiV6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGf8FAAD//yWS7pw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 13.072616636s ago: executing program 1 (id=1123): syz_emit_ethernet(0xb2, &(0x7f0000000a80)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) 8.510304555s ago: executing program 2 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) dup(0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @action={{{}, {}, @device_b}, @sa_query_req}}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(r7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10090}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 1.435788378s ago: executing program 2 (id=1140): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client0\x00', 0xffffffff80000006, "da92a01666c16f98", "2000ef2eb76cb641d16000"}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x80}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) 793.663042ms ago: executing program 2 (id=1141): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde1, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 335.091462ms ago: executing program 2 (id=1142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x38}}, 0x0) 188.403864ms ago: executing program 2 (id=1143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0xffffffffffffff7c}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}}, 0x0) 0s ago: executing program 2 (id=1144): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x50000) kernel console output (not intermixed with test programs): mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.817035][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.835757][ T4231] Bluetooth: hci8: command tx timeout [ 100.859327][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.868294][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.871336][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.883474][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.885851][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.905114][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.906388][ T5969] loop3: detected capacity change from 0 to 47 [ 100.907603][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.069626][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.072726][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.077349][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.079859][ T5969] syz.3.538: attempt to access beyond end of device [ 101.079859][ T5969] loop3: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 101.104692][ T5969] Buffer I/O error on dev loop3, logical block 24, lost async page write [ 101.107130][ T5969] syz.3.538: attempt to access beyond end of device [ 101.107130][ T5969] loop3: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 101.110683][ T5969] Buffer I/O error on dev loop3, logical block 25, lost async page write [ 101.153533][ T5198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.155940][ T5198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.160753][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.388283][ T5975] dlm: no locking on control device [ 101.753153][ T5960] loop2: detected capacity change from 0 to 32768 [ 101.765392][ T5971] loop0: detected capacity change from 0 to 32768 [ 101.772364][ T5971] XFS: ikeep mount option is deprecated. [ 101.779885][ T5960] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.534 (5960) [ 101.834944][ T5960] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 101.837798][ T5960] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 101.866006][ T5960] BTRFS info (device loop2): using free space tree [ 101.868194][ T5971] XFS (loop0): Mounting V5 Filesystem [ 101.950276][ T5971] XFS (loop0): Ending clean mount [ 101.965366][ T5971] XFS (loop0): Quotacheck needed: Please wait. [ 102.025938][ T5971] XFS (loop0): Quotacheck: Done. [ 102.086547][ T5960] BTRFS info (device loop2): enabling ssd optimizations [ 102.123694][ T4233] XFS (loop0): Unmounting Filesystem [ 102.162122][ T4764] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 102.505484][ T4231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 102.509604][ T4231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 102.513435][ T4231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 102.524894][ T4231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 102.527494][ T4231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 102.530375][ T4231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 102.585492][ T6024] loop0: detected capacity change from 0 to 128 [ 102.754669][ T6028] dlm: no locking on control device [ 102.925391][ T4231] Bluetooth: hci8: command tx timeout [ 103.259906][ T6044] loop2: detected capacity change from 0 to 2048 [ 103.310757][ T6044] Alternate GPT is invalid, using primary GPT. [ 103.325941][ T6044] loop2: p1 p2 p3 [ 103.428929][ T4567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.452699][ T6019] chnl_net:caif_netlink_parms(): no params data found [ 103.557163][ T4218] udevd[4218]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.591256][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.609099][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.613883][ T4567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.716066][ T6053] loop2: detected capacity change from 0 to 47 [ 103.764509][ T4567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.811372][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.813593][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.816207][ T6019] device bridge_slave_0 entered promiscuous mode [ 103.823974][ T6040] loop0: detected capacity change from 0 to 32768 [ 103.830568][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.833769][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.836483][ T6019] device bridge_slave_1 entered promiscuous mode [ 103.854585][ T6040] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.558 (6040) [ 103.876444][ T6040] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 103.879429][ T6053] syz.2.562: attempt to access beyond end of device [ 103.879429][ T6053] loop2: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 103.890193][ T6040] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 103.893673][ T6040] BTRFS info (device loop0): using free space tree [ 103.921876][ T6053] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 103.940848][ T6053] syz.2.562: attempt to access beyond end of device [ 103.940848][ T6053] loop2: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 103.961069][ T6053] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 103.965926][ T4567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.030296][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.049554][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.136777][ T6040] BTRFS info (device loop0): enabling ssd optimizations [ 104.180929][ T6019] team0: Port device team_slave_0 added [ 104.194452][ T6019] team0: Port device team_slave_1 added [ 104.252083][ T4233] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 104.319251][ T6073] dlm: no locking on control device [ 104.333260][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.335157][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.395711][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.400156][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.408478][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.420134][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.591994][ T47] Bluetooth: hci9: command tx timeout [ 104.594263][ T6019] device hsr_slave_0 entered promiscuous mode [ 104.652379][ T6019] device hsr_slave_1 entered promiscuous mode [ 104.722209][ T6019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.724388][ T6019] Cannot create hsr debugfs directory [ 104.914966][ T4231] block nbd0: Receive control failed (result -32) [ 104.921186][ T6084] block nbd0: shutting down sockets [ 104.991089][ T6088] loop2: detected capacity change from 0 to 16 [ 105.002185][ T4231] Bluetooth: hci8: command tx timeout [ 105.071335][ T6088] erofs: (device loop2): mounted with root inode @ nid 36. [ 105.098759][ T6088] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 105.122826][ T6088] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 105.145162][ T6092] loop0: detected capacity change from 0 to 512 [ 105.201953][ T6092] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.280021][ T6092] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=4 [ 105.289041][ T6092] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 105.296748][ T6092] EXT4-fs (loop0): mount failed [ 105.799910][ T6098] loop4: detected capacity change from 0 to 32768 [ 106.404211][ T6098] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.574 (6098) [ 106.462208][ T6098] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 106.478267][ T6098] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 106.480751][ T6098] BTRFS info (device loop4): using free space tree [ 106.672049][ T47] Bluetooth: hci9: command tx timeout [ 106.701377][ T6098] BTRFS info (device loop4): enabling ssd optimizations [ 106.901116][ T4693] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 106.993220][ T47] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 106.995681][ T47] Bluetooth: hci2: Injecting HCI hardware error event [ 106.999399][ T47] Bluetooth: hci2: hardware error 0x00 [ 107.563594][ T6142] loop2: detected capacity change from 0 to 32768 [ 107.581387][ T6142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.579 (6142) [ 107.599271][ T6142] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.603087][ T6142] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 107.605651][ T6142] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 107.612866][ T6142] BTRFS info (device loop2): force zstd compression, level 3 [ 107.614975][ T6142] BTRFS info (device loop2): enabling auto defrag [ 107.616717][ T6142] BTRFS info (device loop2): use zstd compression, level 3 [ 107.618804][ T6142] BTRFS error (device loop2): unrecognized mount option 'fowner>00000000000000000000' [ 107.657364][ T6142] BTRFS error (device loop2): open_ctree failed [ 107.880475][ T6019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.912616][ T6019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.944124][ T6179] loop2: detected capacity change from 0 to 512 [ 107.946475][ T6179] EXT4-fs: Ignoring removed orlov option [ 107.964602][ T6179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002] [ 107.966973][ T6179] System zones: 1-12 [ 107.974792][ T6179] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.587: casefold flag without casefold feature [ 108.027393][ T6179] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.587: missing EA_INODE flag [ 108.057013][ T6179] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.587: error while reading EA inode 12 err=-117 [ 108.071956][ T6019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.092899][ T6179] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.102267][ T6179] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.587: missing EA_INODE flag [ 108.123884][ T6019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.151954][ T6179] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.587: error while reading EA inode 12 err=-117 [ 108.165603][ T6179] EXT4-fs (loop2): 1 orphan inode deleted [ 108.186850][ T6179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.235807][ T6179] EXT4-fs (loop2): shut down requested (0) [ 108.580844][ T4764] EXT4-fs (loop2): unmounting filesystem. [ 108.669776][ T6202] loop4: detected capacity change from 0 to 128 [ 108.749686][ T4567] device hsr_slave_0 left promiscuous mode [ 108.751856][ T4231] Bluetooth: hci9: command tx timeout [ 108.768231][ T4693] sysv_free_block: flc_count > flc_size [ 108.770129][ T4693] sysv_free_block: flc_count > flc_size [ 108.773400][ T4567] device hsr_slave_1 left promiscuous mode [ 108.776314][ T4693] sysv_free_block: flc_count > flc_size [ 108.777911][ T4693] sysv_free_block: flc_count > flc_size [ 108.779463][ T4693] sysv_free_block: flc_count > flc_size [ 108.784139][ T4693] sysv_free_block: flc_count > flc_size [ 108.785627][ T4693] sysv_free_block: flc_count > flc_size [ 108.787215][ T4693] sysv_free_block: flc_count > flc_size [ 108.788797][ T4693] sysv_free_block: flc_count > flc_size [ 108.790336][ T4693] sysv_free_block: flc_count > flc_size [ 108.794159][ T4693] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 108.962911][ T4567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.964975][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.979169][ T4567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.981386][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.282345][ T47] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 109.424485][ T6209] loop2: detected capacity change from 0 to 1024 [ 109.429752][ T6209] EXT4-fs: Ignoring removed orlov option [ 109.431477][ T6209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.443667][ T4567] device bridge_slave_1 left promiscuous mode [ 109.459757][ T4567] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.719298][ T4567] device bridge_slave_0 left promiscuous mode [ 109.721731][ T4567] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.799367][ T6209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.893179][ T6206] loop4: detected capacity change from 0 to 32768 [ 109.896206][ T6206] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.592 (6206) [ 109.924530][ T6206] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 109.944233][ T6206] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 109.946754][ T6206] BTRFS info (device loop4): using free space tree [ 109.986306][ T6213] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 110.062121][ T4567] device veth1_macvtap left promiscuous mode [ 110.063995][ T4567] device veth0_macvtap left promiscuous mode [ 110.065803][ T4567] device veth1_vlan left promiscuous mode [ 110.067383][ T4567] device veth0_vlan left promiscuous mode [ 110.160707][ T6206] BTRFS info (device loop4): enabling ssd optimizations [ 110.314630][ T4693] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 110.832275][ T47] Bluetooth: hci9: command tx timeout [ 112.924329][ T4567] team0 (unregistering): Port device team_slave_1 removed [ 113.096816][ T4567] team0 (unregistering): Port device team_slave_0 removed [ 113.275461][ T4567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.519489][ T4567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.931352][ T6251] loop0: detected capacity change from 0 to 40427 [ 115.962958][ T6251] F2FS-fs (loop0): invalid crc value [ 115.996105][ T6251] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.025494][ T6251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 116.034155][ T4567] bond0 (unregistering): Released all slaves [ 116.045032][ T6251] F2FS-fs (loop0): Corrupted max_depth of 3: 4294967295 [ 116.413550][ T6257] loop4: detected capacity change from 0 to 512 [ 116.440760][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.459532][ T6019] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.462831][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.465379][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.482297][ T6257] EXT4-fs: Ignoring removed orlov option [ 116.497105][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.506761][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.510145][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.512415][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.519400][ T6257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002] [ 116.522504][ T6257] System zones: 1-12 [ 116.545640][ T6257] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.600: casefold flag without casefold feature [ 116.558864][ T6257] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.600: missing EA_INODE flag [ 116.571161][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.574545][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.577115][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.579112][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.582918][ T6257] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.600: error while reading EA inode 12 err=-117 [ 116.586874][ T6257] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.600: missing EA_INODE flag [ 116.590680][ T6257] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.600: error while reading EA inode 12 err=-117 [ 116.595734][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.599097][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.603607][ T6239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.613430][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.616625][ T4764] EXT4-fs (loop2): unmounting filesystem. [ 116.617639][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.618433][ T6257] EXT4-fs (loop4): 1 orphan inode deleted [ 116.620886][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.622430][ T6257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.641507][ T6257] EXT4-fs (loop4): shut down requested (0) [ 116.668614][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.672887][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.686994][ T6019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.689957][ T6019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.718778][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.721616][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.725975][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.733328][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.740876][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.854676][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 117.150973][ T6288] loop0: detected capacity change from 0 to 128 [ 117.246627][ T4233] sysv_free_block: flc_count > flc_size [ 117.248409][ T4233] sysv_free_block: flc_count > flc_size [ 117.252363][ T4233] sysv_free_block: flc_count > flc_size [ 117.254008][ T4233] sysv_free_block: flc_count > flc_size [ 117.255527][ T4233] sysv_free_block: flc_count > flc_size [ 117.268006][ T4233] sysv_free_block: flc_count > flc_size [ 117.285806][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.291656][ T4233] sysv_free_block: flc_count > flc_size [ 117.291832][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.293404][ T4233] sysv_free_block: flc_count > flc_size [ 117.295690][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.296874][ T4233] sysv_free_block: flc_count > flc_size [ 117.314081][ T4233] sysv_free_block: flc_count > flc_size [ 117.316065][ T4233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 117.369814][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.393314][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.516914][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.519746][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.523025][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.752193][ T6298] loop2: detected capacity change from 0 to 1024 [ 117.757289][ T6298] EXT4-fs: Ignoring removed orlov option [ 117.759056][ T6298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.064670][ T6298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.300020][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.304895][ T6019] device veth0_vlan entered promiscuous mode [ 118.487726][ T6019] device veth1_vlan entered promiscuous mode [ 118.548333][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.551175][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.639547][ T6019] device veth0_macvtap entered promiscuous mode [ 118.664121][ T4764] EXT4-fs (loop2): unmounting filesystem. [ 118.667986][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.672529][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.677240][ T6019] device veth1_macvtap entered promiscuous mode [ 118.682631][ T6306] loop0: detected capacity change from 0 to 512 [ 118.684830][ T6306] EXT4-fs: Ignoring removed orlov option [ 118.692544][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.697701][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.734377][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.744449][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.747129][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.751722][ T6306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002] [ 118.755158][ T6306] System zones: 1-12 [ 118.772089][ T6306] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.615: casefold flag without casefold feature [ 118.775776][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.778393][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.781132][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.785709][ T6306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.615: missing EA_INODE flag [ 118.793989][ T6306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.615: error while reading EA inode 12 err=-117 [ 118.801882][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.804692][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.807293][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.810186][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.824740][ T6306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.615: missing EA_INODE flag [ 118.828331][ T6306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.615: error while reading EA inode 12 err=-117 [ 118.829260][ T6306] EXT4-fs (loop0): 1 orphan inode deleted [ 118.829292][ T6306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.835456][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.835476][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.835494][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.835505][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.835525][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.835535][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.837993][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.838404][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.839028][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.844759][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.844779][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.844788][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.844799][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.844809][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.844820][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.844830][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.844841][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.844855][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.844866][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.844877][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.844888][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.844899][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.844910][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.844922][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.844933][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.855149][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.855295][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.855837][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.858868][ T6019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.858897][ T6019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.858920][ T6019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.858941][ T6019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.907505][ T6306] EXT4-fs (loop0): shut down requested (0) [ 119.005880][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.005922][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.030892][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.041949][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.041993][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.044950][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.047142][ T4233] EXT4-fs (loop0): unmounting filesystem. [ 119.136587][ T6291] loop4: detected capacity change from 0 to 40427 [ 119.148149][ T6291] F2FS-fs (loop4): invalid crc value [ 119.196561][ T6291] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.259515][ T6291] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 119.440330][ T6330] loop0: detected capacity change from 0 to 128 [ 119.495011][ T4233] sysv_free_block: flc_count > flc_size [ 119.591493][ T4233] sysv_free_block: flc_count > flc_size [ 119.596073][ T4233] sysv_free_block: flc_count > flc_size [ 119.597614][ T4233] sysv_free_block: flc_count > flc_size [ 119.599105][ T4233] sysv_free_block: flc_count > flc_size [ 119.600619][ T4233] sysv_free_block: flc_count > flc_size [ 119.610913][ T4233] sysv_free_block: flc_count > flc_size [ 119.615404][ T4233] sysv_free_block: flc_count > flc_size [ 119.616879][ T4233] sysv_free_block: flc_count > flc_size [ 119.625252][ T4233] sysv_free_block: flc_count > flc_size [ 119.627123][ T4233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 119.762337][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 120.082505][ T6350] loop2: detected capacity change from 0 to 1024 [ 120.085886][ T6350] EXT4-fs: Ignoring removed orlov option [ 120.087551][ T6350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.805565][ T6350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 122.100849][ T6365] loop0: detected capacity change from 0 to 128 [ 122.147252][ T4233] sysv_free_block: flc_count > flc_size [ 122.148905][ T4233] sysv_free_block: flc_count > flc_size [ 122.150442][ T4233] sysv_free_block: flc_count > flc_size [ 122.152031][ T4233] sysv_free_block: flc_count > flc_size [ 122.153690][ T4233] sysv_free_block: flc_count > flc_size [ 122.155403][ T4233] sysv_free_block: flc_count > flc_size [ 122.156913][ T4233] sysv_free_block: flc_count > flc_size [ 122.158420][ T4233] sysv_free_block: flc_count > flc_size [ 122.159936][ T4233] sysv_free_block: flc_count > flc_size [ 122.162125][ T4233] sysv_free_block: flc_count > flc_size [ 122.164104][ T4233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 122.352030][ T6373] loop3: detected capacity change from 0 to 256 [ 122.354346][ T6373] exfat: Deprecated parameter 'namecase' [ 122.594613][ T6373] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 122.922482][ T6375] tmpfs: Bad value for 'size' [ 123.162358][ T4764] EXT4-fs (loop2): unmounting filesystem. [ 123.344181][ T6383] loop0: detected capacity change from 0 to 512 [ 123.346496][ T6383] EXT4-fs: Ignoring removed orlov option [ 123.349843][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.641'. [ 123.385333][ T6383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002] [ 123.387624][ T6383] System zones: 1-12 [ 123.394714][ T6383] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.643: casefold flag without casefold feature [ 123.400777][ T6383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.643: missing EA_INODE flag [ 123.407627][ T6383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.643: error while reading EA inode 12 err=-117 [ 123.431351][ T6383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.643: missing EA_INODE flag [ 123.436853][ T6383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.643: error while reading EA inode 12 err=-117 [ 123.442715][ T6383] EXT4-fs (loop0): 1 orphan inode deleted [ 123.444403][ T6383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.482389][ T6383] EXT4-fs (loop0): shut down requested (0) [ 124.737775][ T4233] EXT4-fs (loop0): unmounting filesystem. [ 124.875207][ T6413] loop3: detected capacity change from 0 to 256 [ 124.877678][ T6413] exfat: Deprecated parameter 'namecase' [ 125.217822][ T6413] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 125.779503][ T6416] tmpfs: Bad value for 'size' [ 126.674212][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.677469][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.300365][ T6438] loop3: detected capacity change from 0 to 128 [ 127.405988][ T6019] sysv_free_block: flc_count > flc_size [ 127.408929][ T6019] sysv_free_block: flc_count > flc_size [ 127.415046][ T6019] sysv_free_block: flc_count > flc_size [ 127.419236][ T6019] sysv_free_block: flc_count > flc_size [ 127.433137][ T6019] sysv_free_block: flc_count > flc_size [ 127.440095][ T6019] sysv_free_block: flc_count > flc_size [ 127.479565][ T6019] sysv_free_block: flc_count > flc_size [ 127.481156][ T6019] sysv_free_block: flc_count > flc_size [ 127.510552][ T6019] sysv_free_block: flc_count > flc_size [ 127.523619][ T6019] sysv_free_block: flc_count > flc_size [ 127.535234][ T6019] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 128.509316][ T6458] loop0: detected capacity change from 0 to 256 [ 128.511514][ T6458] exfat: Deprecated parameter 'namecase' [ 128.553548][ T6458] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 128.780028][ T6467] tmpfs: Bad value for 'size' [ 129.182114][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.184381][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.012609][ T6484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.056697][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.137274][ T6495] loop4: detected capacity change from 0 to 128 [ 130.168027][ T6495] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 130.192756][ T6495] sysv_free_block: trying to free block not in datazone [ 130.217148][ T6495] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 130.475569][ T6473] loop3: detected capacity change from 0 to 40427 [ 130.482622][ T6473] F2FS-fs (loop3): invalid crc value [ 130.510825][ T6505] loop4: detected capacity change from 0 to 512 [ 130.543303][ T6473] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.563179][ T6505] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.687: inline data xattr refers to an external xattr inode [ 130.568731][ T6505] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.687: couldn't read orphan inode 12 (err -117) [ 130.573917][ T6505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.603643][ T6473] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 130.680853][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 130.790169][ T6521] device bond0 entered promiscuous mode [ 130.801377][ T6521] device bond_slave_0 entered promiscuous mode [ 130.812545][ T6521] device bond_slave_1 entered promiscuous mode [ 130.928914][ T6521] bond0: (slave bond_slave_0): Releasing backup interface [ 131.012762][ T6521] device bond_slave_0 left promiscuous mode [ 131.021668][ T6520] device bond0 left promiscuous mode [ 131.055597][ T6520] device bond_slave_1 left promiscuous mode [ 132.085596][ T6533] loop2: detected capacity change from 0 to 128 [ 132.145760][ T6533] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 132.148567][ T6533] sysv_free_block: trying to free block not in datazone [ 132.150928][ T6533] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 132.418192][ T27] audit: type=1326 audit(132.380:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.706" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x0 [ 132.433857][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.436839][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.439230][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.451490][ T6546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.776399][ T6561] loop3: detected capacity change from 0 to 4096 [ 132.792999][ T6561] ntfs: (device loop3): parse_options(): Unrecognized mount option ÿÿ. [ 134.873487][ T6584] loop0: detected capacity change from 0 to 512 [ 134.925963][ T6584] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.717: inline data xattr refers to an external xattr inode [ 134.972109][ T6584] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.717: couldn't read orphan inode 12 (err -117) [ 134.975560][ T6584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 135.145249][ T6595] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 135.166236][ T4233] EXT4-fs (loop0): unmounting filesystem. [ 135.213052][ T6595] CIFS mount error: No usable UNC path provided in device string! [ 135.213052][ T6595] [ 135.222044][ T6595] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.515635][ T6561] loop3: detected capacity change from 0 to 32768 [ 136.357047][ T6602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.588588][ T6630] CIFS mount error: No usable UNC path provided in device string! [ 137.588588][ T6630] [ 137.591488][ T6630] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 137.802145][ T6636] nbd: must specify an index to disconnect [ 138.040442][ T6651] loop3: detected capacity change from 0 to 128 [ 138.141318][ T6654] loop2: detected capacity change from 0 to 256 [ 138.146331][ T6654] exfat: Deprecated parameter 'namecase' [ 138.286226][ T6654] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 138.535307][ T6651] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 138.822018][ T6654] tmpfs: Bad value for 'size' [ 139.019084][ T6651] sysv_free_block: trying to free block not in datazone [ 139.060027][ T6651] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 139.571031][ T6663] loop4: detected capacity change from 0 to 1024 [ 139.576418][ T6663] EXT4-fs: Ignoring removed orlov option [ 139.578147][ T6663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.091473][ T6663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.353173][ T6670] loop2: detected capacity change from 0 to 512 [ 140.403247][ T6670] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.750: inline data xattr refers to an external xattr inode [ 140.410442][ T6670] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.750: couldn't read orphan inode 12 (err -117) [ 140.419031][ T6670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.441236][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 140.713265][ T6679] loop3: detected capacity change from 0 to 2048 [ 140.763225][ T6679] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 140.788583][ T6679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.881965][ T4764] EXT4-fs (loop2): unmounting filesystem. [ 141.068502][ T6688] Injecting memory failure for pfn 0x13b894 at process virtual address 0x20000000 [ 141.080744][ T6686] device bond0 entered promiscuous mode [ 141.109757][ T6686] device bond_slave_0 entered promiscuous mode [ 141.111626][ T6686] device bond_slave_1 entered promiscuous mode [ 141.116549][ T6688] Memory failure: 0x13b894: recovery action for dirty LRU page: Recovered [ 141.125717][ T6688] Injecting memory failure for pfn 0x13af72 at process virtual address 0x20001000 [ 141.217740][ T6688] Memory failure: 0x13af72: recovery action for dirty LRU page: Recovered [ 141.220175][ T6688] Injecting memory failure for pfn 0x1b499e at process virtual address 0x20002000 [ 141.256597][ T6686] bond0: (slave bond_slave_0): Releasing backup interface [ 141.262264][ T6688] Memory failure: 0x1b499e: recovery action for reserved kernel page: Ignored [ 141.292370][ T6686] device bond_slave_0 left promiscuous mode [ 141.320777][ T6683] device bond0 left promiscuous mode [ 141.336342][ T6683] device bond_slave_1 left promiscuous mode [ 141.395162][ T27] audit: type=1326 audit(141.360:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.3.760" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8341e28 code=0x0 [ 141.460744][ T6697] loop2: detected capacity change from 0 to 512 [ 141.510660][ T6697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.534488][ T6697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.607871][ T6697] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.761: invalid indirect mapped block 3724541952 (level 0) [ 141.647391][ T6697] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 111:freeing already freed block (bit 111); block bitmap corrupt. [ 141.756623][ T4764] EXT4-fs (loop2): unmounting filesystem. [ 141.999279][ T6675] loop4: detected capacity change from 0 to 65536 [ 142.051953][ T6675] XFS (loop4): Mounting V5 Filesystem [ 143.095048][ T6675] XFS (loop4): Ending clean mount [ 143.098609][ T6675] XFS (loop4): Quotacheck needed: Please wait. [ 143.108552][ T6376] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 143.123808][ T6376] XFS (loop4): Unmount and run xfs_repair [ 143.125473][ T6376] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 143.161625][ T6719] loop3: detected capacity change from 0 to 2048 [ 143.172846][ T6376] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 143.175342][ T6376] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 143.177776][ T6376] 00000020: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2 .....]F......... [ 143.180182][ T6376] 00000030: 00 00 00 00 27 32 e3 f9 03 00 00 00 00 00 00 0a ....'2.......... [ 143.192562][ T6376] 00000040: 00 00 00 40 00 00 3f c0 00 00 00 00 00 00 00 00 ...@..?......... [ 143.195065][ T6376] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.197426][ T6376] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.199850][ T6376] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.200095][ T6722] loop2: detected capacity change from 0 to 512 [ 143.218997][ T6376] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 2 error 74 [ 143.226228][ T6675] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 143.231193][ T6719] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 143.254197][ T6719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.299192][ T6722] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.312822][ T6675] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 143.345995][ T6675] XFS (loop4): Unmount and run xfs_repair [ 143.347687][ T6675] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 143.374939][ T6675] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 143.385143][ T6675] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 143.421919][ T6675] 00000020: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2 .....]F......... [ 143.431474][ T6675] 00000030: 00 00 00 00 27 32 e3 f9 03 00 00 00 00 00 00 0a ....'2.......... [ 143.460611][ T6675] 00000040: 00 00 00 40 00 00 3f c0 00 00 00 00 00 00 00 00 ...@..?......... [ 143.482154][ T6675] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.484757][ T6675] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.501847][ T6675] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.504285][ T6675] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 2 error 74 [ 143.553349][ T4764] EXT4-fs (loop2): unmounting filesystem. [ 143.664476][ T4693] XFS (loop4): Unmounting Filesystem [ 143.808099][ T6738] Injecting memory failure for pfn 0x132490 at process virtual address 0x20000000 [ 143.821316][ T6738] Memory failure: 0x132490: recovery action for dirty LRU page: Recovered [ 143.831235][ T6738] Injecting memory failure for pfn 0x13d345 at process virtual address 0x20001000 [ 143.875983][ T6738] Memory failure: 0x13d345: recovery action for dirty LRU page: Recovered [ 143.878494][ T6738] Injecting memory failure for pfn 0x1b499e at process virtual address 0x20002000 [ 143.894777][ T6738] Memory failure: 0x1b499e: already hardware poisoned [ 144.445011][ T6735] loop3: detected capacity change from 0 to 32768 [ 144.458279][ T6740] loop4: detected capacity change from 0 to 512 [ 144.481908][ T6740] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.511138][ T6740] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.544478][ T6735] XFS (loop3): Mounting V5 Filesystem [ 144.560933][ T6740] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.772: invalid indirect mapped block 3724541952 (level 0) [ 144.580537][ T6740] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 111:freeing already freed block (bit 111); block bitmap corrupt. [ 144.672435][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 144.676446][ T6735] XFS (loop3): Ending clean mount [ 144.693717][ T6735] XFS (loop3): Quotacheck needed: Please wait. [ 144.794341][ T6735] XFS (loop3): Quotacheck: Done. [ 144.918501][ T6753] loop4: detected capacity change from 0 to 256 [ 144.923275][ T6753] exfat: Deprecated parameter 'namecase' [ 144.975389][ T6753] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 145.352829][ T6754] tmpfs: Bad value for 'size' [ 145.815835][ T6019] XFS (loop3): Unmounting Filesystem [ 146.161609][ T4231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.165657][ T4231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.168311][ T4231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.173219][ T4242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.187202][ T4242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.189449][ T4242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.203350][ T6734] loop2: detected capacity change from 0 to 40427 [ 146.241423][ T6734] F2FS-fs (loop2): Invalid segment count (0) [ 146.397970][ T6767] loop4: detected capacity change from 0 to 1024 [ 146.404877][ T6767] EXT4-fs: Ignoring removed orlov option [ 146.406582][ T6767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.546601][ T6734] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.975274][ T6734] F2FS-fs (loop2): invalid crc value [ 146.978480][ T6734] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 147.054296][ T6767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.119424][ T6391] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.359465][ T6773] loop2: detected capacity change from 0 to 512 [ 147.375662][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 147.464558][ T6762] chnl_net:caif_netlink_parms(): no params data found [ 147.515265][ T6773] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 147.604609][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.612405][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.618291][ T6762] device bridge_slave_0 entered promiscuous mode [ 147.633717][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.635784][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.643062][ T6762] device bridge_slave_1 entered promiscuous mode [ 147.684379][ T6791] loop4: detected capacity change from 0 to 512 [ 147.744942][ T6791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.755635][ T27] audit: type=1326 audit(147.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.787" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8341e28 code=0x0 [ 147.770944][ T6762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.784185][ T6762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.790077][ T6791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.840109][ T4764] EXT4-fs (loop2): unmounting filesystem. [ 147.885527][ T6791] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.786: invalid indirect mapped block 3724541952 (level 0) [ 148.273119][ T47] Bluetooth: hci7: command tx timeout [ 148.839197][ T6762] team0: Port device team_slave_0 added [ 148.847950][ T6791] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 111:freeing already freed block (bit 111); block bitmap corrupt. [ 148.877318][ T6762] team0: Port device team_slave_1 added [ 148.946755][ T6805] Injecting memory failure for pfn 0x13add8 at process virtual address 0x20000000 [ 148.986900][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 148.993319][ T6805] Memory failure: 0x13add8: recovery action for dirty LRU page: Recovered [ 148.995651][ T6805] Injecting memory failure for pfn 0x13add9 at process virtual address 0x20001000 [ 148.998257][ T6805] Memory failure: 0x13add9: recovery action for dirty LRU page: Recovered [ 149.000548][ T6805] Injecting memory failure for pfn 0x1b499e at process virtual address 0x20002000 [ 149.018957][ T6805] Memory failure: 0x1b499e: already hardware poisoned [ 149.060439][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.073423][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.114094][ T6762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.118493][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.120499][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.218023][ T6762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.090600][ T6762] device hsr_slave_0 entered promiscuous mode [ 150.093380][ T6815] loop4: detected capacity change from 0 to 2048 [ 150.132170][ T6815] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 150.154654][ T6815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.192297][ T6762] device hsr_slave_1 entered promiscuous mode [ 150.251946][ T6762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.256511][ T6762] Cannot create hsr debugfs directory [ 150.352026][ T47] Bluetooth: hci7: command tx timeout [ 150.597987][ T6805] loop3: detected capacity change from 0 to 32768 [ 150.816308][ T27] audit: type=1326 audit(150.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.800" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x0 [ 150.837764][ T6762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.053786][ T6762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.087849][ T47] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 151.093309][ T47] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 151.096038][ T47] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 151.099962][ T47] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 151.103204][ T47] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 151.105642][ T47] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 151.193963][ T6762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.222978][ T6806] loop2: detected capacity change from 0 to 32768 [ 151.318390][ T6806] XFS (loop2): Mounting V5 Filesystem [ 151.433768][ T6832] loop4: detected capacity change from 0 to 32768 [ 151.453966][ T6832] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.802 (6832) [ 151.458485][ T6762] bond0: (slave netdevsim0): Releasing backup interface [ 151.466489][ T6832] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 151.469358][ T6832] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 151.480239][ T6832] BTRFS info (device loop4): using free space tree [ 151.496667][ T6762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.515850][ T6806] XFS (loop2): Ending clean mount [ 151.523505][ T6806] XFS (loop2): Quotacheck needed: Please wait. [ 151.581571][ T6806] XFS (loop2): Quotacheck: Done. [ 151.738325][ T4764] XFS (loop2): Unmounting Filesystem [ 151.825597][ T6832] BTRFS info (device loop4): enabling ssd optimizations [ 151.979877][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.136282][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.190071][ T4693] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.432076][ T4242] Bluetooth: hci7: command tx timeout [ 152.485162][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.621847][ T27] audit: type=1326 audit(152.580:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6881 comm="syz.4.812" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f41e28 code=0x0 [ 152.673979][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.727565][ T6762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.785560][ T6833] chnl_net:caif_netlink_parms(): no params data found [ 152.799399][ T6762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.835210][ T6762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.909041][ T6762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.163035][ T4242] Bluetooth: hci10: command tx timeout [ 153.198409][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.204910][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.213484][ T6833] device bridge_slave_0 entered promiscuous mode [ 153.249561][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.252682][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.263061][ T6833] device bridge_slave_1 entered promiscuous mode [ 153.288766][ T6762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.361261][ T6833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.380692][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.383518][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.388526][ T6762] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.560036][ T6833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.631519][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.635567][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.638729][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.640706][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.787221][ T6833] team0: Port device team_slave_0 added [ 153.797153][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.799873][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.815652][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.834879][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.836981][ T6871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.886215][ T6833] team0: Port device team_slave_1 added [ 154.002295][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.005483][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.008376][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.014647][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.017429][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.020901][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.034382][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.052286][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.074521][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.122041][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.124080][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.149350][ T6833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.512120][ T4242] Bluetooth: hci7: command tx timeout [ 154.607911][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.611128][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.664968][ T6833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.393794][ T47] Bluetooth: hci10: command tx timeout [ 155.890062][ T6762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.902792][ T6762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.915994][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.919153][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.294172][ T6833] device hsr_slave_0 entered promiscuous mode [ 156.352436][ T6833] device hsr_slave_1 entered promiscuous mode [ 156.392054][ T6833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.394252][ T6833] Cannot create hsr debugfs directory [ 156.549030][ T6762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.608534][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.610948][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.710970][ T6996] loop4: detected capacity change from 0 to 512 [ 156.762028][ T6996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.822945][ T6996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 156.834473][ T6996] EXT4-fs (loop4): 1 truncate cleaned up [ 156.836009][ T6996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.865948][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.869407][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.882954][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.890978][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.950136][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 156.969142][ T6762] device veth0_vlan entered promiscuous mode [ 156.973794][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.976718][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.985142][ T7007] block device autoloading is deprecated and will be removed. [ 156.988670][ T6762] device veth1_vlan entered promiscuous mode [ 157.473141][ T4227] Bluetooth: hci10: command tx timeout [ 157.899371][ T7029] loop2: detected capacity change from 0 to 8192 [ 157.922428][ T7029] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.943823][ T7029] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 157.963250][ T7029] REISERFS (device loop2): using ordered data mode [ 157.976146][ T7029] reiserfs: using flush barriers [ 157.984717][ T7029] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.989061][ T7029] REISERFS (device loop2): checking transaction log (loop2) [ 158.251995][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.254835][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.273181][ T7029] REISERFS (device loop2): Using tea hash to sort names [ 158.275346][ T7029] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 158.295485][ T7029] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 158.513534][ T6762] device veth0_macvtap entered promiscuous mode [ 158.518125][ T6762] device veth1_macvtap entered promiscuous mode [ 158.751854][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 158.753009][ T4231] Bluetooth: hci3: command 0x0406 tx timeout [ 158.754059][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 159.314099][ T7074] loop4: detected capacity change from 0 to 1024 [ 159.325606][ T7074] EXT4-fs: Ignoring removed orlov option [ 159.327426][ T7074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.825822][ T4227] Bluetooth: hci10: command tx timeout [ 159.884167][ T7074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.912807][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.916147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.098641][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.135003][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.137819][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.140483][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.149017][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.172025][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.174974][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.178043][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.195029][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.197892][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.200473][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.203539][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.206160][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.209040][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.211662][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.214676][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.221308][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.225020][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.236561][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.249334][ T11] device hsr_slave_0 left promiscuous mode [ 160.302280][ T11] device hsr_slave_1 left promiscuous mode [ 160.328039][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 160.412006][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.414236][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.433748][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.435893][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.438939][ T11] device bridge_slave_1 left promiscuous mode [ 160.451957][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.523702][ T11] device bridge_slave_0 left promiscuous mode [ 160.525491][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.739765][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 161.232129][ T11] device veth1_macvtap left promiscuous mode [ 161.240489][ T11] device veth0_macvtap left promiscuous mode [ 161.245831][ T11] device veth1_vlan left promiscuous mode [ 161.258343][ T11] device veth0_vlan left promiscuous mode [ 161.828238][ T7108] loop4: detected capacity change from 0 to 32768 [ 161.879171][ T7108] XFS (loop4): Mounting V5 Filesystem [ 161.993312][ T7108] XFS (loop4): Ending clean mount [ 161.998804][ T7108] XFS (loop4): Quotacheck needed: Please wait. [ 162.085636][ T7131] loop2: detected capacity change from 0 to 4096 [ 162.089859][ T7131] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 162.102734][ T7108] XFS (loop4): Quotacheck: Done. [ 162.239145][ T4693] XFS (loop4): Unmounting Filesystem [ 165.070223][ T11] team0 (unregistering): Port device team_slave_1 removed [ 165.300011][ T11] team0 (unregistering): Port device team_slave_0 removed [ 165.450729][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.682822][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.269362][ T7200] sched: RT throttling activated [ 168.869955][ T7206] binder: 7205 invalid dec weak, ref 2 desc 0 s 1 w 0 [ 169.143468][ T7212] binder: BINDER_SET_CONTEXT_MGR already set [ 169.145515][ T7212] binder: 7211:7212 ioctl 4018620d 20000040 returned -16 [ 169.148000][ T7212] binder: tried to use weak ref as strong ref [ 169.149779][ T7212] binder: 7211:7212 Acquire 1 refcount change on invalid ref 0 ret -22 [ 169.153437][ T7212] binder: 7211:7212 got transaction to invalid handle, 1 [ 169.161098][ T7212] binder: 7212:7211 cannot find target node [ 169.165175][ T7212] binder: 7211:7212 transaction call to 0:0 failed 5/29201/-22, size 72-24 line 3056 [ 169.168215][ T5325] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.283846][ T11] bond0 (unregistering): Released all slaves [ 169.488519][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.492490][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.497947][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.500943][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.504941][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.507844][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.510625][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.513641][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.516541][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.519441][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.522545][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.525417][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.528233][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.531074][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.533856][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.536741][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.539560][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.549006][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.556943][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.664611][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.667518][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.683797][ T6762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.686297][ T6762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.688592][ T6762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.690849][ T6762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.739061][ T7221] loop4: detected capacity change from 0 to 1024 [ 169.745752][ T7221] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.847789][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 169.966729][ T6833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.040336][ T4514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.053709][ T6833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.059959][ T4514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.097697][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.103811][ T6833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.104484][ T4567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.108009][ T4567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.138058][ T6833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.182183][ T7230] loop4: detected capacity change from 0 to 512 [ 170.187293][ T7230] EXT4-fs: old and new quota format mixing [ 170.204645][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.233493][ T6268] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.412071][ T6833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.431301][ T4242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.438830][ T4242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.452012][ T4242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.459308][ T4242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.466615][ T4242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.469909][ T4242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.477957][ T6833] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.537326][ T7243] loop4: detected capacity change from 0 to 512 [ 170.585043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.588023][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.591207][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.608047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.615723][ T7243] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.940: casefold flag without casefold feature [ 170.619832][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.619995][ T7243] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.940: invalid block [ 170.621935][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.636995][ T7243] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.940: error while reading EA inode 12 err=-117 [ 170.648691][ T7243] EXT4-fs (loop4): 1 orphan inode deleted [ 170.651956][ T7243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.660172][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.662918][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.665711][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.668214][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.670166][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.686456][ T7249] input: syz0 as /devices/virtual/input/input4 [ 170.718743][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.772126][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 170.791891][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.794790][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.798069][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.800784][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.846468][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.849542][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.872962][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.911998][ T6833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.915691][ T6833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.963873][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.966680][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.992419][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.304102][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 171.460825][ T7286] loop4: detected capacity change from 0 to 512 [ 171.555460][ T7286] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.952: casefold flag without casefold feature [ 171.573922][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.576115][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.579054][ T7236] device bridge_slave_0 entered promiscuous mode [ 171.584934][ T7286] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.952: invalid block [ 171.593629][ T7286] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.952: error while reading EA inode 12 err=-117 [ 171.600896][ T7286] EXT4-fs (loop4): 1 orphan inode deleted [ 171.604520][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.607466][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.610262][ T7236] device bridge_slave_1 entered promiscuous mode [ 171.629059][ T7286] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.642612][ T7295] input: syz0 as /devices/virtual/input/input5 [ 171.677588][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.697117][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.715091][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 171.850568][ T7236] team0: Port device team_slave_0 added [ 171.887220][ T7236] team0: Port device team_slave_1 added [ 171.996532][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.998847][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.042828][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.044899][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.118017][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.136059][ T6833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.140514][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.154471][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.177985][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.192158][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.195403][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.259913][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.264510][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.286086][ T6833] device veth0_vlan entered promiscuous mode [ 172.293687][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.296434][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.334032][ T7236] device hsr_slave_0 entered promiscuous mode [ 172.374046][ T7236] device hsr_slave_1 entered promiscuous mode [ 172.422154][ T7236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.424308][ T7236] Cannot create hsr debugfs directory [ 172.499621][ T6833] device veth1_vlan entered promiscuous mode [ 172.511986][ T4227] Bluetooth: hci2: command tx timeout [ 172.553752][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.556570][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.574795][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.593004][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.597889][ T6833] device veth0_macvtap entered promiscuous mode [ 172.636451][ T6833] device veth1_macvtap entered promiscuous mode [ 172.660919][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.663909][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.681101][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.702754][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.706279][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.710306][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.722763][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.725641][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.748967][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.762123][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.767841][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.770976][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.784243][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.787186][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.790191][ T7298] loop4: detected capacity change from 0 to 32768 [ 172.796227][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.799054][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.820303][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.834873][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.837720][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.844332][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.851655][ T7298] XFS (loop4): Mounting V5 Filesystem [ 172.853302][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.862390][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.865311][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.880748][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.884741][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.887862][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.891505][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.896238][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.902325][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.906864][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.951300][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.968667][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.972386][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.975324][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.978405][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.981370][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.984475][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.988353][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.991312][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.996278][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.998459][ T7329] netlink: 132 bytes leftover after parsing attributes in process `syz.0.964'. [ 173.007761][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.010957][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.015206][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.018134][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.043715][ T7298] XFS (loop4): Ending clean mount [ 173.065260][ T7298] XFS (loop4): Quotacheck needed: Please wait. [ 173.100450][ T7298] XFS (loop4): Quotacheck: Done. [ 173.170944][ T7346] input: syz0 as /devices/virtual/input/input6 [ 173.178446][ T7236] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.224383][ T6833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.226833][ T6833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.229244][ T6833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.231623][ T6833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.262079][ T7298] XFS (loop4): Unmounting Filesystem [ 173.559368][ T7236] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.921375][ T7236] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.029530][ T7371] netlink: 132 bytes leftover after parsing attributes in process `syz.0.974'. [ 174.605689][ T4227] Bluetooth: hci2: command tx timeout [ 174.957468][ T7388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.983'. [ 175.301723][ T7236] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.332289][ T4709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.335872][ T4709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.391175][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.417671][ T4709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.420272][ T4709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.427179][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.701412][ T7236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.774538][ T7236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.813733][ T7236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.845276][ T7236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.059607][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.072769][ T7421] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 176.113252][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.116025][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.147070][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.178329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.181314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.184766][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.186769][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.218885][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.233758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.236401][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.238402][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.417599][ T7410] loop0: detected capacity change from 0 to 40427 [ 176.456719][ T7443] loop3: detected capacity change from 0 to 256 [ 176.459004][ T7443] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿ184467440737095516150x0000000000000000ÿÿ" or missing value [ 176.461684][ T7410] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.501545][ T7410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.586963][ T6762] syz-executor: attempt to access beyond end of device [ 176.586963][ T6762] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.673934][ T4227] Bluetooth: hci2: command tx timeout [ 176.948942][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.952245][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.955459][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.760813][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.764746][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.767434][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.770336][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.916932][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.921154][ T7448] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 177.925070][ T11] tipc: Left network mode [ 177.947793][ T7236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.950598][ T7236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.980435][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.986386][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.998343][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.017836][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.073158][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.137416][ T7481] loop0: detected capacity change from 0 to 256 [ 178.139730][ T7481] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿ184467440737095516150x0000000000000000ÿÿ" or missing value [ 178.269764][ T6269] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.751916][ T4227] Bluetooth: hci2: command tx timeout [ 178.772200][ T7499] netlink: 'syz.4.1029': attribute type 1 has an invalid length. [ 178.775989][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.778277][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.804618][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.861820][ T7508] loop4: detected capacity change from 0 to 64 [ 178.909681][ T7475] loop3: detected capacity change from 0 to 40427 [ 178.933632][ T7475] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.994366][ T7475] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 179.082270][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.085291][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.104434][ T7516] loop4: detected capacity change from 0 to 256 [ 179.114754][ T7516] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿ184467440737095516150x0000000000000000ÿÿ" or missing value [ 179.120567][ T6833] syz-executor: attempt to access beyond end of device [ 179.120567][ T6833] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.314140][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.316949][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.320802][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.335368][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.339574][ T7236] device veth0_vlan entered promiscuous mode [ 179.341642][ T27] audit: type=1326 audit(179.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 179.512844][ T7236] device veth1_vlan entered promiscuous mode [ 179.562094][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.564897][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.567651][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.573626][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.591083][ T7236] device veth0_macvtap entered promiscuous mode [ 179.599637][ T7236] device veth1_macvtap entered promiscuous mode [ 179.793223][ T4242] Bluetooth: hci4: command 0x0406 tx timeout [ 179.855340][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855364][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855374][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855386][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855397][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855409][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855419][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855430][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855445][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855456][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855468][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855480][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855492][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855503][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855515][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855527][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855539][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855550][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.855563][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.855574][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.858262][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.931548][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.940041][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.950945][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.954271][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.117430][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.120445][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.125401][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.128297][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.130946][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.152008][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.156255][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.159673][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.162877][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.166319][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.169006][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.181921][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.184683][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.187688][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.190507][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.201969][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.204993][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.207780][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.210480][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.221872][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.226896][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.232533][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.235394][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.417504][ T7540] loop3: detected capacity change from 0 to 40427 [ 180.436476][ T7540] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.479639][ T7236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.483032][ T7236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.489120][ T7236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.496154][ T7236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.503657][ T7540] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.619014][ T6833] syz-executor: attempt to access beyond end of device [ 180.619014][ T6833] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.697720][ T7565] loop4: detected capacity change from 0 to 64 [ 181.372397][ T5321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.376024][ T5321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.384240][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.407628][ T7582] loop3: detected capacity change from 0 to 256 [ 181.450700][ T7548] loop0: detected capacity change from 0 to 65536 [ 181.453963][ T7582] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿ184467440737095516150x0000000000000000ÿÿ" or missing value [ 181.497606][ T7548] XFS (loop0): Mounting V5 Filesystem [ 181.542955][ T7548] XFS (loop0): Ending clean mount [ 181.546156][ T7548] XFS (loop0): Quotacheck needed: Please wait. [ 181.556055][ T4567] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 181.559437][ T4567] XFS (loop0): Unmount and run xfs_repair [ 181.595103][ T4567] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 181.597242][ T4567] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 181.599761][ T4567] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 181.606869][ T4567] 00000020: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2 .....]F......... [ 181.619777][ T4567] 00000030: 00 00 00 00 27 32 e3 f9 03 00 00 00 00 00 00 0a ....'2.......... [ 181.626477][ T4567] 00000040: 00 00 00 40 00 00 3f c0 00 00 00 00 00 00 00 00 ...@..?......... [ 181.628934][ T4567] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.631397][ T4567] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.636157][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 181.661904][ T4567] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.670658][ T4567] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 2 error 74 [ 181.679390][ T7548] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 181.732843][ T7548] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 181.735884][ T7548] XFS (loop0): Unmount and run xfs_repair [ 181.737421][ T7548] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 181.739452][ T7548] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 181.754513][ T7548] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 181.757815][ T7548] 00000020: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2 .....]F......... [ 181.766980][ T7548] 00000030: 00 00 00 00 27 32 e3 f9 03 00 00 00 00 00 00 0a ....'2.......... [ 181.769453][ T7548] 00000040: 00 00 00 40 00 00 3f c0 00 00 00 00 00 00 00 00 ...@..?......... [ 181.776089][ T7548] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.779365][ T7548] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.790861][ T7548] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.796908][ T7548] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 2 error 74 [ 181.854169][ T6762] XFS (loop0): Unmounting Filesystem [ 181.884766][ T5321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.900471][ T5321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.959930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.017909][ T7601] futex_wake_op: syz.1.1068 tries to shift op by -1; fix this program [ 182.185857][ T7607] netlink: 104 bytes leftover after parsing attributes in process `syz.2.937'. [ 182.640783][ T7627] loop0: detected capacity change from 0 to 64 [ 182.660623][ T7624] loop2: detected capacity change from 0 to 64 [ 182.699757][ T7624] MINIX-fs: deleted inode referenced: 1 [ 182.711374][ T7624] MINIX-fs: get root inode failed [ 182.761716][ T7598] loop4: detected capacity change from 0 to 40427 [ 182.790747][ T7598] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.807943][ T6391] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.962399][ T7598] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.502199][ T4693] syz-executor: attempt to access beyond end of device [ 183.502199][ T4693] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.960814][ T7663] loop4: detected capacity change from 0 to 512 [ 183.985119][ T7663] EXT4-fs: Ignoring removed orlov option [ 183.992014][ T7663] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.998377][ T7665] loop3: detected capacity change from 0 to 64 [ 184.009297][ T7663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 184.011623][ T7663] System zones: 1-12 [ 184.031382][ T7663] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1089: casefold flag without casefold feature [ 184.076289][ T7663] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1089: missing EA_INODE flag [ 184.092911][ T7663] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1089: error while reading EA inode 12 err=-117 [ 184.120030][ T7663] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1089: missing EA_INODE flag [ 184.127446][ T7663] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1089: error while reading EA inode 12 err=-117 [ 184.172612][ T7663] EXT4-fs (loop4): 1 orphan inode deleted [ 184.174206][ T7663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.237099][ T7678] loop3: detected capacity change from 0 to 256 [ 184.261393][ T7678] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d5d, chksum : 0xd3edb0c7, utbl_chksum : 0xe619d30d) [ 184.264965][ T7676] loop2: detected capacity change from 0 to 512 [ 184.302251][ T4693] EXT4-fs (loop4): unmounting filesystem. [ 184.322732][ T7676] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 184.345479][ T7680] loop4: detected capacity change from 0 to 1024 [ 184.409523][ T7676] syz.2.1094: attempt to access beyond end of device [ 184.409523][ T7676] loop2: rw=0, sector=3087007810, nr_sectors = 2 limit=512 [ 184.421492][ T7676] Buffer I/O error on dev loop2, logical block 1543503905, async page read [ 184.546862][ T7687] loop0: detected capacity change from 0 to 64 [ 184.568061][ T7687] MINIX-fs: deleted inode referenced: 1 [ 184.577541][ T7687] MINIX-fs: get root inode failed [ 184.587043][ T11] device hsr_slave_0 left promiscuous mode [ 184.623450][ T11] device hsr_slave_1 left promiscuous mode [ 184.648059][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 184.650756][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 184.823705][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.826016][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.838799][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.841140][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.124104][ T11] device bridge_slave_1 left promiscuous mode [ 185.137203][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.588015][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.627057][ T11] device hsr_slave_0 left promiscuous mode [ 185.657919][ T11] device hsr_slave_1 left promiscuous mode [ 185.732122][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.734440][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.738081][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.756371][ T7703] loop3: detected capacity change from 0 to 512 [ 185.759272][ T7703] EXT4-fs: Ignoring removed orlov option [ 185.761257][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.780563][ T11] device bridge_slave_1 left promiscuous mode [ 185.782771][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.788005][ T7703] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.813212][ T7707] loop2: detected capacity change from 0 to 256 [ 185.818067][ T7703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 185.820509][ T7703] System zones: 1-12 [ 185.830632][ T11] device bridge_slave_0 left promiscuous mode [ 185.833046][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.839291][ T7703] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1106: casefold flag without casefold feature [ 185.845627][ T7703] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1106: missing EA_INODE flag [ 185.864036][ T7703] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1106: error while reading EA inode 12 err=-117 [ 185.877166][ T7703] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1106: missing EA_INODE flag [ 185.891722][ T7707] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5d, chksum : 0xd3edb0c7, utbl_chksum : 0xe619d30d) [ 185.914371][ T7703] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1106: error while reading EA inode 12 err=-117 [ 185.923110][ T7703] EXT4-fs (loop3): 1 orphan inode deleted [ 185.924932][ T7703] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.977654][ T6833] EXT4-fs (loop3): unmounting filesystem. [ 186.002503][ T11] device veth1_macvtap left promiscuous mode [ 186.004254][ T11] device veth0_macvtap left promiscuous mode [ 186.005971][ T11] device veth1_vlan left promiscuous mode [ 186.007558][ T11] device veth0_vlan left promiscuous mode [ 186.052712][ T7716] loop2: detected capacity change from 0 to 512 [ 186.053865][ T7717] loop3: detected capacity change from 0 to 1024 [ 186.057281][ T7716] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 186.080841][ T7716] syz.2.1112: attempt to access beyond end of device [ 186.080841][ T7716] loop2: rw=0, sector=3087007810, nr_sectors = 2 limit=512 [ 186.092029][ T7716] Buffer I/O error on dev loop2, logical block 1543503905, async page read [ 186.132095][ T11] device veth1_macvtap left promiscuous mode [ 186.133833][ T11] device veth0_macvtap left promiscuous mode [ 186.135628][ T11] device veth1_vlan left promiscuous mode [ 186.137171][ T11] device veth0_vlan left promiscuous mode [ 186.218386][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 186.220857][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 186.279679][ T7722] loop2: detected capacity change from 0 to 64 [ 186.306251][ T7722] MINIX-fs: deleted inode referenced: 1 [ 186.308002][ T7722] MINIX-fs: get root inode failed [ 186.833908][ T27] audit: type=1326 audit(186.740:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 186.841705][ T27] audit: type=1326 audit(186.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 186.973220][ T27] audit: type=1326 audit(186.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 187.078853][ T27] audit: type=1326 audit(186.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 187.139505][ T27] audit: type=1326 audit(186.820:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 187.176310][ T27] audit: type=1326 audit(186.820:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 187.201379][ T27] audit: type=1326 audit(186.860:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 187.217968][ T27] audit: type=1326 audit(186.870:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 187.265976][ T27] audit: type=1326 audit(186.900:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 187.290907][ T27] audit: type=1326 audit(186.910:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f741e28 code=0x7fc00000 [ 187.394264][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.396064][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.105441][ T7736] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 188.396325][ T7742] loop2: detected capacity change from 0 to 256 [ 188.774043][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 188.776592][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 189.739175][ T7746] loop2: detected capacity change from 0 to 40427 [ 189.859942][ T7746] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.908075][ T7746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.938492][ T11] team0 (unregistering): Port device team_slave_1 removed [ 190.184529][ T11] team0 (unregistering): Port device team_slave_0 removed [ 190.233800][ T7236] syz-executor: attempt to access beyond end of device [ 190.233800][ T7236] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.454822][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.506827][ T7760] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 192.494636][ T7765] loop2: detected capacity change from 0 to 512 [ 192.504913][ T7765] EXT4-fs: Ignoring removed orlov option [ 192.507864][ T7765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.542731][ T7765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 192.562095][ T7765] System zones: 1-12 [ 192.578555][ T7765] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1133: casefold flag without casefold feature [ 192.592600][ T7765] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1133: missing EA_INODE flag [ 192.596185][ T7765] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1133: error while reading EA inode 12 err=-117 [ 192.601732][ T7765] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1133: missing EA_INODE flag [ 192.617378][ T7765] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1133: error while reading EA inode 12 err=-117 [ 192.621373][ T7765] EXT4-fs (loop2): 1 orphan inode deleted [ 192.633028][ T7765] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.734485][ T7236] EXT4-fs (loop2): unmounting filesystem. [ 193.514001][ T11] bond0 (unregistering): Released all slaves [ 194.592122][ T4229] Bluetooth: hci6: command 0x0406 tx timeout [ 194.771200][ T4227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.782924][ T4227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.786277][ T4227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.788985][ T4227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.793167][ T4227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.795420][ T4229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.158634][ T11] team0 (unregistering): Port device team_slave_1 removed [ 196.236177][ T4242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.241688][ T4242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.255173][ T4242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.259281][ T4242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.261707][ T4242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 196.265438][ T4242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.363709][ T11] team0 (unregistering): Port device team_slave_0 removed [ 196.562956][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.785005][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.841973][ T4242] Bluetooth: hci4: command tx timeout [ 197.376886][ T4229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 197.382770][ T4229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 197.385756][ T4229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 197.389505][ T4229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 197.393253][ T4229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 197.395466][ T4229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 198.273536][ T4229] Bluetooth: hci5: command tx timeout [ 198.754922][ T4242] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 198.757982][ T4242] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 198.760843][ T4242] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 198.765337][ T4242] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 198.767785][ T4242] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 198.770030][ T4242] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 198.912245][ T4229] Bluetooth: hci4: command tx timeout [ 199.369620][ T11] bond0 (unregistering): Released all slaves [ 199.481976][ T4229] Bluetooth: hci9: command tx timeout [ 200.351898][ T4229] Bluetooth: hci5: command tx timeout [ 200.452472][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 200.572937][ T7782] chnl_net:caif_netlink_parms(): no params data found [ 200.615411][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 200.618992][ T7779] chnl_net:caif_netlink_parms(): no params data found [ 200.671442][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.694139][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.818793][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.822978][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.832997][ T4229] Bluetooth: hci10: command tx timeout [ 200.843952][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.849158][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.855242][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.859839][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.880303][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.882527][ T7804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.892676][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.896027][ T7804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.992015][ T4229] Bluetooth: hci4: command tx timeout [ 201.033547][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.035505][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.038352][ T7774] device bridge_slave_0 entered promiscuous mode [ 201.091207][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.093559][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.096393][ T7774] device bridge_slave_1 entered promiscuous mode [ 201.117173][ T7813] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 201.209523][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.211643][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.216407][ T7782] device bridge_slave_0 entered promiscuous mode [ 201.223294][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.225296][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.228102][ T7782] device bridge_slave_1 entered promiscuous mode [ 201.236604][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.238565][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.241285][ T7785] device bridge_slave_0 entered promiscuous mode [ 201.249230][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.251259][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.254366][ T7779] device bridge_slave_0 entered promiscuous mode [ 201.261685][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 201.282087][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.290755][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.301929][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.309865][ T7785] device bridge_slave_1 entered promiscuous mode [ 201.334008][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.335922][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.338660][ T7779] device bridge_slave_1 entered promiscuous mode [ 201.345435][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.351549][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.377988][ T7785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.383152][ T7785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.387478][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.464513][ T7785] team0: Port device team_slave_0 added [ 201.469602][ T7782] team0: Port device team_slave_0 added [ 201.485367][ T7779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.502621][ T7782] team0: Port device team_slave_1 added [ 201.508591][ T7774] team0: Port device team_slave_0 added [ 201.513431][ T7785] team0: Port device team_slave_1 added [ 201.517293][ T7779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.521285][ T7774] team0: Port device team_slave_1 added [ 201.551862][ T4242] Bluetooth: hci9: command tx timeout [ 201.602312][ T7779] team0: Port device team_slave_0 added [ 201.604915][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.606850][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.614365][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.621189][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.623397][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.667423][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.671465][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.674022][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.682073][ T7785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.687851][ T7779] team0: Port device team_slave_1 added [ 201.690117][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.692181][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.699866][ T7785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.712562][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.714465][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.721380][ T7782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.730804][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.733169][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.770757][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.876287][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.878314][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.901298][ T7779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.954953][ T7785] device hsr_slave_0 entered promiscuous mode [ 201.994624][ T7785] device hsr_slave_1 entered promiscuous mode [ 202.032189][ T7785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.034317][ T7785] Cannot create hsr debugfs directory [ 202.077193][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.079113][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.088514][ T7779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.154004][ T7782] device hsr_slave_0 entered promiscuous mode [ 202.212261][ T7782] device hsr_slave_1 entered promiscuous mode [ 202.251879][ T7782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.254056][ T7782] Cannot create hsr debugfs directory [ 202.395776][ T7774] device hsr_slave_0 entered promiscuous mode [ 202.431877][ T4242] Bluetooth: hci5: command tx timeout [ 202.433972][ T7774] device hsr_slave_1 entered promiscuous mode [ 202.471833][ T7774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.473957][ T7774] Cannot create hsr debugfs directory [ 202.644410][ T7779] device hsr_slave_0 entered promiscuous mode [ 202.703167][ T7779] device hsr_slave_1 entered promiscuous mode [ 202.742109][ T7779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.744211][ T7779] Cannot create hsr debugfs directory [ 202.912135][ T4242] Bluetooth: hci10: command tx timeout [ 203.071974][ T4242] Bluetooth: hci4: command tx timeout [ 203.080144][ T7774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.223756][ T7774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.344756][ T7774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.455772][ T7774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.642043][ T4229] Bluetooth: hci9: command tx timeout [ 204.521958][ T4242] Bluetooth: hci5: command tx timeout [ 204.992144][ T4229] Bluetooth: hci10: command tx timeout [ 205.711944][ T4229] Bluetooth: hci9: command tx timeout [ 207.072028][ T4242] Bluetooth: hci10: command tx timeout [ 211.832142][ T4229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.838528][ T4229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.842304][ T4227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.845780][ T4227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.848174][ T4227] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.851943][ T4227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.067883][ T7828] chnl_net:caif_netlink_parms(): no params data found [ 213.881950][ T4242] Bluetooth: hci7: command tx timeout [ 215.951936][ T4242] Bluetooth: hci7: command tx timeout [ 216.833306][ T28] INFO: task syz.1.195:4799 blocked for more than 143 seconds. [ 216.835949][ T28] Not tainted 6.1.97-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 216.841348][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.844348][ T28] task:syz.1.195 state:D stack:0 pid:4799 ppid:4226 flags:0x00000001 [ 216.846695][ T28] Call trace: [ 216.847549][ T28] __switch_to+0x320/0x754 [ 216.848838][ T28] __schedule+0xee4/0x1c98 [ 216.850143][ T28] schedule+0xc4/0x170 [ 216.851228][ T28] rwsem_down_write_slowpath+0xc80/0x156c [ 216.861771][ T28] down_write+0x84/0x88 [ 216.863005][ T28] blkdev_fallocate+0x1d4/0x400 [ 216.864250][ T28] vfs_fallocate+0x478/0x5b4 [ 216.881058][ T28] __arm64_sys_fallocate+0xc0/0x110 [ 216.891770][ T28] invoke_syscall+0x98/0x2c0 [ 216.893467][ T28] el0_svc_common+0x138/0x258 [ 216.895208][ T28] do_el0_svc+0x64/0x218 [ 216.896802][ T28] el0_svc+0x58/0x168 [ 216.898398][ T28] el0t_64_sync_handler+0x84/0xf0 [ 216.899730][ T28] el0t_64_sync+0x18c/0x190 [ 216.900981][ T28] INFO: task syz.3.259:4997 blocked for more than 143 seconds. [ 216.903234][ T28] Not tainted 6.1.97-syzkaller #0 [ 216.904775][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.907112][ T28] task:syz.3.259 state:D stack:0 pid:4997 ppid:4230 flags:0x00000001 [ 216.909543][ T28] Call trace: [ 216.910449][ T28] __switch_to+0x320/0x754 [ 216.911616][ T28] __schedule+0xee4/0x1c98 [ 216.927298][ T28] schedule+0xc4/0x170 [ 216.928485][ T28] rwsem_down_write_slowpath+0xc80/0x156c [ 216.930017][ T28] down_write+0x84/0x88 [ 216.931147][ T28] blkdev_fallocate+0x1d4/0x400 [ 216.955419][ T28] vfs_fallocate+0x478/0x5b4 [ 216.956793][ T28] __arm64_sys_fallocate+0xc0/0x110 [ 216.958243][ T28] invoke_syscall+0x98/0x2c0 [ 216.959471][ T28] el0_svc_common+0x138/0x258 [ 216.960831][ T28] do_el0_svc+0x64/0x218 [ 216.974103][ T28] el0_svc+0x58/0x168 [ 216.982807][ T28] el0t_64_sync_handler+0x84/0xf0 [ 216.984226][ T28] el0t_64_sync+0x18c/0x190 [ 216.985564][ T28] [ 216.985564][ T28] Showing all locks held in the system: [ 216.987716][ T28] 2 locks held by kworker/0:0/7: [ 216.989111][ T28] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.012611][ T28] #1: ffff800019e27c20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.017102][ T28] 3 locks held by kworker/u4:1/11: [ 217.023498][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.026429][ T28] #1: ffff800019e67c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.029192][ T28] #2: ffff800015a3a180 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5c4 [ 217.051903][ T28] 1 lock held by rcu_tasks_kthre/12: [ 217.053395][ T28] #0: ffff800015a34eb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 217.056297][ T28] 1 lock held by rcu_tasks_trace/13: [ 217.057684][ T28] #0: ffff800015a356b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 217.060658][ T28] 1 lock held by khungtaskd/28: [ 217.073091][ T28] #0: ffff800015a34ce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 217.075724][ T28] 3 locks held by kworker/1:2/1511: [ 217.077076][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.079948][ T28] #1: ffff8000223a7c20 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.098370][ T28] #2: ffff800015a3a180 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x58/0x5c4 [ 217.101164][ T28] 2 locks held by getty/3984: [ 217.103010][ T28] #0: ffff0000d6451098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 217.105652][ T28] #1: ffff80001bd102f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 217.108314][ T28] 1 lock held by syz.2.127/4593: [ 217.109602][ T28] 1 lock held by syz.1.195/4799: [ 217.110909][ T28] #0: ffff0000c0563fd8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1d4/0x400 [ 217.138716][ T28] 1 lock held by syz.3.259/4997: [ 217.140059][ T28] #0: ffff0000c0563fd8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1d4/0x400 [ 217.152019][ T28] 3 locks held by kworker/0:8/5107: [ 217.153563][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.156868][ T28] #1: ffff80001e357c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.160312][ T28] #2: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 217.164231][ T28] 3 locks held by syz.1.380/5452: [ 217.166045][ T28] #0: ffff0000f8c56460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 217.169116][ T28] #1: ffff0000eedca9f8 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: vfs_setxattr+0x17c/0x344 [ 217.173608][ T28] #2: ffff0000f8c56650 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x114/0x404 [ 217.176269][ T28] 2 locks held by kworker/0:16/5632: [ 217.177673][ T28] #0: ffff0000d60a2538 ((wq_completion)xfs-sync/loop1){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 217.180646][ T28] #1: ffff80001f457c20 ((work_completion)(&(&log->l_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 217.185381][ T28] 2 locks held by kworker/u4:19/6374: [ 217.186850][ T28] 4 locks held by syz-executor/7774: [ 217.188260][ T28] 4 locks held by syz-executor/7779: [ 217.189698][ T28] #0: ffff0000d84a6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 217.193417][ T28] #1: ffff000103d3d888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 217.196653][ T28] #2: ffff0000cc28da00 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 217.199868][ T28] #3: ffff800017236a28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 217.203688][ T28] 4 locks held by syz-executor/7782: [ 217.205983][ T28] #0: ffff0000d84a6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 217.208940][ T28] #1: ffff0000da2e5088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 217.211626][ T28] #2: ffff0000cc28da00 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 217.215022][ T28] #3: ffff800017236a28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 217.217937][ T28] 5 locks held by syz-executor/7785: [ 217.219388][ T28] #0: ffff0000d84a6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 217.221901][ T28] #1: ffff0001025ce888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 217.226370][ T28] #2: ffff0000cc28da00 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 217.229712][ T28] #3: ffff800017236a28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 217.233540][ T28] #4: ffff0000cc52a0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xbc/0x724 [ 217.237020][ T28] 1 lock held by syz.2.1144/7820: [ 217.238790][ T28] #0: ffff0000c0563fd8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1d4/0x400 [ 217.242239][ T28] 1 lock held by dhcpcd/7821: [ 217.243924][ T28] #0: ffff0000d8c94130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 217.247063][ T28] 1 lock held by dhcpcd/7822: [ 217.248412][ T28] #0: ffff0000ee424130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 217.251110][ T28] 1 lock held by dhcpcd/7823: [ 217.252566][ T28] #0: ffff0000c3386130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 217.255193][ T28] 1 lock held by dhcpcd/7824: [ 217.256893][ T28] #0: ffff0000f041a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 217.259446][ T28] 1 lock held by dhcpcd/7825: [ 217.260719][ T28] #0: ffff0000f0418130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 217.263967][ T28] 1 lock held by dhcpcd/7826: [ 217.265219][ T28] #0: ffff0000d9356130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 217.268383][ T28] 2 locks held by syz-executor/7828: [ 217.269862][ T28] #0: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 217.273069][ T28] #1: ffff800015a3a2b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e0/0x77c [ 217.276630][ T28] [ 217.277711][ T28] ============================================= [ 217.277711][ T28] [ 217.280499][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 217.282375][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 217.284515][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 217.287278][ T28] Call trace: [ 217.288182][ T28] dump_backtrace+0x1c8/0x1f4 [ 217.289553][ T28] show_stack+0x2c/0x3c [ 217.290716][ T28] dump_stack_lvl+0x108/0x170 [ 217.291972][ T28] dump_stack+0x1c/0x5c [ 217.293090][ T28] panic+0x300/0x804 [ 217.294221][ T28] hung_task_panic+0x0/0x2c [ 217.295532][ T28] kthread+0x250/0x2d8 [ 217.296638][ T28] ret_from_fork+0x10/0x20 [ 217.297858][ T28] SMP: stopping secondary CPUs [ 217.299229][ T28] Kernel Offset: disabled [ 217.300404][ T28] CPU features: 0x00000,02070084,26017203 [ 217.302050][ T28] Memory Limit: none [ 217.961289][ T28] Rebooting in 86400 seconds..