last executing test programs: 16.98478485s ago: executing program 4 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x0, 0x20}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0), 0x1c) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'veth1_to_hsr\x00', &(0x7f0000000200)=@ethtool_test={0x1a, 0x8000, 0x7}}) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 12.342344122s ago: executing program 3 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000080000000200000004000000050000006ecb696b51ac86a1ac75d7224db12293304a1049d235c324061aa1e62928ac79a13b8dae261adffcad2735dba99a96d6986004229f7030f15dc0fca211a973b7bd72e7a335659df6b2403a759a3fa8de6f42b181c500148e830e5d8e07c390234da5625d1bde01bd18c1703946339164103d5f346ffd6402eb5e76c741200c421972b4326770e1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000000040000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f0000000880)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@utf8no}, {@numtail}, {@uni_xlate}, {@rodir}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0'}, 0xb) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xc695158481216d07, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 11.092576088s ago: executing program 1 (id=497): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="9500000008000000d4000000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11.002358007s ago: executing program 1 (id=498): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) 10.584235786s ago: executing program 4 (id=499): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001d80)={[{@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@sb={'sb', 0x3d, 0x1}}, {@noquota}, {@init_itable}, {@jqfmt_vfsv1}, {@dioread_nolock}, {@test_dummy_encryption}, {@delalloc}, {@nolazytime}], [{@appraise}]}, 0x1, 0x4f9, &(0x7f0000000180)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000540)='./bus/file0\x00', 0x10, &(0x7f0000000400)={[{@data_ordered}]}, 0x1, 0x7b9, &(0x7f00000029c0)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'team_slave_1\x00', &(0x7f0000000bc0)=@ethtool_dump={0x3e, 0x5, 0x3d, 0xc3, "1b179b78c3fdfd366430446eff094d47753ff7765bfa0c7d9caf05ece0354615852ee76db5e909d200b57552a102f3e7c0d15e4e8e31ee28e7e45fae090a117042ee88726236c745a0fcc97fc8c572cc52b36db5f0334a234f22ccde83e681b5963ec36160f6788710c4f9d19c97cde349d2d6636eb1b2ac146b369b66670f3e2d16a78dab1388a6d1dda186870d3a73dc222cd7caf8c6527cc260a8a897a703fb7e9dbe75c6242a0904ae054e552c948d4f3d2868a9acc09d6986cf893fd9df0595ca"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) waitid(0x2, 0x0, &(0x7f00000004c0), 0x1000000, &(0x7f0000000b00)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f0000000080)=""/55, 0x37) 10.386418903s ago: executing program 0 (id=501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000340)) 9.276543207s ago: executing program 0 (id=503): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000001300)=""/161, 0xa1) 9.014618951s ago: executing program 1 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000486c0f820000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) 7.850510329s ago: executing program 1 (id=506): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000d00)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@data_writeback}, {@noquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}, {@sysvgroups}, {@data_ordered}]}, 0xd, 0x5e6, &(0x7f0000000700)="$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") chdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44}, @exit, @map_fd, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.429035369s ago: executing program 4 (id=507): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x288810, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESDEC=0x0], 0x6, 0x2de, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000005, &(0x7f00000003c0)=0x71, 0x4) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x18000, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise_type}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}, 0x0, 0x0, &(0x7f00000005c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.840748044s ago: executing program 2 (id=508): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 6.176281485s ago: executing program 1 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x0, 0x20}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0), 0x1c) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'veth1_to_hsr\x00', &(0x7f0000000200)=@ethtool_test={0x1a, 0x8000, 0x7}}) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 6.166445676s ago: executing program 0 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x94, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6, {0xf3, 0x8, 0x3ff, 0x3}}, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) 5.246287312s ago: executing program 0 (id=511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf4240, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="c60a95000000000000001a00000000001800000000000000000000000000000095000000000000005f5427f9b26db6a1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1}, {0x6}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 5.096607156s ago: executing program 4 (id=512): syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xc, [@private=0xa010100, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0x4, 0x5}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 5.034759432s ago: executing program 2 (id=513): getresuid(&(0x7f0000000440), &(0x7f0000000480), 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', 0x0, 0x400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='stack\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000620a00ff000000006900641900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000fc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x40}, [{0x5}]}, 0x78) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) 5.005322164s ago: executing program 4 (id=514): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) 5.004099504s ago: executing program 3 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4.682081294s ago: executing program 0 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000486c0f820000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) 3.922435035s ago: executing program 3 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000001a40)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7112c0000000000000000000000000000000001"], 0xffdd) 3.729881423s ago: executing program 2 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400100, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x4, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003e00)={'wg2\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000000000)=@newlinkprop={0x24, 0x2e, 0x3133eae229be74b7, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.711718208s ago: executing program 0 (id=519): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@newtaction={0x108, 0x1e, 0x109, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_csum={0xf0, 0x1a, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x9, 0x6, 0x2, 0xaa}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x0, 0x6, 0x3}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5204, 0x7, 0x5, 0x4}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf837, 0x7ff, 0xffffffffffffffff, 0x8, 0x8}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc6, 0xff, 0x8, 0x80000000, 0x38}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3ff, 0xffffffffffffffff, 0x1, 0xfffff00e}, 0x6}}]}, {0x19, 0x6, "2c64dd6b4667626d0dd7c557813fd15714f9373cdf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x108}, 0x1, 0x2b1e, 0x0, 0x4000}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.418395675s ago: executing program 3 (id=520): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000d00)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@data_writeback}, {@noquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}, {@sysvgroups}, {@data_ordered}]}, 0xd, 0x5e6, &(0x7f0000000700)="$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") chdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44}, @exit, @map_fd, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.300018496s ago: executing program 2 (id=521): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4000000000a99, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.315180037s ago: executing program 3 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x68, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @assoc_req={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, 0x0, {}, @void, @val={0x2d, 0x1a}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x6]}]}, 0x68}}, 0x0) 294.552462ms ago: executing program 2 (id=523): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) 242.711637ms ago: executing program 3 (id=524): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6b1, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x9, 0xd733, 0x3e169ca1, 0x9, 0xfffffc01}}, 0x120) 212.21429ms ago: executing program 2 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') r7 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x1, r8, &(0x7f0000000080), 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x1b, 0x8, 0x70bd2d, 0x25dfdbff, {0xd}, [@typed={0x8, 0x10f, 0x0, 0x0, @pid=r9}, @generic="b46fc74919e37c5ccd13043bd4cb2334090b662b5a890f20cdf8c3a12720be11a2a783d3deb7eec31f3bf4a051b297ee27b68904"]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8041) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="120000000912fe4b", @ANYRES16=r10, @ANYBLOB="010800000000000000", @ANYRES32=r12, @ANYBLOB="10005080050002000400000004000600"], 0x2c}}, 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000040)='posixacl\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x4004662b, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 180.516013ms ago: executing program 4 (id=526): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 0s ago: executing program 1 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. syzkaller login: [ 44.505884][ T4015] cgroup: Unknown subsys name 'net' [ 44.798541][ T4015] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.123431][ T4015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 46.586483][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 46.602580][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 46.607541][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 46.648164][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 46.755742][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.757310][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.759599][ T4035] device bridge_slave_0 entered promiscuous mode [ 46.768845][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.770382][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.772688][ T4037] device bridge_slave_0 entered promiscuous mode [ 46.777836][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 46.781250][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.783530][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.785939][ T4031] device bridge_slave_0 entered promiscuous mode [ 46.791716][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.793486][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.796334][ T4035] device bridge_slave_1 entered promiscuous mode [ 46.807537][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.808999][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.811257][ T4037] device bridge_slave_1 entered promiscuous mode [ 46.819912][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.821420][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.824143][ T4031] device bridge_slave_1 entered promiscuous mode [ 46.840627][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.842241][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.844496][ T4027] device bridge_slave_0 entered promiscuous mode [ 46.870592][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.872239][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.874497][ T4027] device bridge_slave_1 entered promiscuous mode [ 46.883989][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.898239][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.903388][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.907226][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.922892][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.938226][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.953750][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.957614][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.982476][ T4037] team0: Port device team_slave_0 added [ 46.997609][ T4035] team0: Port device team_slave_0 added [ 47.011566][ T4037] team0: Port device team_slave_1 added [ 47.013420][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.014815][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.017033][ T4036] device bridge_slave_0 entered promiscuous mode [ 47.033119][ T4031] team0: Port device team_slave_0 added [ 47.036662][ T4035] team0: Port device team_slave_1 added [ 47.039622][ T4031] team0: Port device team_slave_1 added [ 47.043189][ T4027] team0: Port device team_slave_0 added [ 47.046293][ T4027] team0: Port device team_slave_1 added [ 47.059148][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.060704][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.063414][ T4036] device bridge_slave_1 entered promiscuous mode [ 47.088211][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.089676][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.096493][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.107948][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.109692][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.115956][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.124617][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.126012][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.131438][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.135065][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.136690][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.143136][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.152204][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.153713][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.158981][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.163694][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.165277][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.170510][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.174508][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.175941][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.181240][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.192476][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.199499][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.201939][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.207390][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.212879][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.304473][ T4027] device hsr_slave_0 entered promiscuous mode [ 47.342493][ T4027] device hsr_slave_1 entered promiscuous mode [ 47.444068][ T4035] device hsr_slave_0 entered promiscuous mode [ 47.482525][ T4035] device hsr_slave_1 entered promiscuous mode [ 47.542307][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.544011][ T4035] Cannot create hsr debugfs directory [ 47.547433][ T4036] team0: Port device team_slave_0 added [ 47.577656][ T4036] team0: Port device team_slave_1 added [ 47.624315][ T4031] device hsr_slave_0 entered promiscuous mode [ 47.672513][ T4031] device hsr_slave_1 entered promiscuous mode [ 47.722337][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.723995][ T4031] Cannot create hsr debugfs directory [ 47.764196][ T4037] device hsr_slave_0 entered promiscuous mode [ 47.802543][ T4037] device hsr_slave_1 entered promiscuous mode [ 47.842338][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.844010][ T4037] Cannot create hsr debugfs directory [ 47.859465][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.860998][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.866916][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.899596][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.901207][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.907217][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.014135][ T4036] device hsr_slave_0 entered promiscuous mode [ 48.062478][ T4036] device hsr_slave_1 entered promiscuous mode [ 48.102424][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.104067][ T4036] Cannot create hsr debugfs directory [ 48.264535][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 48.266378][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 48.283392][ T4027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.336147][ T4027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.352171][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 48.353498][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 48.354849][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 48.375431][ T4027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.424207][ T4027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.518593][ T4031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.572990][ T4031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.614916][ T4031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.655902][ T4031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.746499][ T4037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.780608][ T4037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.824910][ T4037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.883555][ T4037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.957913][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.979228][ T4035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.004716][ T4035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.072814][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.076152][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.079370][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.081112][ T4035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.114093][ T4035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.178929][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.181504][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.184536][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.186136][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.213771][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.215923][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.218505][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.221015][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.222622][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.225787][ T4036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.246377][ T4036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.343970][ T4036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.374081][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.377720][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.380324][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.384684][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.387006][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.389297][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.391447][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.394411][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.396518][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.409211][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.413261][ T4036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.459724][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.474471][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.476704][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.483832][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.492917][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.495018][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.510982][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.526572][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.528862][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.531614][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.533289][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.536892][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.572853][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.574890][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.577135][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.579359][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.581491][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.583212][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.587670][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.590297][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.594828][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.597829][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.600180][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.603069][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.607249][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.611821][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.614482][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.616874][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.618980][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.620444][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.623950][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.637308][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.640730][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.645437][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.674374][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.676767][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.679225][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.680757][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.685178][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.687575][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.690110][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.692742][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.716013][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.734179][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.736482][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.738567][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.741060][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.748712][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.750361][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.756103][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.758407][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.760892][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.764885][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.767186][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.769455][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.778814][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.788258][ T4037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.791053][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.801758][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.825569][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.828088][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.830335][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.841855][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.844653][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.846191][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.848150][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.850575][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.871748][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.891610][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.894060][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.896212][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.898764][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.901123][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.904209][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.905728][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.907652][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.910066][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.911904][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.929427][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.934347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.937220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.939494][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.940995][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.945229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.947822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.982473][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.984857][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.986926][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.988367][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.990213][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.995895][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.998360][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.000828][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.004293][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.006699][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.008880][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.011051][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.018419][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.020658][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.023096][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.025251][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.033870][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.036493][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.055273][ T4027] device veth0_vlan entered promiscuous mode [ 50.065761][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.068262][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.070499][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.073769][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.075997][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.078225][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.080304][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.085021][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.096096][ T4036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.098297][ T4036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.113715][ T4027] device veth1_vlan entered promiscuous mode [ 50.116062][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.118278][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.120919][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.129939][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.134597][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.136820][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.139051][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.141332][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.144342][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.146395][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.149109][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.150728][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.156471][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.162818][ T4031] device veth0_vlan entered promiscuous mode [ 50.170263][ T4031] device veth1_vlan entered promiscuous mode [ 50.196183][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.226449][ T4027] device veth0_macvtap entered promiscuous mode [ 50.231703][ T4027] device veth1_macvtap entered promiscuous mode [ 50.254568][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.256889][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.259060][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.261648][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.279841][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.283039][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.285546][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.287928][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.290119][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.293465][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.306528][ T4031] device veth0_macvtap entered promiscuous mode [ 50.310509][ T4031] device veth1_macvtap entered promiscuous mode [ 50.326752][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.328636][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.330796][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.332901][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.334997][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.337116][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.341704][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.343832][ T4077] Bluetooth: hci0: command 0x041b tx timeout [ 50.345178][ T4077] Bluetooth: hci1: command 0x041b tx timeout [ 50.355466][ T4037] device veth0_vlan entered promiscuous mode [ 50.363837][ T4037] device veth1_vlan entered promiscuous mode [ 50.374913][ T4027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.376881][ T4027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.378577][ T4027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.380477][ T4027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.385528][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.387819][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.390221][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.393093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.395435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.397612][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.400265][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.401907][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.405130][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.408182][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.410543][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.416090][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.423315][ T4077] Bluetooth: hci4: command 0x041b tx timeout [ 50.424971][ T4077] Bluetooth: hci2: command 0x041b tx timeout [ 50.426331][ T4077] Bluetooth: hci3: command 0x041b tx timeout [ 50.429899][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.431870][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.435163][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.448037][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.450141][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.451756][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.458976][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.461102][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.465472][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.480641][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.485971][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.488377][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.497723][ T4037] device veth0_macvtap entered promiscuous mode [ 50.505326][ T4037] device veth1_macvtap entered promiscuous mode [ 50.509935][ T4031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.511817][ T4031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.515104][ T4031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.516970][ T4031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.527001][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.529304][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.531717][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.534710][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.550709][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.558984][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.561106][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.566416][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.569798][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.586681][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.588964][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.591197][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.595952][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.600025][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.603074][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.605105][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.607299][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.611602][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.632366][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.634641][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.665789][ T4037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.667661][ T4037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.669568][ T4037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.671428][ T4037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.716989][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.719511][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.724600][ T4035] device veth0_vlan entered promiscuous mode [ 50.751570][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.754806][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.794695][ T338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.796633][ T338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.806720][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.811206][ T4035] device veth1_vlan entered promiscuous mode [ 50.819316][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.821053][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.845150][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.847223][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.849534][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.880709][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.885789][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.888326][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.890632][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.908617][ T4036] device veth0_vlan entered promiscuous mode [ 50.914370][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.916012][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.918594][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.933725][ T4036] device veth1_vlan entered promiscuous mode [ 50.968188][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.969913][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.972402][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.974742][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.976846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.978970][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.981195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.986929][ T4035] device veth0_macvtap entered promiscuous mode [ 51.009624][ T1745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.011242][ T1745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.018397][ T4036] device veth0_macvtap entered promiscuous mode [ 51.022659][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.024805][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.027278][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.030348][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.040360][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.061229][ T4036] device veth1_macvtap entered promiscuous mode [ 51.064827][ T4035] device veth1_macvtap entered promiscuous mode [ 51.090672][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.093312][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.095070][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.103940][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.105901][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.107866][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.109635][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.111688][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.121777][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.130483][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.139528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.148811][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.155990][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.166126][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.182790][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.187878][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.189944][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.194804][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.196753][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.198869][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.201086][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.370333][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.375068][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.377261][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.385713][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.798301][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.103864][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.105902][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.107939][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.110220][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.115641][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.117334][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.148234][ T25] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 52.152720][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.253481][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.257655][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.259670][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.261660][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.277086][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.279734][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.286917][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.289061][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.291265][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.305731][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.455376][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 52.458448][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 52.479644][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.485653][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.488247][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.490782][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.513771][ T25] Bluetooth: hci3: command 0x040f tx timeout [ 52.515723][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 52.517222][ T25] Bluetooth: hci4: command 0x040f tx timeout [ 53.960425][ T4125] udc-core: couldn't find an available UDC or it's busy [ 53.961951][ T4125] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.161847][ T4125] udc-core: couldn't find an available UDC or it's busy [ 54.171899][ T4125] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.447616][ T4132] udc-core: couldn't find an available UDC or it's busy [ 54.449066][ T4132] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.766690][ T4076] Bluetooth: hci0: command 0x0419 tx timeout [ 54.767918][ T4036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.768602][ T4076] Bluetooth: hci1: command 0x0419 tx timeout [ 54.770095][ T4036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.771945][ T4076] Bluetooth: hci4: command 0x0419 tx timeout [ 54.774561][ T4076] Bluetooth: hci2: command 0x0419 tx timeout [ 54.775824][ T4076] Bluetooth: hci3: command 0x0419 tx timeout [ 54.806932][ T4036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.808915][ T4036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.825615][ T4035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.827709][ T4035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.829911][ T4035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.831756][ T4035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.916853][ T4137] udc-core: couldn't find an available UDC or it's busy [ 54.918397][ T4137] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.037000][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.038917][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.041973][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.067095][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.068889][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.071555][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.081130][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.083540][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.091664][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.135529][ T4111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.137410][ T4111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.140109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.466460][ T4145] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 55.868629][ T4076] atkbd serio0: keyboard reset failed on [ 56.152001][ C1] sched: RT throttling activated [ 57.923772][ T4076] Bluetooth: hci3: command 0x0405 tx timeout [ 58.684488][ T4175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 59.688440][ T4188] loop2: detected capacity change from 0 to 1024 [ 59.697987][ T4186] loop0: detected capacity change from 0 to 8 [ 60.573858][ T4186] process 'syz.0.23' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 60.643003][ T4188] EXT4-fs (loop2): Test dummy encryption mode enabled [ 60.644402][ T4198] udc-core: couldn't find an available UDC or it's busy [ 60.646158][ T4198] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.751219][ T4188] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 61.834583][ T4214] loop0: detected capacity change from 0 to 1024 [ 61.861816][ T4214] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.822168][ T4072] atkbd serio1: keyboard reset failed on [ 63.490687][ T4211] loop1: detected capacity change from 0 to 32768 [ 63.573116][ T4211] XFS: ikeep mount option is deprecated. [ 63.684702][ T4211] XFS (loop1): Mounting V5 Filesystem [ 64.047005][ T4254] mmap: syz.4.41 (4254) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 64.065044][ T4211] XFS (loop1): Ending clean mount [ 64.091397][ T4211] XFS (loop1): Quotacheck needed: Please wait. [ 64.116594][ T4254] bridge0: port 3(erspan0) entered blocking state [ 64.143859][ T4254] bridge0: port 3(erspan0) entered disabled state [ 64.168434][ T4254] device erspan0 entered promiscuous mode [ 64.194106][ T4211] XFS (loop1): Quotacheck: Done. [ 64.229659][ T4254] bridge0: port 3(erspan0) entered blocking state [ 64.231270][ T4254] bridge0: port 3(erspan0) entered forwarding state [ 64.246298][ T4257] loop0: detected capacity change from 0 to 1024 [ 64.334725][ T4257] EXT4-fs (loop0): Test dummy encryption mode enabled [ 64.401588][ T4257] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 65.302474][ T1960] atkbd serio1: keyboard reset failed on [ 66.634402][ T4279] udc-core: couldn't find an available UDC or it's busy [ 66.644022][ T4279] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.705598][ T4027] XFS (loop1): Unmounting Filesystem [ 66.772121][ T4018] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.012106][ T4018] usb 1-1: Using ep0 maxpacket: 16 [ 67.132382][ T4018] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 67.380786][ T4287] ubi1: attaching mtd0 [ 67.412323][ T4018] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 67.414200][ T4018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.415883][ T4018] usb 1-1: Product: syz [ 67.416731][ T4018] usb 1-1: Manufacturer: syz [ 67.417715][ T4018] usb 1-1: SerialNumber: syz [ 67.438859][ T4018] usb 1-1: config 0 descriptor?? [ 67.531377][ T4293] loop2: detected capacity change from 0 to 1024 [ 67.577232][ T4293] EXT4-fs (loop2): Test dummy encryption mode enabled [ 67.594671][ T4293] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 67.960661][ T4305] bridge0: port 3(erspan0) entered blocking state [ 67.964510][ T4305] bridge0: port 3(erspan0) entered disabled state [ 67.967312][ T4305] device erspan0 entered promiscuous mode [ 67.969396][ T4305] bridge0: port 3(erspan0) entered blocking state [ 67.970809][ T4305] bridge0: port 3(erspan0) entered forwarding state [ 67.988774][ T4075] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.991130][ T4075] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.000888][ T4075] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 68.339153][ T4318] SET target dimension over the limit! [ 69.352633][ T4327] udc-core: couldn't find an available UDC or it's busy [ 69.354109][ T4327] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.361648][ T4075] usb 1-1: USB disconnect, device number 2 [ 69.380959][ T4327] udc-core: couldn't find an available UDC or it's busy [ 69.388109][ T4327] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.527966][ T4334] loop4: detected capacity change from 0 to 1024 [ 69.573593][ T4334] EXT4-fs (loop4): Test dummy encryption mode enabled [ 69.590725][ T4327] udc-core: couldn't find an available UDC or it's busy [ 69.592529][ T4327] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.607928][ T4334] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 69.626669][ T1533] cfg80211: failed to load regulatory.db [ 69.630826][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.632446][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.964872][ T4342] bridge0: port 3(erspan0) entered blocking state [ 69.968708][ T4342] bridge0: port 3(erspan0) entered disabled state [ 69.980843][ T4342] device erspan0 entered promiscuous mode [ 69.988077][ T4342] bridge0: port 3(erspan0) entered blocking state [ 69.989614][ T4342] bridge0: port 3(erspan0) entered forwarding state [ 70.549146][ T4018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.550887][ T4018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.556145][ T4018] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 72.313028][ T4370] loop3: detected capacity change from 0 to 4096 [ 72.340443][ T4374] loop0: detected capacity change from 0 to 1024 [ 72.355583][ T4370] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 72.389610][ T4374] EXT4-fs (loop0): Test dummy encryption mode enabled [ 72.400904][ T4370] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 72.413509][ T4374] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 72.414510][ T4077] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.437901][ T4077] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.593088][ T4077] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 72.946347][ T4037] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 73.622382][ T4018] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.062332][ T4409] bridge0: port 3(erspan0) entered blocking state [ 74.069322][ T4409] bridge0: port 3(erspan0) entered disabled state [ 74.098592][ T4409] device erspan0 entered promiscuous mode [ 74.100952][ T4409] bridge0: port 3(erspan0) entered blocking state [ 74.102462][ T4409] bridge0: port 3(erspan0) entered forwarding state [ 74.132645][ T4018] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 74.138846][ T4018] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.152903][ T4018] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.155554][ T4018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.854363][ T4018] usb 1-1: config 0 descriptor?? [ 74.872573][ T4401] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.978862][ T4018] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 75.095621][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 75.097641][ T4419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.95'. [ 75.222391][ T4017] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.236247][ T4017] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.237198][ T4422] loop3: detected capacity change from 0 to 512 [ 75.251875][ T4017] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 75.263245][ T4422] ======================================================= [ 75.263245][ T4422] WARNING: The mand mount option has been deprecated and [ 75.263245][ T4422] and is ignored by this kernel. Remove the mand [ 75.263245][ T4422] option from the mount to silence this warning. [ 75.263245][ T4422] ======================================================= [ 75.309897][ T4415] loop4: detected capacity change from 0 to 4096 [ 75.389905][ T4422] EXT4-fs (loop3): 1 orphan inode deleted [ 75.391144][ T4422] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 76.513596][ T4075] usb 1-1: USB disconnect, device number 3 [ 76.684774][ T4430] loop0: detected capacity change from 0 to 1024 [ 76.754661][ T4430] EXT4-fs (loop0): Test dummy encryption mode enabled [ 76.775003][ T4430] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 76.945202][ T4432] loop3: detected capacity change from 0 to 2048 [ 76.988137][ T4432] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 77.013327][ T4432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.760048][ T4463] loop0: detected capacity change from 0 to 128 [ 81.261085][ T4474] netlink: 76 bytes leftover after parsing attributes in process `syz.1.109'. [ 81.295874][ T4463] EXT4-fs (loop0): fragment/cluster size (32768) != block size (1024) [ 81.423831][ T1533] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.425524][ T1533] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.435702][ T1533] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 82.195819][ T4491] loop4: detected capacity change from 0 to 1024 [ 82.504053][ T4491] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.685599][ T4491] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 83.453048][ T4515] udc-core: couldn't find an available UDC or it's busy [ 83.454647][ T4515] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.570819][ T4481] loop1: detected capacity change from 0 to 40427 [ 83.781179][ T4481] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.649525][ T4481] F2FS-fs (loop1): recover fsync data on readonly fs [ 84.686445][ T4481] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 84.723337][ T4481] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.205958][ T21] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 85.207597][ T21] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 85.223951][ T21] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 87.750439][ T4556] bridge0: port 3(erspan0) entered blocking state [ 87.758323][ T4556] bridge0: port 3(erspan0) entered disabled state [ 87.772318][ T4556] device erspan0 entered promiscuous mode [ 87.773928][ T4556] bridge0: port 3(erspan0) entered blocking state [ 87.775384][ T4556] bridge0: port 3(erspan0) entered forwarding state [ 88.929704][ T4571] loop3: detected capacity change from 0 to 1024 [ 89.846839][ T1533] Bluetooth: hci4: command 0x0409 tx timeout [ 89.953571][ T4571] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.036302][ T4571] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 92.680019][ T13] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 92.681754][ T13] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 92.684447][ T13] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.517415][ T4617] loop1: detected capacity change from 0 to 1024 [ 94.656270][ T4617] EXT4-fs (loop1): Test dummy encryption mode enabled [ 94.780557][ T4617] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 98.427584][ T1533] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 98.429284][ T1533] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 98.439703][ T1533] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.034446][ T4685] chnl_net:caif_netlink_parms(): no params data found [ 100.470267][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.491550][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.514202][ T4685] device bridge_slave_0 entered promiscuous mode [ 100.555035][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.569690][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.592242][ T4685] device bridge_slave_1 entered promiscuous mode [ 100.656471][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 100.751307][ T4685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.776461][ T4685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.879363][ T4685] team0: Port device team_slave_0 added [ 100.885549][ T4685] team0: Port device team_slave_1 added [ 100.942482][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.944054][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.949570][ T4685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.112932][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.114603][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.120018][ T4685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.264542][ T4685] device hsr_slave_0 entered promiscuous mode [ 102.267070][ T4729] loop4: detected capacity change from 0 to 256 [ 102.308877][ T4685] device hsr_slave_1 entered promiscuous mode [ 102.342172][ T4685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.343933][ T4685] Cannot create hsr debugfs directory [ 102.662163][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 102.862573][ T4685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.061434][ T4685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.167381][ T4685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.402530][ T4685] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.710457][ T4685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.814414][ T4685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.849105][ T7] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.850817][ T7] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.866952][ T7] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 103.875167][ T4685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.915383][ T4685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.243608][ T4685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.294244][ T4685] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.417757][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.424689][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.426704][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.428821][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.702306][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.703999][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.706169][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.743258][ T4648] Bluetooth: hci5: command 0x040f tx timeout [ 104.751199][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.772584][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.774357][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.776465][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.805172][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.837739][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.840515][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.873530][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.909649][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.074929][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.080149][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.101365][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.112864][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.126805][ T4756] loop3: detected capacity change from 0 to 512 [ 105.128396][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.134148][ T4755] netlink: 120 bytes leftover after parsing attributes in process `syz.1.179'. [ 105.153656][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.168728][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.242460][ T4756] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 105.247286][ T4756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.255506][ T4756] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 105.266525][ T4756] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 105.276430][ T4756] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.178: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 105.339729][ T4756] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.178: couldn't read orphan inode 13 (err -117) [ 105.344809][ T4756] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 105.400657][ T4753] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 105.423039][ T4753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 105.459805][ T4685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.463534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.465693][ T4753] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 105.469418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.540866][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.551543][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.576214][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.578682][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.581614][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.593369][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.595717][ T4685] device veth0_vlan entered promiscuous mode [ 105.623674][ T4685] device veth1_vlan entered promiscuous mode [ 105.694972][ T4685] device veth0_macvtap entered promiscuous mode [ 105.704688][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.706943][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.709486][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.711822][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.726955][ T4685] device veth1_macvtap entered promiscuous mode [ 105.734240][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.736510][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.762610][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.768441][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.770701][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.792204][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.794200][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.796350][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.798259][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.800410][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.829766][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.831931][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.840802][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.864339][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.866750][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.870952][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.874041][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.876124][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.878431][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.880317][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.901087][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.937607][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.940150][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.032585][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.176721][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.456881][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.547236][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.564088][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.697859][ T4685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.725795][ T4685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.727808][ T4685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.729591][ T4685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.826645][ T4648] Bluetooth: hci5: command 0x0419 tx timeout [ 106.867944][ T4148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.870401][ T4148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.874128][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.913837][ T4768] loop3: detected capacity change from 0 to 512 [ 106.939264][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.941133][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.953634][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.443102][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 110.351358][ T4783] loop2: detected capacity change from 0 to 1024 [ 111.281815][ T4783] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.403480][ T4783] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 113.257348][ T4648] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 113.259055][ T4648] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 113.264221][ T4648] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 115.719970][ T4821] loop3: detected capacity change from 0 to 128 [ 116.130090][ T4820] loop1: detected capacity change from 0 to 256 [ 116.575482][ T4832] loop2: detected capacity change from 0 to 256 [ 117.000833][ T4037] sysv_free_block: flc_count > flc_size [ 117.002974][ T4037] sysv_free_block: flc_count > flc_size [ 117.004387][ T4037] sysv_free_block: flc_count > flc_size [ 117.005809][ T4037] sysv_free_block: flc_count > flc_size [ 117.008145][ T4037] sysv_free_block: flc_count > flc_size [ 117.010454][ T4037] sysv_free_block: flc_count > flc_size [ 117.015017][ T4037] sysv_free_block: flc_count > flc_size [ 117.019658][ T4037] sysv_free_block: flc_count > flc_size [ 117.042306][ T4037] sysv_free_block: flc_count > flc_size [ 117.045752][ T4037] sysv_free_block: flc_count > flc_size [ 117.064489][ T4037] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 119.369591][ T4648] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 119.374396][ T4648] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 119.380222][ T4648] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.401834][ T4862] udc-core: couldn't find an available UDC or it's busy [ 119.410210][ T4862] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.526467][ T4866] loop3: detected capacity change from 0 to 512 [ 119.576303][ T4866] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.579006][ T4866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.290831][ T4866] EXT4-fs (loop3): 1 truncate cleaned up [ 120.292312][ T4866] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,bsdgroups,sysvgroups,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 120.577237][ T4872] loop4: detected capacity change from 0 to 16 [ 121.533176][ T4872] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xdba51d3d, 0xc32427af expected [ 123.493830][ T4897] udc-core: couldn't find an available UDC or it's busy [ 123.495242][ T4897] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.685423][ T4902] udc-core: couldn't find an available UDC or it's busy [ 124.687000][ T4902] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.766525][ T4908] team0 (unregistering): Port device team_slave_0 removed [ 126.188877][ T4908] team0 (unregistering): Port device team_slave_1 removed [ 126.450555][ T21] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 126.452660][ T21] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 126.477934][ T21] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 128.096237][ T4943] loop1: detected capacity change from 0 to 256 [ 128.332222][ T4952] loop4: detected capacity change from 0 to 512 [ 128.455567][ T4952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.232: inode #1: comm syz.4.232: iget: illegal inode # [ 128.470019][ T4952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.232: error while reading EA inode 1 err=-117 [ 128.500520][ T4952] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.530549][ T4952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.232: inode #1: comm syz.4.232: iget: illegal inode # [ 128.611474][ T4952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.232: error while reading EA inode 1 err=-117 [ 128.624811][ T4952] EXT4-fs (loop4): 1 orphan inode deleted [ 128.626170][ T4952] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nolazytime,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 131.064195][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.065714][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.705006][ T4981] udc-core: couldn't find an available UDC or it's busy [ 131.706604][ T4981] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.983406][ T4984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.241'. [ 132.549459][ T4986] netlink: 136 bytes leftover after parsing attributes in process `syz.3.240'. [ 132.981582][ T4988] loop2: detected capacity change from 0 to 1024 [ 133.681603][ T5004] loop4: detected capacity change from 0 to 164 [ 134.935957][ T5015] loop3: detected capacity change from 0 to 256 [ 135.647736][ T5026] loop1: detected capacity change from 0 to 64 [ 135.789431][ T5026] libceph: resolve '0.0' (ret=-3): failed [ 136.239530][ T7] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.241111][ T7] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.264506][ T7] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.971522][ T5040] loop2: detected capacity change from 0 to 512 [ 138.027423][ T4161] bridge0: port 3(erspan0) entered disabled state [ 138.044901][ T4161] device erspan0 left promiscuous mode [ 138.046389][ T4161] bridge0: port 3(erspan0) entered disabled state [ 138.051148][ T5040] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 138.053371][ T5040] EXT4-fs (loop2): DAX unsupported by block device. [ 138.385057][ T5043] loop0: detected capacity change from 0 to 512 [ 138.525611][ T5036] loop1: detected capacity change from 0 to 40427 [ 138.673172][ T5036] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 138.675122][ T5036] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.680365][ T5036] F2FS-fs (loop1): invalid crc_offset: 12 [ 138.690666][ T5036] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 139.618735][ T5036] loop1: detected capacity change from 0 to 16 [ 139.891927][ T5036] erofs: (device loop1): mounted with root inode @ nid 36. [ 139.932228][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.983397][ T5070] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.312983][ T4034] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 140.332109][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 140.381968][ T5036] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 140.472212][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 141.542847][ T7] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 141.544601][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.546234][ T7] usb 1-1: Product: syz [ 141.547091][ T7] usb 1-1: Manufacturer: syz [ 141.548021][ T7] usb 1-1: SerialNumber: syz [ 141.565610][ T7] usb 1-1: config 0 descriptor?? [ 141.602658][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 141.604031][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 141.608315][ T7] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 141.663627][ T5085] loop1: detected capacity change from 0 to 128 [ 142.051038][ T4161] device hsr_slave_0 left promiscuous mode [ 142.655314][ T4074] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.656944][ T4074] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.659430][ T4074] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 142.733553][ T4073] usb 1-1: USB disconnect, device number 4 [ 142.738686][ T4027] sysv_free_block: flc_count > flc_size [ 142.740064][ T4027] sysv_free_block: flc_count > flc_size [ 142.741460][ T4027] sysv_free_block: flc_count > flc_size [ 142.747103][ T4027] sysv_free_block: flc_count > flc_size [ 142.748481][ T4027] sysv_free_block: flc_count > flc_size [ 142.757727][ T4161] device hsr_slave_1 left promiscuous mode [ 142.761239][ T4027] sysv_free_block: flc_count > flc_size [ 142.765394][ T4027] sysv_free_block: flc_count > flc_size [ 142.770475][ T4027] sysv_free_block: flc_count > flc_size [ 142.790799][ T4027] sysv_free_block: flc_count > flc_size [ 142.792131][ T4027] sysv_free_block: flc_count > flc_size [ 142.796386][ T4027] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 142.882500][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.884304][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.890938][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.913699][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.930358][ T4161] device bridge_slave_1 left promiscuous mode [ 142.940732][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.994210][ T4161] device bridge_slave_0 left promiscuous mode [ 142.995721][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.313183][ T4161] device veth1_macvtap left promiscuous mode [ 143.315024][ T4161] device veth0_macvtap left promiscuous mode [ 143.316525][ T4161] device veth1_vlan left promiscuous mode [ 143.318262][ T4161] device veth0_vlan left promiscuous mode [ 143.780204][ T4161] team0 (unregistering): Port device team_slave_1 removed [ 143.797175][ T4161] team0 (unregistering): Port device team_slave_0 removed [ 143.813182][ T4161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.874402][ T4161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.468731][ T4161] bond0 (unregistering): Released all slaves [ 145.309663][ T5133] loop0: detected capacity change from 0 to 1024 [ 145.350693][ T5133] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.395456][ T5133] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 147.312385][ T21] Bluetooth: hci5: command 0x0405 tx timeout [ 149.862552][ T5168] EXT4-fs warning (device nvme0n1p2): ext4_group_extend:1831: need to use ext2online to resize further [ 151.390651][ T5182] loop4: detected capacity change from 0 to 1024 [ 151.495868][ T5182] EXT4-fs (loop4): Test dummy encryption mode enabled [ 151.537599][ T5182] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 151.919934][ T5191] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.801748][ T5220] loop0: detected capacity change from 0 to 256 [ 155.890252][ T5220] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 155.893321][ T5220] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 156.053883][ T5226] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 156.056031][ T5226] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 156.256122][ T5230] loop3: detected capacity change from 0 to 1024 [ 156.316194][ T5230] EXT4-fs (loop3): Test dummy encryption mode enabled [ 156.357829][ T5230] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 158.664386][ T5251] device wlan1 entered promiscuous mode [ 159.373622][ T4038] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.375234][ T4038] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.389780][ T4038] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 159.885761][ T5275] loop2: detected capacity change from 0 to 1024 [ 159.952514][ T5275] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.993646][ T5275] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 162.696516][ T5307] bridge0: port 3(erspan0) entered blocking state [ 162.703357][ T5307] bridge0: port 3(erspan0) entered disabled state [ 162.707216][ T5307] device erspan0 entered promiscuous mode [ 162.712444][ T5307] bridge0: port 3(erspan0) entered blocking state [ 162.713993][ T5307] bridge0: port 3(erspan0) entered forwarding state [ 162.907589][ T4648] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 162.909201][ T4648] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 162.911856][ T4648] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 163.080075][ T5313] loop2: detected capacity change from 0 to 1024 [ 163.090726][ T5309] device pim6reg1 entered promiscuous mode [ 163.141650][ T5313] EXT4-fs (loop2): Test dummy encryption mode enabled [ 163.231266][ T5313] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 165.430676][ T5348] loop3: detected capacity change from 0 to 1024 [ 165.641605][ T5348] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.680108][ T4017] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 165.681762][ T4017] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 165.687851][ T4017] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 165.693484][ T5348] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 168.019441][ T4857] Bluetooth: hci1: Frame reassembly failed (-84) [ 168.753461][ T26] audit: type=1326 audit(168.719:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.0.364" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbde209e8 code=0x0 [ 168.761579][ T1533] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 168.765508][ T5395] loop0: detected capacity change from 0 to 512 [ 168.780886][ T1533] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 168.808410][ T1533] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 168.878286][ T5395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.229853][ T5401] Zero length message leads to an empty skb [ 169.998092][ T5409] loop0: detected capacity change from 0 to 1024 [ 170.101808][ T1533] Bluetooth: hci1: command 0x1003 tx timeout [ 170.103920][ T1533] Bluetooth: hci4: command 0x0406 tx timeout [ 170.104040][ T4030] Bluetooth: hci1: sending frame failed (-49) [ 170.105337][ T1533] Bluetooth: hci2: command 0x0406 tx timeout [ 170.108179][ T1533] Bluetooth: hci3: command 0x0406 tx timeout [ 170.117794][ T5409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 170.178363][ T5409] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 171.032549][ T5412] loop2: detected capacity change from 0 to 2048 [ 172.009924][ T5421] device batadv_slave_1 entered promiscuous mode [ 172.039102][ T5420] device batadv_slave_1 left promiscuous mode [ 172.099987][ T5412] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.182133][ T1960] Bluetooth: hci1: command 0x1001 tx timeout [ 172.183508][ T4030] Bluetooth: hci1: sending frame failed (-49) [ 172.252591][ T5412] Illegal XDP return value 4294966772, expect packet loss! [ 173.557881][ T5438] loop3: detected capacity change from 0 to 256 [ 173.668361][ T5440] usb usb8: usbfs: process 5440 (syz.1.378) did not claim interface 0 before use [ 174.052783][ T5449] loop0: detected capacity change from 0 to 1024 [ 174.184736][ T5449] EXT4-fs (loop0): Test dummy encryption mode enabled [ 174.266974][ T4018] Bluetooth: hci1: command 0x1009 tx timeout [ 174.487117][ T1533] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 174.488775][ T1533] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 174.518708][ T1533] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 174.523032][ T5449] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 175.246041][ T5461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.385'. [ 175.248048][ T5461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.385'. [ 175.268141][ T5464] loop2: detected capacity change from 0 to 2048 [ 175.564909][ T5464] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.615818][ T5480] loop2: detected capacity change from 0 to 256 [ 176.619817][ T5478] loop0: detected capacity change from 0 to 2048 [ 176.924755][ T5478] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro,. Quota mode: none. [ 177.026921][ T4266] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.056323][ T4266] EXT4-fs (loop0): Remounting filesystem read-only [ 177.406692][ T1533] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 177.408367][ T1533] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 177.427440][ T1533] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 177.858482][ T5489] chnl_net:caif_netlink_parms(): no params data found [ 178.015066][ T5489] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.022609][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.030662][ T5489] device bridge_slave_0 entered promiscuous mode [ 178.046416][ T5489] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.052754][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.072429][ T5489] device bridge_slave_1 entered promiscuous mode [ 178.128700][ T5505] loop0: detected capacity change from 0 to 256 [ 178.194044][ T5489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.198395][ T5489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.210728][ T5507] loop3: detected capacity change from 0 to 1024 [ 178.256221][ T5489] team0: Port device team_slave_0 added [ 178.268594][ T5489] team0: Port device team_slave_1 added [ 178.300575][ T5489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.307160][ T5489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.325481][ T5489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.342972][ T5489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.347888][ T5489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.368505][ T5489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.389086][ T5507] EXT4-fs (loop3): Test dummy encryption mode enabled [ 179.142443][ T4074] Bluetooth: hci6: command 0x0409 tx timeout [ 179.156517][ T5513] udc-core: couldn't find an available UDC or it's busy [ 179.158110][ T5513] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 179.177747][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 179.377834][ T5489] device hsr_slave_0 entered promiscuous mode [ 180.286341][ T5489] device hsr_slave_1 entered promiscuous mode [ 180.370491][ T5525] loop2: detected capacity change from 0 to 128 [ 180.416399][ T5489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.417823][ T5489] Cannot create hsr debugfs directory [ 180.529936][ T5527] netlink: 'syz.3.401': attribute type 4 has an invalid length. [ 180.855371][ T5538] loop3: detected capacity change from 0 to 2048 [ 181.092363][ T5538] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 181.108614][ T5489] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.165621][ T5538] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,noquota,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 181.214767][ T5489] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.222837][ T4038] Bluetooth: hci6: command 0x041b tx timeout [ 181.308695][ T5489] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.387796][ T5489] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.495307][ T5563] bridge0: port 3(erspan0) entered disabled state [ 181.496855][ T5563] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.499145][ T5563] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.685858][ T5489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.723447][ T26] audit: type=1326 audit(181.689:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.732424][ T26] audit: type=1326 audit(181.689:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.736909][ T26] audit: type=1326 audit(181.689:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.764113][ T5489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.772484][ T26] audit: type=1326 audit(181.689:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.777134][ T26] audit: type=1326 audit(181.689:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.781562][ T26] audit: type=1326 audit(181.689:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.804720][ T5489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.812527][ T26] audit: type=1326 audit(181.689:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.816867][ T26] audit: type=1326 audit(181.689:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.841890][ T26] audit: type=1326 audit(181.689:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.847149][ T26] audit: type=1326 audit(181.689:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5537 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7fc00000 [ 181.856526][ T5489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.055762][ T5565] loop3: detected capacity change from 0 to 764 [ 182.089222][ T5489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.141605][ T5489] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.148417][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.150809][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.176707][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.179087][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.181699][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.183353][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.206291][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.209166][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.230135][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.261248][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.262821][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.289739][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.290185][ T5567] loop3: detected capacity change from 0 to 1024 [ 182.310212][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.313897][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.329133][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.354225][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.356818][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.369831][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.379401][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.381808][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.395689][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.396157][ T5567] EXT4-fs (loop3): Test dummy encryption mode enabled [ 182.400557][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.412326][ T5489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.463232][ T5567] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 183.331725][ T4077] Bluetooth: hci6: command 0x040f tx timeout [ 183.412695][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.414550][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.460872][ T5489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.432809][ T5582] udc-core: couldn't find an available UDC or it's busy [ 184.434334][ T5582] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 185.472393][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 185.611393][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.616819][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.653922][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.656481][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.659380][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.664640][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.671740][ T5489] device veth0_vlan entered promiscuous mode [ 185.684318][ T5489] device veth1_vlan entered promiscuous mode [ 185.733951][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.736321][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.738760][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.741243][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.757928][ T5489] device veth0_macvtap entered promiscuous mode [ 185.770503][ T5489] device veth1_macvtap entered promiscuous mode [ 185.803457][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.805663][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.807626][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.809648][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.811628][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.856742][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.858843][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.861071][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.875969][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.878119][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.048520][ T5489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.054692][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.057129][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.059290][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.061589][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.064773][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.067787][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.070150][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.073309][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.075540][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.077985][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.081495][ T5489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.088269][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.090601][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.096324][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.660320][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.736396][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.750368][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.808442][ T5489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.821514][ T5489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.832187][ T5489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.845963][ T5489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.924505][ T4149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.926967][ T4149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.928590][ T5603] loop0: detected capacity change from 0 to 512 [ 186.933235][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.957511][ T5603] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.960132][ T4148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.963175][ T4148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.980010][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.002698][ T5605] loop2: detected capacity change from 0 to 1024 [ 187.028074][ T5603] EXT4-fs (loop0): 1 orphan inode deleted [ 187.029918][ T5603] EXT4-fs (loop0): 1 truncate cleaned up [ 187.031659][ T5603] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 187.107330][ T5605] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 187.155854][ T5605] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.419: Invalid block bitmap block 0 in block_group 0 [ 187.187469][ T5605] __quota_error: 59 callbacks suppressed [ 187.187485][ T5605] Quota error (device loop2): write_blk: dquota write failed [ 187.190744][ T5605] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 187.209809][ T5605] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.419: Failed to acquire dquot type 0 [ 187.225391][ T5605] EXT4-fs error (device loop2): ext4_free_blocks:6225: comm syz.2.419: Freeing blocks not in datazone - block = 0, count = 4096 [ 187.230069][ T5605] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.419: Invalid inode bitmap blk 0 in block_group 0 [ 187.241812][ T5605] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 187.246606][ T4266] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 187.249400][ T4266] EXT4-fs error (device loop2): ext4_release_dquot:6219: comm kworker/u4:11: Failed to release dquot type 0 [ 187.259034][ T5605] EXT4-fs (loop2): 1 orphan inode deleted [ 187.260851][ T5614] loop4: detected capacity change from 0 to 1024 [ 187.263141][ T5605] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; sysvgroups,grpjquota=./file1,auto_da_alloc,noinit_itable,nombcache,i_version,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 187.656662][ T21] Bluetooth: hci6: command 0x0405 tx timeout [ 187.823070][ T5607] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 187.855752][ T5607] EXT4-fs (loop0): Remounting filesystem read-only [ 187.907179][ T4857] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 187.909050][ T4857] EXT4-fs error (device loop2): ext4_release_dquot:6219: comm kworker/u4:14: Failed to release dquot type 0 [ 188.082490][ T5614] EXT4-fs (loop4): Test dummy encryption mode enabled [ 188.118353][ T5614] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 191.046833][ T5647] loop2: detected capacity change from 0 to 512 [ 191.056618][ T5645] netlink: 'syz.1.428': attribute type 4 has an invalid length. [ 191.093856][ T5645] netlink: 'syz.1.428': attribute type 4 has an invalid length. [ 191.169741][ T5647] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.429: Parent and EA inode have the same ino 15 [ 191.189661][ T5647] EXT4-fs (loop2): 1 orphan inode deleted [ 191.190921][ T5647] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.471924][ T5659] netlink: 'syz.1.434': attribute type 4 has an invalid length. [ 191.527828][ T5655] netlink: 'syz.1.434': attribute type 4 has an invalid length. [ 191.912694][ T5661] loop3: detected capacity change from 0 to 1024 [ 192.397685][ T5661] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 192.399654][ T5661] EXT4-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 192.433534][ T5663] netlink: 'syz.2.433': attribute type 4 has an invalid length. [ 192.456518][ T5665] loop0: detected capacity change from 0 to 1024 [ 192.522504][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.524178][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.532668][ T5665] EXT4-fs (loop0): Test dummy encryption mode enabled [ 192.547178][ T5665] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 194.311868][ T5681] loop2: detected capacity change from 0 to 256 [ 194.780635][ T5695] loop3: detected capacity change from 0 to 164 [ 194.872170][ T4650] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.582633][ T4650] usb 1-1: Using ep0 maxpacket: 8 [ 195.742478][ T4650] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.798844][ T4161] bridge0: port 3(erspan0) entered disabled state [ 195.807626][ T4161] device erspan0 left promiscuous mode [ 195.808885][ T4161] bridge0: port 3(erspan0) entered disabled state [ 195.822450][ T4650] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 195.824360][ T4650] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.826526][ T4650] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.828454][ T4650] usb 1-1: config 1 has no interface number 1 [ 195.840041][ T4650] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 195.854483][ T4650] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 195.860328][ T4650] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 196.133554][ T4650] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.136205][ T4650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.157941][ T4650] usb 1-1: Product: syz [ 196.378590][ T4650] usb 1-1: Manufacturer: syz [ 196.463287][ T4650] usb 1-1: SerialNumber: syz [ 197.757992][ T4650] usb 1-1: USB disconnect, device number 5 [ 197.873624][ T5090] udevd[5090]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.662369][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 199.758522][ T5735] raw_sendmsg: syz.4.457 forgot to set AF_INET. Fix it! [ 199.777536][ T4161] device hsr_slave_0 left promiscuous mode [ 199.824815][ T4161] device hsr_slave_1 left promiscuous mode [ 199.898826][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.900510][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.909829][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.911438][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.923655][ T4161] device bridge_slave_1 left promiscuous mode [ 199.925104][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.972631][ T4161] device bridge_slave_0 left promiscuous mode [ 199.974167][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.109706][ T4161] device veth1_macvtap left promiscuous mode [ 200.110993][ T4161] device veth0_macvtap left promiscuous mode [ 200.113338][ T4161] device veth1_vlan left promiscuous mode [ 200.114627][ T4161] device veth0_vlan left promiscuous mode [ 200.932247][ T5746] loop2: detected capacity change from 0 to 1024 [ 201.040106][ T5746] attempt to access beyond end of device [ 201.040106][ T5746] loop2: rw=0, want=5780, limit=1024 [ 201.052478][ T1533] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 201.208990][ T5748] loop2: detected capacity change from 0 to 256 [ 201.261252][ T4161] team0 (unregistering): Port device team_slave_1 removed [ 201.294265][ T4161] team0 (unregistering): Port device team_slave_0 removed [ 201.374281][ T4161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.447367][ T4161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.450667][ T1533] usb 1-1: Using ep0 maxpacket: 16 [ 202.532168][ T1533] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.534396][ T1533] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.537144][ T1533] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 202.539129][ T1533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.568526][ T1533] usb 1-1: config 0 descriptor?? [ 202.606205][ T1533] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 202.734369][ T4161] bond0 (unregistering): Released all slaves [ 203.947494][ T4077] usb 1-1: USB disconnect, device number 6 [ 204.196322][ T5778] loop4: detected capacity change from 0 to 256 [ 213.512530][ T26] audit: type=1326 audit(213.449:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5837 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7ffc0000 [ 213.517817][ T26] audit: type=1326 audit(213.449:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5837 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffab3ac9e8 code=0x7ffc0000 [ 213.523165][ T26] audit: type=1326 audit(213.449:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5837 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7ffc0000 [ 213.527503][ T26] audit: type=1326 audit(213.449:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5837 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3ac9e8 code=0x7ffc0000 [ 215.162784][ T5851] loop3: detected capacity change from 0 to 256 [ 215.517815][ T5857] futex_wake_op: syz.1.494 tries to shift op by -1; fix this program [ 216.201221][ T26] audit: type=1326 audit(216.159:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.495" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb63109e8 code=0x0 [ 216.768585][ T21] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 216.770052][ T21] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 216.781893][ T21] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 216.899599][ T5874] loop4: detected capacity change from 0 to 512 [ 217.113656][ T5874] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 217.152420][ T5879] binder: 5877:5879 ioctl c00c620f 20000340 returned -22 [ 218.129478][ T5874] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.499: corrupted inode contents [ 218.178566][ T5874] EXT4-fs error (device loop4): ext4_dirty_inode:6007: inode #16: comm syz.4.499: mark_inode_dirty error [ 218.203936][ T5874] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.499: corrupted inode contents [ 218.210270][ T5874] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.499: mark_inode_dirty error [ 218.228885][ T5874] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.499: corrupted inode contents [ 218.231665][ T5874] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.499: mark_inode_dirty error [ 218.244941][ T5874] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.499: corrupted inode contents [ 218.263969][ T5874] EXT4-fs error (device loop4): ext4_truncate:4272: inode #16: comm syz.4.499: mark_inode_dirty error [ 218.271112][ T5874] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.499: couldn't truncate inode 16 (err -117) [ 218.301272][ T5874] EXT4-fs (loop4): 1 orphan inode deleted [ 218.302829][ T5874] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa,errors=continue. Quota mode: writeback. [ 221.165573][ T5907] loop2: detected capacity change from 0 to 512 [ 221.181045][ T5905] loop4: detected capacity change from 0 to 256 [ 221.290739][ T5907] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 221.678270][ T5914] fuse: Bad value for 'fd' [ 222.214698][ T5907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 222.216514][ T5907] System zones: 1-12 [ 222.231679][ T5907] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.508: corrupted in-inode xattr [ 222.237170][ T5907] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.508: couldn't read orphan inode 15 (err -117) [ 222.270621][ T5907] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 222.492326][ T5920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.511'. [ 222.518708][ T5918] netlink: 172 bytes leftover after parsing attributes in process `syz.0.511'. [ 222.527078][ T5918] device pim6reg1 entered promiscuous mode [ 225.090424][ T5950] loop3: detected capacity change from 0 to 1024 [ 225.174269][ T5950] EXT4-fs (loop3): Test dummy encryption mode enabled [ 225.221492][ T5950] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 225.221559][ T5952] loop2: detected capacity change from 0 to 512 [ 225.401470][ T4074] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 225.412688][ T4074] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 225.420541][ T4074] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 225.442972][ T5952] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 226.059502][ T4074] Bluetooth: hci5: command 0x0406 tx timeout [ 227.339771][ T5969] loop3: detected capacity change from 0 to 1024 [ 227.407633][ T5971] loop4: detected capacity change from 0 to 128 [ 227.450418][ T5972] attempt to access beyond end of device [ 227.450418][ T5972] loop3: rw=0, want=5780, limit=1024 [ 227.491195][ T5971] EXT4-fs (loop4): Test dummy encryption mode enabled [ 228.344241][ T5978] devtmpfs: Unknown parameter 'posixacl' [ 228.389965][ T5978] [ 228.390554][ T5978] ====================================================== [ 228.391926][ T5978] WARNING: possible circular locking dependency detected [ 228.393431][ T5978] 5.15.167-syzkaller #0 Not tainted [ 228.394518][ T5978] ------------------------------------------------------ [ 228.396034][ T5978] syz.2.525/5978 is trying to acquire lock: [ 228.397454][ T5978] ffff0000cc7503f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x58/0x36c [ 228.399559][ T5978] [ 228.399559][ T5978] but task is already holding lock: [ 228.401019][ T5978] ffff0000d4ad83f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x28c/0xaa0 [ 228.403349][ T5978] [ 228.403349][ T5978] which lock already depends on the new lock. [ 228.403349][ T5978] [ 228.405535][ T5978] [ 228.405535][ T5978] the existing dependency chain (in reverse order) is: [ 228.407358][ T5978] [ 228.407358][ T5978] -> #4 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 228.409190][ T5978] __mutex_lock_common+0x194/0x2154 [ 228.410357][ T5978] mutex_lock_io_nested+0xcc/0x12c [ 228.411590][ T5978] jbd2_journal_flush+0x210/0xaa0 [ 228.412914][ T5978] ext4_ioctl+0x2e9c/0x61bc [ 228.413972][ T5978] __arm64_sys_ioctl+0x14c/0x1c8 [ 228.415084][ T5978] invoke_syscall+0x98/0x2b8 [ 228.416185][ T5978] el0_svc_common+0x138/0x258 [ 228.417336][ T5978] do_el0_svc+0x58/0x14c [ 228.418325][ T5978] el0_svc+0x7c/0x1f0 [ 228.419217][ T5978] el0t_64_sync_handler+0x84/0xe4 [ 228.420309][ T5978] el0t_64_sync+0x1a0/0x1a4 [ 228.421329][ T5978] [ 228.421329][ T5978] -> #3 (&journal->j_barrier){+.+.}-{3:3}: [ 228.423124][ T5978] __mutex_lock_common+0x194/0x2154 [ 228.424462][ T5978] mutex_lock_nested+0xa4/0xf8 [ 228.425636][ T5978] jbd2_journal_lock_updates+0x264/0x328 [ 228.426939][ T5978] ext4_change_inode_journal_flag+0x15c/0x648 [ 228.428379][ T5978] ext4_fileattr_set+0xb6c/0x12d0 [ 228.429532][ T5978] vfs_fileattr_set+0x70c/0xad4 [ 228.430674][ T5978] do_vfs_ioctl+0x1634/0x2a38 [ 228.431856][ T5978] __arm64_sys_ioctl+0xe4/0x1c8 [ 228.433103][ T5978] invoke_syscall+0x98/0x2b8 [ 228.434197][ T5978] el0_svc_common+0x138/0x258 [ 228.435397][ T5978] do_el0_svc+0x58/0x14c [ 228.436485][ T5978] el0_svc+0x7c/0x1f0 [ 228.437498][ T5978] el0t_64_sync_handler+0x84/0xe4 [ 228.438826][ T5978] el0t_64_sync+0x1a0/0x1a4 [ 228.439854][ T5978] [ 228.439854][ T5978] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 228.441671][ T5978] percpu_down_read+0xec/0x3a8 [ 228.442874][ T5978] ext4_writepages+0x190/0x36fc [ 228.443931][ T5978] do_writepages+0x39c/0x5ec [ 228.444993][ T5978] filemap_fdatawrite_wbc+0x1c8/0x228 [ 228.446356][ T5978] filemap_write_and_wait_range+0x16c/0x244 [ 228.447597][ T5978] ext4_change_inode_journal_flag+0x110/0x648 [ 228.449008][ T5978] ext4_fileattr_set+0xb6c/0x12d0 [ 228.450272][ T5978] vfs_fileattr_set+0x70c/0xad4 [ 228.451478][ T5978] do_vfs_ioctl+0x1634/0x2a38 [ 228.452645][ T5978] __arm64_sys_ioctl+0xe4/0x1c8 [ 228.453806][ T5978] invoke_syscall+0x98/0x2b8 [ 228.454923][ T5978] el0_svc_common+0x138/0x258 [ 228.455985][ T5978] do_el0_svc+0x58/0x14c [ 228.457014][ T5978] el0_svc+0x7c/0x1f0 [ 228.457980][ T5978] el0t_64_sync_handler+0x84/0xe4 [ 228.459131][ T5978] el0t_64_sync+0x1a0/0x1a4 [ 228.460158][ T5978] [ 228.460158][ T5978] -> #1 (mapping.invalidate_lock){++++}-{3:3}: [ 228.461911][ T5978] down_write+0xbc/0x12c [ 228.462992][ T5978] ext4_setattr+0xa74/0x1440 [ 228.464029][ T5978] notify_change+0xa34/0xcf8 [ 228.465044][ T5978] do_truncate+0x1c0/0x28c [ 228.466185][ T5978] do_sys_ftruncate+0x288/0x31c [ 228.467488][ T5978] __arm64_sys_ftruncate+0x60/0x74 [ 228.468742][ T5978] invoke_syscall+0x98/0x2b8 [ 228.469779][ T5978] el0_svc_common+0x138/0x258 [ 228.470820][ T5978] do_el0_svc+0x58/0x14c [ 228.471893][ T5978] el0_svc+0x7c/0x1f0 [ 228.472870][ T5978] el0t_64_sync_handler+0x84/0xe4 [ 228.474112][ T5978] el0t_64_sync+0x1a0/0x1a4 [ 228.475073][ T5978] [ 228.475073][ T5978] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 228.476885][ T5978] __lock_acquire+0x32d4/0x7638 [ 228.478020][ T5978] lock_acquire+0x240/0x77c [ 228.479123][ T5978] down_read+0xc0/0x398 [ 228.480178][ T5978] ext4_bmap+0x58/0x36c [ 228.481242][ T5978] bmap+0xa8/0xe8 [ 228.482088][ T5978] jbd2_journal_flush+0x63c/0xaa0 [ 228.483288][ T5978] ext4_ioctl+0x3454/0x61bc [ 228.484439][ T5978] __arm64_sys_ioctl+0x14c/0x1c8 [ 228.485724][ T5978] invoke_syscall+0x98/0x2b8 [ 228.486803][ T5978] el0_svc_common+0x138/0x258 [ 228.487773][ T5978] do_el0_svc+0x58/0x14c [ 228.488759][ T5978] el0_svc+0x7c/0x1f0 [ 228.489760][ T5978] el0t_64_sync_handler+0x84/0xe4 [ 228.491058][ T5978] el0t_64_sync+0x1a0/0x1a4 [ 228.492230][ T5978] [ 228.492230][ T5978] other info that might help us debug this: [ 228.492230][ T5978] [ 228.494391][ T5978] Chain exists of: [ 228.494391][ T5978] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 228.494391][ T5978] [ 228.497729][ T5978] Possible unsafe locking scenario: [ 228.497729][ T5978] [ 228.499204][ T5978] CPU0 CPU1 [ 228.500313][ T5978] ---- ---- [ 228.501451][ T5978] lock(&journal->j_checkpoint_mutex); [ 228.502554][ T5978] lock(&journal->j_barrier); [ 228.504065][ T5978] lock(&journal->j_checkpoint_mutex); [ 228.505681][ T5978] lock(&sb->s_type->i_mutex_key#9); [ 228.506884][ T5978] [ 228.506884][ T5978] *** DEADLOCK *** [ 228.506884][ T5978] [ 228.508650][ T5978] 2 locks held by syz.2.525/5978: [ 228.509768][ T5978] #0: ffff0000d4ad8170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x264/0x328 [ 228.512158][ T5978] #1: ffff0000d4ad83f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x28c/0xaa0 [ 228.514568][ T5978] [ 228.514568][ T5978] stack backtrace: [ 228.515685][ T5978] CPU: 1 PID: 5978 Comm: syz.2.525 Not tainted 5.15.167-syzkaller #0 [ 228.517326][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 228.519414][ T5978] Call trace: [ 228.520170][ T5978] dump_backtrace+0x0/0x530 [ 228.521252][ T5978] show_stack+0x2c/0x3c [ 228.522210][ T5978] dump_stack_lvl+0x108/0x170 [ 228.523171][ T5978] dump_stack+0x1c/0x58 [ 228.524058][ T5978] print_circular_bug+0x150/0x1b8 [ 228.525063][ T5978] check_noncircular+0x2cc/0x378 [ 228.526156][ T5978] __lock_acquire+0x32d4/0x7638 [ 228.527211][ T5978] lock_acquire+0x240/0x77c [ 228.528310][ T5978] down_read+0xc0/0x398 [ 228.529310][ T5978] ext4_bmap+0x58/0x36c [ 228.530253][ T5978] bmap+0xa8/0xe8 [ 228.531005][ T5978] jbd2_journal_flush+0x63c/0xaa0 [ 228.532210][ T5978] ext4_ioctl+0x3454/0x61bc [ 228.533176][ T5978] __arm64_sys_ioctl+0x14c/0x1c8 [ 228.534260][ T5978] invoke_syscall+0x98/0x2b8 [ 228.535199][ T5978] el0_svc_common+0x138/0x258 [ 228.536101][ T5978] do_el0_svc+0x58/0x14c [ 228.537038][ T5978] el0_svc+0x7c/0x1f0 [ 228.537897][ T5978] el0t_64_sync_handler+0x84/0xe4 [ 228.538942][ T5978] el0t_64_sync+0x1a0/0x1a4 [ 228.791844][ T5971] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 228.850738][ T4028] Bluetooth: hci6: link tx timeout [ 228.851865][ T4028] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.853372][ T4028] Bluetooth: hci6: link tx timeout [ 228.854444][ T4028] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.900661][ T5971] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 230.902174][ T1960] Bluetooth: hci6: command 0x0406 tx timeout