last executing test programs: 5.867545482s ago: executing program 4 (id=513): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="184f62d8e7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x6908, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r5 = io_uring_setup(0x7058, &(0x7f0000000040)) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x18, 0x20000000, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000d00ea11c21d00050000", 0x28}], 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') 4.799405357s ago: executing program 4 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = syz_io_uring_setup(0xd6d, &(0x7f00000003c0)={0x0, 0x0, 0x1000}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 4.629664708s ago: executing program 4 (id=523): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x37, 0x1, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000180)="86fa", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000780), &(0x7f0000000800)=0x8) 4.534572719s ago: executing program 4 (id=524): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.491976439s ago: executing program 2 (id=525): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f00000006c0)={0x0, 0x1, 0x0, 0xd}) 3.601163123s ago: executing program 2 (id=530): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/140, 0x8c}], 0x1}, 0x0) 3.480568214s ago: executing program 2 (id=534): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000001300)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3.347742885s ago: executing program 1 (id=537): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0xfff1}, {}, {0x0, 0x3}}}, 0x24}}, 0x0) 3.314742055s ago: executing program 1 (id=538): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004) 3.305250995s ago: executing program 3 (id=539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000089003552bde5c064", 0x14}], 0x1}}], 0x1, 0x0) 3.199901505s ago: executing program 3 (id=540): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000006c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0xc0096616, &(0x7f0000000700)=@v1={0x0, @aes128, 0x0, @desc2}) 3.199544705s ago: executing program 1 (id=541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="eaca9f40b30ab481c9868e5dfefe0251d03e6ab3e5208fe4177d333c1301a75879af69c1e9ba0f3392fd6036fae5b13fc891fcc0de39f058a038f2b3b50ab59c0550543b437f114c093d5aba0c66feb4da82c6f7d6215f7b94885890c78e96a6806a60863004ed39ea851c0518dcf1c17ec4da6fc66cb0b939fbec3ac7a93dd42186d3426e1d9700a8f8a7b7312a5770", @ANYBLOB="d497c0410e5d469719fd3c96937b98099c4d2207e6d93185759d25dcc33c1837133dfafb63d5157862d91c9caf01d625d18156f41d5926136c1528fcd2a19c9001b2d57b58dec7a4aef6ca2d01a9fbd748d8d4095ac376b96b7cdf129a0c0a7540df1e0767f98761b9341eee00b2d1344bafe436a2f7af039248b5a5c524ef8d5d56e35aaba76a3b7cb592781a9c29c59db3a299adf6631dc3cce17d1b99a1116c5bcb594562a6d3bf9128bb55084ff53b79737f78"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[r1]}, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120006000300fc"], 0x74}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=ANY=[], 0x386, 0x0) 3.002715066s ago: executing program 3 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x40}}}, 0x7) socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2.22146104s ago: executing program 3 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000001d00)={0x6071d56f, 0x0, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200"}) 2.22010198s ago: executing program 1 (id=545): ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) dup(r3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) shutdown(r3, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 1.969180111s ago: executing program 0 (id=547): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x410083) 1.838315152s ago: executing program 0 (id=548): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xd0f, 0x400000, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.731986652s ago: executing program 0 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 1.612957193s ago: executing program 0 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 1.541858913s ago: executing program 0 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@remote, @remote, @remote, 0x40000, 0x40, 0x0, 0x0, 0x10000000, 0x40180043}) 1.343864284s ago: executing program 4 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) r5 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000a80)=""/248, 0xf8, 0x40000020, 0x0, 0x0) 1.343624424s ago: executing program 3 (id=553): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0xffffffff, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x100000001}, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.230260545s ago: executing program 1 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) 1.230016644s ago: executing program 2 (id=555): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000740)={0x0, &(0x7f0000000680)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 1.143945405s ago: executing program 3 (id=556): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="eaca9f40b30ab481c9868e5dfefe0251d03e6ab3e5208fe4177d333c1301a75879af69c1e9ba0f3392fd6036fae5b13fc891fcc0de39f058a038f2b3b50ab59c0550543b437f114c093d5aba0c66feb4da82c6f7d6215f7b94885890c78e96a6806a60863004ed39ea851c0518dcf1c17ec4da6fc66cb0b939fbec3ac7a93dd42186d3426e1d9700a8f8a7b7312a5770", @ANYBLOB="d497c0410e5d469719fd3c96937b98099c4d2207e6d93185759d25dcc33c1837133dfafb63d5157862d91c9caf01d625d18156f41d5926136c1528fcd2a19c9001b2d57b58dec7a4aef6ca2d01a9fbd748d8d4095ac376b96b7cdf129a0c0a7540df1e0767f98761b9341eee00b2d1344bafe436a2f7af039248b5a5c524ef8d5d56e35aaba76a3b7cb592781a9c29c59db3a299adf6631dc3cce17d1b99a1116c5bcb594562a6d3bf9128bb55084ff53b79737f78"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[r1]}, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120006000300fc"], 0x74}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=ANY=[], 0x386, 0x0) 1.051988195s ago: executing program 2 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a) 242.379089ms ago: executing program 4 (id=558): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed0040, &(0x7f0000000200)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@errors_remount}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x496, &(0x7f0000000580)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 241.487259ms ago: executing program 1 (id=559): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x200000000000000, 0x100}, 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) 228.782949ms ago: executing program 0 (id=560): ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000046e5174d1e3c1ef83f32986e91d21c8e3d7f"], 0x1a, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001dc0)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 0s ago: executing program 2 (id=561): r0 = socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(r0, 0x84, 0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 15.332255][ T3964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.335235][ T3964] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.377496][ T39] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.381868][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. syzkaller login: [ 66.076578][ T4282] cgroup: Unknown subsys name 'net' [ 66.344590][ T4282] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.637727][ T4282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 67.655650][ T4296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.658381][ T4296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.660555][ T4294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.662735][ T4294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.664611][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.666359][ T4294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.718524][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.721206][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.723940][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.726204][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.729032][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.730942][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.740275][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.742525][ T4294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.744468][ T4294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.754028][ T4300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.757631][ T4300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.759721][ T4300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.762565][ T4300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.764552][ T4300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.766306][ T4300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.770684][ T4300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.775447][ T4296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.777235][ T4296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.790717][ T4296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.793157][ T4296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.797842][ T4294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.807880][ T4294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.810454][ T4294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.812196][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.912290][ T4293] chnl_net:caif_netlink_parms(): no params data found [ 67.997184][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 68.034967][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.036479][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.038612][ T4293] device bridge_slave_0 entered promiscuous mode [ 68.044353][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.045881][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.048086][ T4293] device bridge_slave_1 entered promiscuous mode [ 68.071671][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 68.092291][ T4293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.106667][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 68.122020][ T4293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.136761][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.138473][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.144009][ T4299] device bridge_slave_0 entered promiscuous mode [ 68.163780][ T4293] team0: Port device team_slave_0 added [ 68.173646][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.175255][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.177457][ T4299] device bridge_slave_1 entered promiscuous mode [ 68.185770][ T4293] team0: Port device team_slave_1 added [ 68.221643][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.223268][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.225493][ T4305] device bridge_slave_0 entered promiscuous mode [ 68.243184][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.250231][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.251807][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.253995][ T4305] device bridge_slave_1 entered promiscuous mode [ 68.256371][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.257868][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.260062][ T4297] device bridge_slave_0 entered promiscuous mode [ 68.265091][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.267656][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.269230][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.274596][ T4293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.292444][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.293998][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.296035][ T4297] device bridge_slave_1 entered promiscuous mode [ 68.306876][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.308303][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.314039][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.323730][ T4299] team0: Port device team_slave_0 added [ 68.327198][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.332904][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.343758][ T4299] team0: Port device team_slave_1 added [ 68.347053][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.349384][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 68.353806][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.394381][ T4305] team0: Port device team_slave_0 added [ 68.396267][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.397747][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.403428][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.423524][ T4305] team0: Port device team_slave_1 added [ 68.425495][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.427080][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.432578][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.436853][ T4297] team0: Port device team_slave_0 added [ 68.480944][ T4293] device hsr_slave_0 entered promiscuous mode [ 68.524317][ T4293] device hsr_slave_1 entered promiscuous mode [ 68.575043][ T4297] team0: Port device team_slave_1 added [ 68.606854][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.608409][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.614686][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.633661][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.635265][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.637488][ T4302] device bridge_slave_0 entered promiscuous mode [ 68.645094][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.646466][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.652160][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.655250][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.656677][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.663457][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.672946][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.674538][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.676820][ T4302] device bridge_slave_1 entered promiscuous mode [ 68.687583][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.689180][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.694489][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.740412][ T4299] device hsr_slave_0 entered promiscuous mode [ 68.779231][ T4299] device hsr_slave_1 entered promiscuous mode [ 68.818974][ T4299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.820657][ T4299] Cannot create hsr debugfs directory [ 68.884635][ T4305] device hsr_slave_0 entered promiscuous mode [ 68.919158][ T4305] device hsr_slave_1 entered promiscuous mode [ 68.968967][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.970630][ T4305] Cannot create hsr debugfs directory [ 69.007933][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.011736][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.090716][ T4297] device hsr_slave_0 entered promiscuous mode [ 69.129585][ T4297] device hsr_slave_1 entered promiscuous mode [ 69.168886][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.170478][ T4297] Cannot create hsr debugfs directory [ 69.178421][ T4302] team0: Port device team_slave_0 added [ 69.181259][ T4302] team0: Port device team_slave_1 added [ 69.223215][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.224700][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.235416][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.257767][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.259613][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.265334][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.320255][ T4293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.374978][ T4293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.412325][ T4293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.460564][ T4293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.560642][ T4302] device hsr_slave_0 entered promiscuous mode [ 69.599329][ T4302] device hsr_slave_1 entered promiscuous mode [ 69.638960][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.640063][ T7] cfg80211: failed to load regulatory.db [ 69.640596][ T4302] Cannot create hsr debugfs directory [ 69.709424][ T4294] Bluetooth: hci0: command tx timeout [ 69.725907][ T4305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.771492][ T4305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.789065][ T47] Bluetooth: hci3: command tx timeout [ 69.790389][ T47] Bluetooth: hci1: command tx timeout [ 69.820497][ T4305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.879113][ T4294] Bluetooth: hci4: command tx timeout [ 69.880410][ T4294] Bluetooth: hci2: command tx timeout [ 69.886508][ T4305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.048177][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.058335][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.065160][ T4299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.105872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.113553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.131568][ T4299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.170524][ T4299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.212089][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.214305][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.216498][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.218075][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.223996][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.226352][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.228742][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.230393][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.233653][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.239526][ T4299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.310146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.332089][ T4297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.405647][ T4297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.448049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.451976][ T4297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.500569][ T4302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.550433][ T4297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.611529][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.614631][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.616993][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.621334][ T4302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.670968][ T4302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.721200][ T4302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.775370][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.777726][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.787614][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.790097][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.792343][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.794495][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.798644][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.817408][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.824136][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.827274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.829657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.876033][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.879224][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.881399][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.882889][ T627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.885139][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.887422][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.895455][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.896953][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.899770][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.909527][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.915590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.918435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.922862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.938044][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.941274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.963812][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.966451][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.977979][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.987658][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.991494][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.993776][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.995977][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.998016][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.999633][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.005987][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.015639][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.017859][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.020465][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.023166][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.025230][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.026777][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.042263][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.045184][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.053608][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.055457][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.057755][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.061585][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.073196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.074963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.076607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.102975][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.122650][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.126862][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.129135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.132174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.134539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.136883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.139902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.141984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.145097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.152044][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.154374][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.156576][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.158157][ T627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.173095][ T4299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.175379][ T4299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.185593][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.190504][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.193025][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.195299][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.198104][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.201216][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.203368][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.205484][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.217201][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.219949][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.230154][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.232701][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.234270][ T627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.236111][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.238379][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.243307][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.244932][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.247358][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.267783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.270379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.272325][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.273839][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.275712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.278180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.285216][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.301748][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.304407][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.308228][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.327940][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.331833][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.335648][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.338074][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.343332][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.345630][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.351003][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.353347][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.355329][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.357292][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.360871][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.365265][ T4293] device veth0_vlan entered promiscuous mode [ 71.378249][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.380649][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.382919][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.385139][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.387441][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.390294][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.393209][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.397558][ T4293] device veth1_vlan entered promiscuous mode [ 71.404781][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.407865][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.417540][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.420256][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.422651][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.425549][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.427692][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.435502][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.442800][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.444956][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.446857][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.458434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.460809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.466879][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.496739][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.500087][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.502567][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.515132][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.528366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.530697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.540296][ T4293] device veth0_macvtap entered promiscuous mode [ 71.543437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.545688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.548066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.560145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.562296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.570719][ T4305] device veth0_vlan entered promiscuous mode [ 71.585170][ T4293] device veth1_macvtap entered promiscuous mode [ 71.592981][ T4299] device veth0_vlan entered promiscuous mode [ 71.597669][ T4305] device veth1_vlan entered promiscuous mode [ 71.613274][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.615383][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.617523][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.629869][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.632288][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.641652][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.644401][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.658619][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.664995][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.667321][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.670903][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.673102][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.677529][ T4299] device veth1_vlan entered promiscuous mode [ 71.682862][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.685162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.687253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.691314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.695616][ T4305] device veth0_macvtap entered promiscuous mode [ 71.704197][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.706373][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.708594][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.712068][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.715546][ T4305] device veth1_macvtap entered promiscuous mode [ 71.722860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.725136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.726840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.729659][ T4293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.731578][ T4293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.733272][ T4293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.735174][ T4293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.750195][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.753163][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.774700][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.777103][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.781443][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.789852][ T47] Bluetooth: hci0: command tx timeout [ 71.804724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.806993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.817741][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.820595][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.823593][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.828592][ T4305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.831667][ T4305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.833529][ T4305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.835268][ T4305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.838113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.841792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.844174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.846311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.848483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.852486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.869623][ T4294] Bluetooth: hci1: command tx timeout [ 71.870916][ T4294] Bluetooth: hci3: command tx timeout [ 71.872464][ T4299] device veth0_macvtap entered promiscuous mode [ 71.895068][ T4299] device veth1_macvtap entered promiscuous mode [ 71.905982][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.908116][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.911447][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.914463][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.916720][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.918658][ T627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.941375][ T4297] device veth0_vlan entered promiscuous mode [ 71.949120][ T47] Bluetooth: hci2: command tx timeout [ 71.950295][ T47] Bluetooth: hci4: command tx timeout [ 71.967101][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.974909][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.978654][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.988395][ T4297] device veth1_vlan entered promiscuous mode [ 71.994359][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.996697][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.998643][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.001268][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.004592][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.011574][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.013876][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.016224][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.042372][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.044119][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.054324][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.056154][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.061903][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.064302][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.066390][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.068546][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.073006][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.076864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.079679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.081665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.083653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.085789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.087997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.091417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.105856][ T4297] device veth0_macvtap entered promiscuous mode [ 72.116588][ T4299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.118395][ T4299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.120698][ T4299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.122565][ T4299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.126388][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.128726][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.133466][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.149645][ T4297] device veth1_macvtap entered promiscuous mode [ 72.159438][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.161226][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.166759][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.170817][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.172890][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.174830][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.177263][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.187524][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.191984][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.195895][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.236870][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.244490][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.248451][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.251428][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.253549][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.255618][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.258462][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.266576][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.271749][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.276298][ T4297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.286722][ T4297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.288615][ T4297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.291478][ T4297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.357378][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.392450][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.404968][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.407239][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.411726][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.278952][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.282205][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.397570][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.221559][ T4302] device veth0_vlan entered promiscuous mode [ 74.234395][ T4302] device veth1_vlan entered promiscuous mode [ 74.252307][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.259455][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.292183][ T4302] device veth0_macvtap entered promiscuous mode [ 74.297950][ T4302] device veth1_macvtap entered promiscuous mode [ 74.314860][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.317151][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.328600][ T4294] Bluetooth: hci0: command tx timeout [ 74.339650][ T4294] Bluetooth: hci3: command tx timeout [ 74.340801][ T4294] Bluetooth: hci1: command tx timeout [ 74.341862][ T4294] Bluetooth: hci4: command tx timeout [ 74.343073][ T4294] Bluetooth: hci2: command tx timeout [ 74.350952][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.353135][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.355149][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.357274][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.359487][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.361610][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.364861][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.435640][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.437504][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.439473][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.441658][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.443921][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.445904][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.447961][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.450579][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.452623][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.454710][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.456703][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.459142][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.488570][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.493542][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.495549][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.507323][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.511179][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.513376][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.515484][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.517877][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.536841][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.555676][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.557848][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.560290][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.382119][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.395330][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.402490][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.407773][ T47] Bluetooth: hci2: command tx timeout [ 76.409204][ T47] Bluetooth: hci4: command tx timeout [ 76.410253][ T47] Bluetooth: hci1: command tx timeout [ 76.411280][ T47] Bluetooth: hci3: command tx timeout [ 76.412386][ T47] Bluetooth: hci0: command tx timeout [ 77.265727][ T4302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.269515][ T4302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.273681][ T4302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.277757][ T4302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.871477][ T627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.873291][ T627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.907562][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.098272][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.100074][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.102527][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.118096][ T4440] loop3: detected capacity change from 0 to 40427 [ 80.139286][ T4440] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 80.141105][ T4440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 80.886231][ T4440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.947139][ T4440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 80.950098][ T4440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.206889][ T4440] sched: RT throttling activated [ 83.006069][ T4469] loop2: detected capacity change from 0 to 64 [ 87.199741][ T4490] loop0: detected capacity change from 0 to 1024 [ 87.459086][ T4490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.809728][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 91.878451][ T4510] loop4: detected capacity change from 0 to 8192 [ 92.265056][ T4521] hub 5-0:1.0: USB hub found [ 92.268484][ T4521] hub 5-0:1.0: 8 ports detected [ 92.759301][ T4510] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.767793][ T4510] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 92.780847][ T4510] REISERFS (device loop4): using ordered data mode [ 92.782347][ T4510] reiserfs: using flush barriers [ 92.808993][ T4510] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.824145][ T4510] REISERFS (device loop4): checking transaction log (loop4) [ 93.295401][ T4530] loop0: detected capacity change from 0 to 16 [ 94.101244][ T4530] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 94.748733][ T4510] REISERFS (device loop4): Using tea hash to sort names [ 94.749986][ T4528] loop0: detected capacity change from 0 to 512 [ 94.751402][ T4510] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 94.751950][ T4528] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.835593][ T4528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 95.702042][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 98.040796][ T4573] loop4: detected capacity change from 0 to 1024 [ 98.166528][ T4573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.725127][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 100.935021][ T4589] loop0: detected capacity change from 0 to 8192 [ 101.769478][ T4589] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.772126][ T4589] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 101.774010][ T4589] REISERFS (device loop0): using ordered data mode [ 101.787544][ T4599] loop4: detected capacity change from 0 to 2048 [ 101.798972][ T4589] reiserfs: using flush barriers [ 101.811059][ T4589] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.814445][ T4589] REISERFS (device loop0): checking transaction log (loop0) [ 101.834996][ T4601] netlink: 276 bytes leftover after parsing attributes in process `syz.2.48'. [ 101.877641][ T4599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.873483][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 102.938205][ T4589] REISERFS (device loop0): Using tea hash to sort names [ 102.944630][ T4589] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.990317][ T4611] loop2: detected capacity change from 0 to 160 [ 103.005654][ T4613] loop4: detected capacity change from 0 to 128 [ 103.012163][ T4613] befs: (loop4): No write support. Marking filesystem read-only [ 103.032101][ T4613] befs: (loop4): invalid magic header [ 103.480886][ T4621] syz.2.52 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.888285][ T4630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.891952][ T4630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.549299][ T4629] loop1: detected capacity change from 0 to 1024 [ 105.745363][ T4629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.817660][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 111.084966][ T4675] loop2: detected capacity change from 0 to 8192 [ 111.153498][ T4675] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 111.156312][ T4675] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 111.158206][ T4675] REISERFS (device loop2): using ordered data mode [ 111.169497][ T4675] reiserfs: using flush barriers [ 111.171237][ T4675] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.174721][ T4675] REISERFS (device loop2): checking transaction log (loop2) [ 112.440123][ T4675] REISERFS (device loop2): Using tea hash to sort names [ 113.419283][ T4675] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 117.940730][ T4294] Bluetooth: hci3: link tx timeout [ 117.942001][ T4294] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.063523][ T4762] loop0: detected capacity change from 0 to 8192 [ 118.094767][ T4762] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.095175][ T47] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 118.097601][ T4762] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 118.101730][ T4762] REISERFS (device loop0): using ordered data mode [ 118.103121][ T4762] reiserfs: using flush barriers [ 118.109341][ T4762] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.112655][ T4762] REISERFS (device loop0): checking transaction log (loop0) [ 118.180384][ T4769] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 118.203896][ T4769] loop1: detected capacity change from 0 to 256 [ 118.260725][ T47] Bluetooth: Wrong link type (-22) [ 118.278006][ T4762] REISERFS (device loop0): Using tea hash to sort names [ 118.280115][ T4769] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 118.292156][ T4769] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 118.294208][ T4769] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 118.295787][ T4769] UDF-fs: Scanning with blocksize 512 failed [ 118.312868][ T4762] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 118.331575][ T4769] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 118.361774][ T4769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.265699][ T4300] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2 [ 121.059091][ T4300] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 121.061008][ T4300] Bluetooth: hci2: Injecting HCI hardware error event [ 121.063377][ T47] Bluetooth: hci2: hardware error 0x00 [ 121.105717][ T4296] Bluetooth: hci3: command 0x0406 tx timeout [ 121.226162][ T4296] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 121.405322][ T4814] loop1: detected capacity change from 0 to 2048 [ 121.417377][ T4814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.802880][ T4834] loop3: detected capacity change from 0 to 128 [ 123.804712][ T4834] ======================================================= [ 123.804712][ T4834] WARNING: The mand mount option has been deprecated and [ 123.804712][ T4834] and is ignored by this kernel. Remove the mand [ 123.804712][ T4834] option from the mount to silence this warning. [ 123.804712][ T4834] ======================================================= [ 123.824230][ T4834] vxfs: unable to set final block size [ 124.097479][ T47] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 124.128727][ T4412] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.165123][ T4800] loop4: detected capacity change from 0 to 32768 [ 124.181644][ T4847] netlink: 236 bytes leftover after parsing attributes in process `syz.0.124'. [ 124.183879][ T4847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 124.186910][ T4847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.124'. [ 124.189537][ T4847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.124'. [ 124.351971][ T27] audit: type=1326 audit(124.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.1.122" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba74a2a8 code=0x0 [ 125.397623][ T4862] loop2: detected capacity change from 0 to 4096 [ 125.418617][ T4862] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 125.562280][ T4866] loop0: detected capacity change from 0 to 256 [ 125.662168][ T4866] FAT-fs (loop0): Directory bread(block 64) failed [ 125.664241][ T4866] FAT-fs (loop0): Directory bread(block 65) failed [ 125.665895][ T4866] FAT-fs (loop0): Directory bread(block 66) failed [ 125.667355][ T4866] FAT-fs (loop0): Directory bread(block 67) failed [ 125.685014][ T4866] FAT-fs (loop0): Directory bread(block 68) failed [ 125.686394][ T4866] FAT-fs (loop0): Directory bread(block 69) failed [ 125.687801][ T4866] FAT-fs (loop0): Directory bread(block 70) failed [ 125.708478][ T4866] FAT-fs (loop0): Directory bread(block 71) failed [ 125.713780][ T4866] FAT-fs (loop0): Directory bread(block 72) failed [ 125.715301][ T4866] FAT-fs (loop0): Directory bread(block 73) failed [ 125.929415][ T4855] loop3: detected capacity change from 0 to 32768 [ 125.950346][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.951944][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.096893][ T4855] XFS (loop3): Mounting V5 Filesystem [ 126.989056][ T4855] XFS (loop3): Ending clean mount [ 127.155065][ T4297] XFS (loop3): Unmounting Filesystem [ 127.216367][ T4916] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 127.431330][ T4925] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.536314][ T47] Bluetooth: hci3: unexpected event for opcode 0x080f [ 127.843265][ T4906] loop0: detected capacity change from 0 to 32768 [ 130.178357][ T27] audit: type=1326 audit(130.130:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.167" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254a2a8 code=0x0 [ 130.352058][ T5002] loop1: detected capacity change from 0 to 512 [ 130.363631][ T5002] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.385966][ T5002] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.403185][ T5002] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.487679][ T5002] EXT4-fs (loop1): 1 truncate cleaned up [ 130.489363][ T5002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.940232][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.943355][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.369093][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 131.451865][ T5017] loop0: detected capacity change from 0 to 256 [ 131.527402][ T5017] FAT-fs (loop0): Directory bread(block 64) failed [ 131.529295][ T5017] FAT-fs (loop0): Directory bread(block 65) failed [ 131.530739][ T5017] FAT-fs (loop0): Directory bread(block 66) failed [ 131.532255][ T5017] FAT-fs (loop0): Directory bread(block 67) failed [ 131.537052][ T5017] FAT-fs (loop0): Directory bread(block 68) failed [ 131.538614][ T5017] FAT-fs (loop0): Directory bread(block 69) failed [ 131.548753][ T5017] FAT-fs (loop0): Directory bread(block 70) failed [ 131.549028][ T47] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 131.552457][ T47] Bluetooth: hci3: Injecting HCI hardware error event [ 131.555056][ T4300] Bluetooth: hci3: hardware error 0x00 [ 131.556926][ T5017] FAT-fs (loop0): Directory bread(block 71) failed [ 131.560816][ T5017] FAT-fs (loop0): Directory bread(block 72) failed [ 131.567758][ T5017] FAT-fs (loop0): Directory bread(block 73) failed [ 131.858776][ T5033] random: crng reseeded on system resumption [ 132.276073][ T5023] loop1: detected capacity change from 0 to 32768 [ 132.297615][ T5023] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.184 (5023) [ 132.377866][ T5023] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.387989][ T5023] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 132.397488][ T5023] BTRFS info (device loop1): using free space tree [ 132.535743][ T5023] BTRFS info (device loop1): enabling ssd optimizations [ 132.624632][ T4293] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.998547][ T5045] loop4: detected capacity change from 0 to 32768 [ 133.027951][ T5045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.195 (5045) [ 133.045898][ T5045] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.050411][ T5045] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 133.054497][ T5045] BTRFS info (device loop4): using free space tree [ 133.273893][ T5045] BTRFS info (device loop4): enabling ssd optimizations [ 133.330700][ T4302] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.533638][ T4296] Bluetooth: unknown link type 211 [ 133.715602][ T5139] loop2: detected capacity change from 0 to 128 [ 133.833506][ T4300] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 133.838429][ T5140] loop0: detected capacity change from 0 to 512 [ 133.838978][ T5140] EXT4-fs: Ignoring removed orlov option [ 133.847239][ T5140] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.871501][ T5145] loop2: detected capacity change from 0 to 64 [ 133.877741][ T5140] EXT4-fs (loop0): 1 truncate cleaned up [ 133.877775][ T5140] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.720075][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 134.757553][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 135.271420][ T5161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.274811][ T5161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.568964][ T4300] Bluetooth: hci1: command tx timeout [ 135.952932][ T5176] capability: warning: `syz.2.232' uses 32-bit capabilities (legacy support in use) [ 136.017939][ T5160] loop4: detected capacity change from 0 to 32768 [ 136.027372][ T5160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.225 (5160) [ 136.031185][ T5157] loop3: detected capacity change from 0 to 32768 [ 136.042800][ T5157] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.231 (5157) [ 136.052151][ T5160] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.055867][ T5157] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 136.057635][ T5160] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 136.058040][ T5157] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 136.063370][ T5157] BTRFS info (device loop3): enabling ssd optimizations [ 136.064990][ T5157] BTRFS info (device loop3): not using ssd optimizations [ 136.066444][ T5157] BTRFS info (device loop3): turning off barriers [ 136.067846][ T5157] BTRFS info (device loop3): using free space tree [ 136.069855][ T5160] BTRFS info (device loop4): using free space tree [ 136.144545][ T5160] BTRFS info (device loop4): enabling ssd optimizations [ 136.258121][ T4302] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.316043][ T4297] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 136.619084][ T4338] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.857121][ T5223] loop4: detected capacity change from 0 to 32768 [ 136.864759][ T5219] loop2: detected capacity change from 0 to 32768 [ 136.898888][ T4338] usb 1-1: Using ep0 maxpacket: 32 [ 137.075224][ T5223] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.234 (5223) [ 137.147566][ T5219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.236 (5219) [ 137.152348][ T4338] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.215849][ T4338] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 137.231937][ T4338] usb 1-1: config 127 has no interface number 0 [ 137.267602][ T4338] usb 1-1: config 127 interface 25 has no altsetting 0 [ 137.393228][ T4338] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 137.473144][ T4338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.475549][ T4338] usb 1-1: Product: syz [ 137.477116][ T4338] usb 1-1: Manufacturer: syz [ 137.478373][ T4338] usb 1-1: SerialNumber: syz [ 137.676259][ T5219] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.676272][ T5223] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 137.676325][ T5223] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 137.681791][ T5219] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 137.682904][ T5223] BTRFS info (device loop4): force zlib compression, level 3 [ 137.684809][ T5219] BTRFS info (device loop2): setting nodatacow, compression disabled [ 137.686332][ T5223] BTRFS info (device loop4): force clearing of disk cache [ 137.686353][ T5223] BTRFS info (device loop4): setting nodatasum [ 137.694461][ T5219] BTRFS info (device loop2): enabling auto defrag [ 137.696079][ T5219] BTRFS info (device loop2): max_inline at 0 [ 137.699115][ T5219] BTRFS info (device loop2): using free space tree [ 137.745683][ T5223] BTRFS info (device loop4): allowing degraded mounts [ 137.747269][ T5223] BTRFS info (device loop4): enabling disk space caching [ 137.748720][ T5223] BTRFS info (device loop4): disk space caching is enabled [ 137.753778][ T47] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2 [ 137.812536][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.814451][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.867910][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 137.916327][ T4338] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 137.996180][ T5223] BTRFS info (device loop4): rebuilding free space tree [ 138.030747][ T5223] BTRFS info (device loop4): disabling free space tree [ 138.032298][ T5223] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.035278][ T5223] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.042231][ T4305] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.218128][ T4302] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 138.501442][ T5295] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 138.517231][ T5295] loop4: detected capacity change from 0 to 256 [ 138.520740][ T5295] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 138.534512][ T5295] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 138.537314][ T5295] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 138.539300][ T5295] UDF-fs: Scanning with blocksize 512 failed [ 138.546178][ T5295] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 138.555719][ T5295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.636093][ T4338] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 139.048372][ T5304] loop1: detected capacity change from 0 to 4096 [ 139.068520][ T5304] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 139.124627][ T5304] ntfs: volume version 3.1. [ 139.172314][ T4338] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.176130][ T4338] usb 1-1: device firmware changed [ 139.179601][ T4338] ueagle-atm 1-1:127.25: usbatm_usb_probe: bind failed: -19! [ 139.190166][ T4338] usb 1-1: USB disconnect, device number 2 [ 139.209783][ T5294] loop3: detected capacity change from 0 to 32768 [ 139.254462][ T5294] XFS (loop3): Mounting V5 Filesystem [ 139.374434][ T5294] XFS (loop3): Ending clean mount [ 139.476454][ T4297] XFS (loop3): Unmounting Filesystem [ 139.671388][ T5317] loop2: detected capacity change from 0 to 32768 [ 139.907564][ T5318] loop1: detected capacity change from 0 to 32768 [ 140.001139][ T5318] XFS (loop1): Mounting V5 Filesystem [ 140.117783][ T5318] XFS (loop1): Ending clean mount [ 140.194239][ T5342] netlink: 2 bytes leftover after parsing attributes in process `syz.3.265'. [ 140.254497][ T4293] XFS (loop1): Unmounting Filesystem [ 140.299133][ T5344] loop2: detected capacity change from 0 to 512 [ 140.343037][ T5344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.400006][ T5344] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.261: bg 0: block 18: invalid block bitmap [ 140.430119][ T5344] Quota error (device loop2): write_blk: dquota write failed [ 140.431992][ T5344] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 140.434244][ T5344] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.261: Failed to acquire dquot type 1 [ 140.437844][ T5340] loop0: detected capacity change from 0 to 32768 [ 140.452982][ T5340] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.264 (5340) [ 140.462753][ T5340] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 140.464986][ T5340] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 140.466800][ T5340] BTRFS info (device loop0): enabling ssd optimizations [ 140.468149][ T5340] BTRFS info (device loop0): not using ssd optimizations [ 140.478911][ T5340] BTRFS info (device loop0): turning off barriers [ 140.480407][ T5340] BTRFS info (device loop0): using free space tree [ 140.544905][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 140.650065][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 140.651999][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 140.720802][ T5379] netlink: 56 bytes leftover after parsing attributes in process `syz.3.275'. [ 140.947159][ T5387] loop2: detected capacity change from 0 to 512 [ 140.953820][ T5387] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.974940][ T5387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.719496][ T5387] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.276: corrupted in-inode xattr [ 141.727270][ T5387] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.276: couldn't read orphan inode 15 (err -117) [ 141.747464][ T5387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.767139][ T4299] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 141.789106][ T47] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 141.791051][ T47] Bluetooth: hci1: Injecting HCI hardware error event [ 141.793510][ T47] Bluetooth: hci1: hardware error 0x00 [ 141.876726][ T5387] netlink: 44 bytes leftover after parsing attributes in process `syz.2.276'. [ 141.878721][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 142.045007][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.284'. [ 142.150620][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 142.678220][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 143.455489][ T5425] loop4: detected capacity change from 0 to 4096 [ 143.953676][ T5442] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.198999][ T47] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 144.301927][ T5459] loop4: detected capacity change from 0 to 512 [ 144.303770][ T5459] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.309420][ T5459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.858976][ T5459] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.302: corrupted in-inode xattr [ 145.142487][ T5459] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.302: couldn't read orphan inode 15 (err -117) [ 145.152624][ T5459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.271664][ T5459] netlink: 44 bytes leftover after parsing attributes in process `syz.4.302'. [ 145.273636][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 145.415205][ T5456] loop0: detected capacity change from 0 to 32768 [ 145.429649][ T5456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.303 (5456) [ 145.448739][ T5456] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.462466][ T5456] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 145.464330][ T5456] BTRFS info (device loop0): using free space tree [ 145.540737][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 145.999416][ T5456] BTRFS info (device loop0): enabling ssd optimizations [ 146.017052][ T5496] loop1: detected capacity change from 0 to 1024 [ 146.052900][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 146.182068][ T4299] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.337905][ T5287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (5287) [ 146.524641][ T5461] loop3: detected capacity change from 0 to 40427 [ 146.545787][ T5461] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 146.558191][ T5461] F2FS-fs (loop3): invalid crc value [ 146.677207][ T5461] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.943014][ T5461] F2FS-fs (loop3): Start checkpoint disabled! [ 147.634786][ T5524] loop4: detected capacity change from 0 to 512 [ 147.636535][ T5524] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.680430][ T5524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.724666][ T5524] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.322: corrupted in-inode xattr [ 147.727681][ T5524] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.322: couldn't read orphan inode 15 (err -117) [ 147.729164][ T5507] loop0: detected capacity change from 0 to 32768 [ 147.732297][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.814626][ T5524] netlink: 44 bytes leftover after parsing attributes in process `syz.4.322'. [ 147.816552][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 147.986394][ T5507] XFS (loop0): Mounting V5 Filesystem [ 148.075348][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 148.566121][ T5507] XFS (loop0): Ending clean mount [ 148.638694][ T5544] loop3: detected capacity change from 0 to 1024 [ 148.671395][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 148.707036][ T5544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.746506][ T4299] XFS (loop0): Unmounting Filesystem [ 148.856525][ T5504] loop2: detected capacity change from 0 to 65536 [ 148.881393][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 148.988048][ T5504] XFS (loop2): Mounting V5 Filesystem [ 149.229026][ T27] audit: type=1326 audit(149.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5547 comm="syz.4.326" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f34a2a8 code=0x0 [ 149.318205][ T5504] XFS (loop2): Ending clean mount [ 149.433944][ T4305] XFS (loop2): Unmounting Filesystem [ 149.656404][ T5527] loop1: detected capacity change from 0 to 32768 [ 149.685423][ T5527] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 149.698182][ T5287] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 150.002555][ T5573] netlink: 'syz.4.333': attribute type 2 has an invalid length. [ 150.051771][ T5561] loop3: detected capacity change from 0 to 40427 [ 150.054864][ T5575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.334'. [ 150.064616][ T5561] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 150.085401][ T5561] F2FS-fs (loop3): invalid crc value [ 150.091694][ T5578] loop4: detected capacity change from 0 to 256 [ 150.096981][ T5561] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.126361][ T5561] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.187361][ T5578] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 150.267720][ T4297] syz-executor: attempt to access beyond end of device [ 150.267720][ T4297] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.509440][ T5567] loop0: detected capacity change from 0 to 32768 [ 150.511712][ T5567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.327 (5567) [ 150.617211][ T5567] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.620328][ T5567] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 150.622236][ T5567] BTRFS info (device loop0): using free space tree [ 151.410591][ T5287] udevd[5287]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 151.456231][ T5600] loop3: detected capacity change from 0 to 512 [ 151.457887][ T5600] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.482473][ T5600] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.501975][ T5600] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.337: corrupted in-inode xattr [ 151.505961][ T5582] loop1: detected capacity change from 0 to 32768 [ 151.514338][ T5582] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.336 (5582) [ 151.523897][ T5600] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.337: couldn't read orphan inode 15 (err -117) [ 151.544394][ T5600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.713072][ T4412] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.737122][ T5600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.337'. [ 151.739179][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 151.857457][ T5624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.343'. [ 151.890338][ T5567] BTRFS info (device loop0): enabling ssd optimizations [ 151.991921][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 152.460200][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 152.468603][ T4299] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.647126][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 152.673656][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 152.941570][ T27] audit: type=1326 audit(152.890:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.2.342" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254a2a8 code=0x0 [ 154.211147][ T5671] loop2: detected capacity change from 0 to 512 [ 154.216164][ T5671] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.221430][ T5671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.259042][ T5671] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.359: corrupted in-inode xattr [ 154.262094][ T5671] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.359: couldn't read orphan inode 15 (err -117) [ 154.264919][ T5671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.300804][ T5288] udevd[5288]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 154.343286][ T5657] loop0: detected capacity change from 0 to 32768 [ 154.375225][ T5671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.359'. [ 154.377204][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 154.532802][ T5657] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 154.634901][ T5684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 155.283302][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 155.326618][ T4299] ocfs2: Unmounting device (7,0) on (node local) [ 155.507677][ T5697] loop2: detected capacity change from 0 to 7 [ 155.524615][ T5697] Dev loop2: unable to read RDB block 7 [ 155.527287][ T5697] loop2: unable to read partition table [ 155.528658][ T5697] loop2: partition table beyond EOD, truncated [ 155.539753][ T5697] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.544962][ T5667] loop3: detected capacity change from 0 to 32768 [ 155.558947][ T5667] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.358 (5667) [ 155.656845][ T5667] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.659189][ T5667] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 155.661017][ T5667] BTRFS info (device loop3): using free space tree [ 156.542631][ T5287] udevd[5287]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 156.553301][ T5692] loop1: detected capacity change from 0 to 32768 [ 156.555539][ T5692] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.365 (5692) [ 156.602339][ T4287] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.649151][ T5667] BTRFS info (device loop3): enabling ssd optimizations [ 156.745741][ T4297] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.037964][ T27] audit: type=1326 audit(156.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5711 comm="syz.4.370" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f34a2a8 code=0x0 [ 157.168584][ T5695] loop2: detected capacity change from 0 to 32768 [ 157.176449][ T5736] netlink: 'syz.3.375': attribute type 1 has an invalid length. [ 157.178036][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 157.228422][ T5695] XFS (loop2): Mounting V5 Filesystem [ 157.309501][ T5695] XFS (loop2): Ending clean mount [ 157.432305][ T5751] loop1: detected capacity change from 0 to 512 [ 157.434371][ T5751] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.436204][ T5751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.442053][ T5751] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.377: corrupted in-inode xattr [ 157.442061][ T5748] loop3: detected capacity change from 0 to 4096 [ 157.446323][ T5748] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 157.458205][ T5751] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.377: couldn't read orphan inode 15 (err -117) [ 157.463627][ T5751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.488618][ T4305] XFS (loop2): Unmounting Filesystem [ 157.543740][ T5751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.377'. [ 157.545716][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 157.800789][ T5755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 158.405098][ T5757] loop0: detected capacity change from 0 to 512 [ 158.407126][ T5757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.408594][ T5757] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.424967][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 158.469385][ T5757] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 158.471296][ T5757] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 158.497894][ T5757] EXT4-fs (loop0): 1 truncate cleaned up [ 158.501231][ T5757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.596100][ T5757] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 4: comm syz.0.380: lblock 0 mapped to illegal pblock 4 (length 1) [ 158.638364][ T5757] EXT4-fs (loop0): Remounting filesystem read-only [ 158.725394][ T5757] EXT4-fs error (device loop0): __ext4_remount:6449: comm syz.0.380: Abort forced by user [ 158.738959][ T5767] syz.1.383 uses obsolete (PF_INET,SOCK_PACKET) [ 158.743969][ T5757] EXT4-fs (loop0): Remounting filesystem read-only [ 158.800498][ T5769] tipc: Started in network mode [ 158.801896][ T5769] tipc: Node identity f0, cluster identity 4711 [ 158.803207][ T5769] tipc: Node number set to 240 [ 158.822506][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 159.908017][ T5765] loop3: detected capacity change from 0 to 32768 [ 159.951227][ T5765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.382 (5765) [ 159.972990][ T5765] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.975349][ T5765] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 159.977122][ T5765] BTRFS info (device loop3): using free space tree [ 160.043218][ T27] audit: type=1326 audit(160.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.4.389" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f34a2a8 code=0x0 [ 160.201045][ T5765] BTRFS info (device loop3): enabling ssd optimizations [ 160.375821][ T4681] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 160.426867][ T27] audit: type=1326 audit(160.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.0.394" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x0 [ 160.443983][ T4297] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.445976][ T5780] loop1: detected capacity change from 0 to 32768 [ 160.481460][ T5780] ERROR: (device loop1): diAllocBit: iag inconsistent [ 160.481460][ T5780] [ 160.489351][ T5780] ERROR: (device loop1): remounting filesystem as read-only [ 160.490855][ T5780] ialloc: diAlloc returned -5! [ 160.497959][ T5780] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 160.497959][ T5780] [ 160.761731][ T5815] loop3: detected capacity change from 0 to 512 [ 160.777157][ T5815] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.779465][ T5815] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.788665][ T5815] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.391: corrupted in-inode xattr [ 160.791985][ T5815] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.391: couldn't read orphan inode 15 (err -117) [ 160.794999][ T5815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.869690][ T5815] netlink: 44 bytes leftover after parsing attributes in process `syz.3.391'. [ 160.871566][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 161.025742][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 161.027580][ T5821] Zero length message leads to an empty skb [ 161.134438][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 161.718466][ T5829] loop1: detected capacity change from 0 to 256 [ 161.773347][ T5829] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 161.776770][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 161.928200][ T5832] exFAT-fs (loop1): hint_cluster is invalid (17) [ 161.974668][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 161.976144][ T5829] exFAT-fs (loop1): Filesystem has been set read-only [ 161.977780][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 8, err : -5) [ 162.006198][ T5834] loop3: detected capacity change from 0 to 22 [ 162.007985][ T5834] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 162.015950][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.017304][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 8, err : -5) [ 162.039611][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.040882][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 9, err : -5) [ 162.041156][ T5834] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 162.049255][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.050498][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 10, err : -5) [ 162.052506][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.053704][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 11, err : -5) [ 162.055606][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.056799][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 12, err : -5) [ 162.068982][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.079004][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 13, err : -5) [ 162.081199][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.082513][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 14, err : -5) [ 162.084541][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.085719][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 15, err : -5) [ 162.129658][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.130995][ T5829] exFAT-fs (loop1): error, failed to bmap (inode : 0000000075a5067c iblock : 8, err : -5) [ 162.133029][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.139761][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.141092][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.142336][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.143546][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.144761][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.146014][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.147305][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.148596][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.169039][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.170386][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.171578][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.172789][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.173933][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.175105][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.224236][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.225695][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.226956][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.228135][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.254318][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.255693][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.257032][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.258364][ T5829] exFAT-fs (loop1): error, broken FAT chain. [ 162.405629][ T5825] loop4: detected capacity change from 0 to 32768 [ 162.433507][ T5825] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.393 (5825) [ 162.448985][ T5825] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.451187][ T5825] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 162.452985][ T5825] BTRFS info (device loop4): using free space tree [ 163.203369][ T5838] loop0: detected capacity change from 0 to 4096 [ 163.360983][ T27] audit: type=1326 audit(163.320:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.2.396" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254a2a8 code=0x0 [ 163.473385][ T5825] BTRFS info (device loop4): enabling ssd optimizations [ 163.602752][ T5870] loop0: detected capacity change from 0 to 2048 [ 163.662760][ T5871] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.702962][ T4302] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.786374][ T5871] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 163.789527][ T5871] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 163.881997][ T5871] Remounting filesystem read-only [ 163.931992][ T4299] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 163.934035][ T4299] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 163.935600][ T4299] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 163.937198][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.968948][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.972036][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.974088][ T4299] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 163.975650][ T4299] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 163.977264][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.992437][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.994411][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.996542][ T4299] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 163.997992][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 164.018855][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 164.020808][ T4299] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 164.022500][ T4299] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 164.035150][ T4299] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 164.036721][ T4299] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 164.038256][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 164.054976][ T5849] loop1: detected capacity change from 0 to 32768 [ 164.068826][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 164.070934][ T4299] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 164.098484][ T5849] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 164.100686][ T5849] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 164.148279][ T5849] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 164.167417][ T5120] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 164.169350][ T5120] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 164.323150][ T5120] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 153ms [ 164.329075][ T5120] gfs2: fsid=syz:syz.0: jid=0: Done [ 164.331511][ T5849] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 164.407598][ T5879] loop0: detected capacity change from 0 to 512 [ 164.410758][ T5879] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.412780][ T5879] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.428486][ T5879] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.408: corrupted in-inode xattr [ 164.437128][ T5879] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.408: couldn't read orphan inode 15 (err -117) [ 164.447587][ T5879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.519457][ T5879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.408'. [ 164.521550][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 164.787093][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 165.462679][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 165.896598][ T27] audit: type=1326 audit(165.850:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.0.411" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x0 [ 166.570533][ T5899] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 166.657889][ T5912] loop1: detected capacity change from 0 to 256 [ 167.591246][ T5901] loop4: detected capacity change from 0 to 32768 [ 167.628596][ T5901] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.413 (5901) [ 167.746195][ T5927] loop2: detected capacity change from 0 to 512 [ 167.748125][ T5927] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.764186][ T5923] loop0: detected capacity change from 0 to 4096 [ 167.775121][ T5927] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.789728][ T5901] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.790416][ T4300] Bluetooth: hci0: command 0x0c20 tx timeout [ 167.794601][ T5923] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 167.795226][ T5901] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 167.805527][ T5901] BTRFS info (device loop4): using free space tree [ 167.806431][ T5923] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 167.810304][ T5923] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 167.816281][ T5927] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.421: corrupted in-inode xattr [ 167.816500][ T5923] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 167.820932][ T5923] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 167.825033][ T5923] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 167.826867][ T5923] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 167.830430][ T5927] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.421: couldn't read orphan inode 15 (err -117) [ 167.835203][ T5923] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 167.847246][ T5927] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.849011][ T5923] ntfs: volume version 3.1. [ 167.886293][ T5927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.421'. [ 167.888279][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 168.146461][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 168.728112][ T5901] BTRFS info (device loop4): enabling ssd optimizations [ 168.741640][ T5953] 9pnet_fd: Insufficient options for proto=fd [ 168.824438][ T4302] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.842568][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 169.299681][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 169.299757][ T27] audit: type=1326 audit(169.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.2.426" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254a2a8 code=0x0 [ 170.437698][ T27] audit: type=1326 audit(170.390:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5938 comm="syz.3.423" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8234a2a8 code=0x0 [ 170.470284][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 171.664844][ T5993] loop1: detected capacity change from 0 to 512 [ 171.666850][ T5993] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.674516][ T5993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.693510][ T5993] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.436: corrupted in-inode xattr [ 171.707338][ T5993] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.436: couldn't read orphan inode 15 (err -117) [ 171.729668][ T5993] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.818696][ T5993] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 171.820968][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 171.865415][ T6004] loop4: detected capacity change from 0 to 256 [ 172.005285][ T6007] loop2: detected capacity change from 0 to 256 [ 172.007106][ T6007] exfat: Deprecated parameter 'utf8' [ 172.008324][ T6007] exfat: Deprecated parameter 'namecase' [ 172.026669][ T6007] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 172.095528][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 173.209065][ T27] audit: type=1326 audit(172.620:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.4.440" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f34a2a8 code=0x0 [ 173.298234][ T4293] EXT4-fs (loop1): unmounting filesystem. [ 174.682198][ T6044] loop3: detected capacity change from 0 to 512 [ 174.757157][ T6050] loop2: detected capacity change from 0 to 256 [ 174.757306][ T6032] loop0: detected capacity change from 0 to 40427 [ 174.760897][ T6044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.764810][ T6050] exfat: Deprecated parameter 'namecase' [ 174.765676][ T6044] EXT4-fs (loop3): unmounting filesystem. [ 174.791734][ T6050] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 174.794516][ T6032] F2FS-fs (loop0): invalid crc value [ 174.805707][ T6032] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.823656][ T6044] netlink: 44 bytes leftover after parsing attributes in process `syz.3.451'. [ 174.825530][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 174.869183][ T6032] F2FS-fs (loop0): recover fsync data on readonly fs [ 174.876908][ T6032] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 174.886984][ T6029] loop4: detected capacity change from 0 to 40427 [ 174.894054][ T6029] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 174.897912][ T6029] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.907106][ T6050] exFAT-fs (loop2): hint_cluster is invalid (1) [ 174.954887][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 174.978255][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 0, err : -5) [ 174.983659][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 174.990769][ T6029] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.997916][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.008987][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 0, err : -5) [ 175.012193][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.015018][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 1, err : -5) [ 175.024703][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.028527][ T6029] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 175.030237][ T6029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 175.032850][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 2, err : -5) [ 175.035024][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.047335][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 3, err : -5) [ 175.049798][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.066681][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 4, err : -5) [ 175.068731][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.080811][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 5, err : -5) [ 175.086397][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.094705][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 6, err : -5) [ 175.111471][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.125736][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 7, err : -5) [ 175.128151][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.138919][ T6050] exFAT-fs (loop2): error, failed to bmap (inode : 00000000534de300 iblock : 0, err : -5) [ 175.141322][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.143707][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.145795][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.154101][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.156070][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.164244][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.168293][ T6050] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 175.186095][ T4302] syz-executor: attempt to access beyond end of device [ 175.186095][ T4302] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 175.729659][ T27] audit: type=1326 audit(175.590:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.0.453" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x0 [ 177.425757][ T6095] loop0: detected capacity change from 0 to 1024 [ 177.479759][ T27] audit: type=1326 audit(177.440:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.1.456" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba74a2a8 code=0x0 [ 178.337130][ T27] audit: type=1326 audit(178.290:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.0.469" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x0 [ 180.465176][ T6162] loop1: detected capacity change from 0 to 512 [ 180.535765][ T6129] loop3: detected capacity change from 0 to 32768 [ 180.547011][ T6129] XFS: noikeep mount option is deprecated. [ 180.548197][ T6129] XFS: ikeep mount option is deprecated. [ 180.564786][ T6162] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 180.568278][ T6162] EXT4-fs (loop1): unmounting filesystem. [ 180.714859][ T27] audit: type=1326 audit(180.670:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.4.481" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f34a2a8 code=0x0 [ 181.329076][ T6129] XFS (loop3): Mounting V5 Filesystem [ 181.394920][ T6162] netlink: 44 bytes leftover after parsing attributes in process `syz.1.482'. [ 181.396896][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 181.552750][ T6129] XFS (loop3): Ending clean mount [ 181.557568][ T6129] XFS (loop3): Quotacheck needed: Please wait. [ 181.653020][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 181.826436][ T6129] XFS (loop3): Quotacheck: Done. [ 182.134201][ T6201] loop4: detected capacity change from 0 to 512 [ 182.151147][ T6129] syz.3.472 (6129): drop_caches: 2 [ 182.264139][ T6201] EXT4-fs (loop4): orphan cleanup on readonly fs [ 182.283585][ T6201] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 182.286948][ T6201] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.490: invalid indirect mapped block 2683928664 (level 1) [ 182.346803][ T6201] EXT4-fs (loop4): Remounting filesystem read-only [ 182.356617][ T6201] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 182.363232][ T6201] EXT4-fs (loop4): Remounting filesystem read-only [ 182.369335][ T6201] EXT4-fs (loop4): 1 truncate cleaned up [ 182.370536][ T6201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.464143][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 182.620289][ T27] audit: type=1326 audit(182.570:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.492" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254a2a8 code=0x0 [ 182.801644][ T4297] XFS (loop3): Unmounting Filesystem [ 183.606323][ T6213] loop4: detected capacity change from 0 to 32768 [ 183.622966][ T6213] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.494 (6213) [ 183.628631][ T6225] loop2: detected capacity change from 0 to 1024 [ 183.634639][ T6213] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.636960][ T6213] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 183.638673][ T6213] BTRFS info (device loop4): setting nodatacow, compression disabled [ 183.641395][ T6225] EXT4-fs: Invalid want_extra_isize 127 [ 183.645563][ T6227] loop1: detected capacity change from 0 to 512 [ 183.659031][ T6213] BTRFS info (device loop4): force zlib compression, level 3 [ 183.660540][ T6213] BTRFS info (device loop4): doing ref verification [ 183.661875][ T6213] BTRFS info (device loop4): force clearing of disk cache [ 183.663354][ T6213] BTRFS info (device loop4): turning off barriers [ 183.664726][ T6213] BTRFS info (device loop4): enabling ssd optimizations [ 183.666214][ T6213] BTRFS info (device loop4): using spread ssd allocation scheme [ 183.667728][ T6213] BTRFS info (device loop4): not using ssd optimizations [ 183.688856][ T6213] BTRFS info (device loop4): not using spread ssd allocation scheme [ 183.690482][ T6213] BTRFS info (device loop4): using free space tree [ 183.856622][ T6227] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.865663][ T6227] EXT4-fs (loop1): unmounting filesystem. [ 184.033670][ T27] audit: type=1326 audit(183.980:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.3.495" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8234a2a8 code=0x0 [ 184.646646][ T6213] BTRFS info (device loop4): rebuilding free space tree [ 184.742997][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.501'. [ 184.744926][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 184.999147][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 185.171157][ T4302] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.343866][ T6267] loop3: detected capacity change from 0 to 2048 [ 185.379359][ T6267] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 185.529917][ T27] audit: type=1326 audit(185.490:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.506" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x0 [ 185.561886][ T6267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.197253][ T27] audit: type=1326 audit(186.150:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.4.513" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f34a2a8 code=0x0 [ 186.943570][ C0] Unknown status report in ack skb [ 186.974682][ T6309] loop3: detected capacity change from 0 to 512 [ 187.065669][ T6309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.081800][ T6309] EXT4-fs (loop3): unmounting filesystem. [ 187.111990][ T27] audit: type=1326 audit(187.070:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x7ffc0000 [ 187.117273][ T27] audit: type=1326 audit(187.070:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x7ffc0000 [ 187.127090][ T27] audit: type=1326 audit(187.080:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8a34a2a8 code=0x7ffc0000 [ 187.138988][ T27] audit: type=1326 audit(187.080:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x7ffc0000 [ 187.143763][ T27] audit: type=1326 audit(187.080:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a34a2a8 code=0x7ffc0000 [ 187.148304][ T27] audit: type=1326 audit(187.080:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8a34a2a8 code=0x7ffc0000 [ 187.172111][ T6309] netlink: 44 bytes leftover after parsing attributes in process `syz.3.518'. [ 187.174014][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 187.519598][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 187.524047][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.529540][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.463983][ T6365] loop3: detected capacity change from 0 to 128 [ 188.493926][ T6367] loop1: detected capacity change from 0 to 512 [ 188.503400][ T6365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.506995][ T6367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.510708][ T6367] EXT4-fs (loop1): unmounting filesystem. [ 188.537037][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.1.541'. [ 188.539059][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 188.592563][ T6365] syz.3.540 (pid 6365) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 188.686580][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 188.795374][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 189.941060][ T6392] device syzkaller0 entered promiscuous mode [ 190.701583][ T6408] loop3: detected capacity change from 0 to 512 [ 190.797383][ T6408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.800707][ T6408] EXT4-fs (loop3): unmounting filesystem. [ 191.459360][ T6408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.556'. [ 191.461594][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 191.537954][ T6421] loop4: detected capacity change from 0 to 512 [ 191.558012][ T6421] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.558: bad orphan inode 15 [ 191.567428][ T6421] EXT4-fs (loop4): Remounting filesystem read-only [ 191.568851][ T6421] ext4_test_bit(bit=14, block=5) = 0 [ 191.569988][ T6421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.809269][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 193.312433][ T4300] ------------[ cut here ]------------ [ 193.313902][ T4300] WARNING: CPU: 0 PID: 4300 at net/bluetooth/hci_conn.c:616 hci_conn_timeout+0xf4/0x1e8 [ 193.316000][ T4300] Modules linked in: [ 193.316906][ T4300] CPU: 0 PID: 4300 Comm: kworker/u5:3 Not tainted 6.1.117-syzkaller #0 [ 193.318656][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.320839][ T4300] Workqueue: hci4 hci_conn_timeout [ 193.321926][ T4300] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 193.323700][ T4300] pc : hci_conn_timeout+0xf4/0x1e8 [ 193.324757][ T4300] lr : hci_conn_timeout+0xf4/0x1e8 [ 193.325928][ T4300] sp : ffff8000210c7b30 [ 193.326794][ T4300] x29: ffff8000210c7b30 x28: ffff0000eccf1000 x27: ffff0000d812e330 [ 193.328463][ T4300] x26: ffff0000c31eb018 x25: 1fffe0001863d603 x24: dfff800000000000 [ 193.330211][ T4300] x23: ffff0000c4b4d000 x22: dfff800000000000 x21: 00000000ffffffff [ 193.332092][ T4300] x20: ffff0000d812e330 x19: ffff0000d812e000 x18: ffff8000210c7880 [ 193.333717][ T4300] x17: ffff800018aab000 x16: ffff8000084f280c x15: ffff80001858bf80 [ 193.335372][ T4300] x14: 00000000e992a2b6 x13: dfff800000000000 x12: 0000000000000001 [ 193.336964][ T4300] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff8000114803e8 [ 193.338743][ T4300] x8 : ffff0000dda63780 x7 : 0000000000000000 x6 : 0000000000000000 [ 193.340632][ T4300] x5 : ffff800018acc038 x4 : 0000000000000008 x3 : ffff80001148032c [ 193.342439][ T4300] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 193.344411][ T4300] Call trace: [ 193.345306][ T4300] hci_conn_timeout+0xf4/0x1e8 [ 193.346302][ T4300] process_one_work+0x7ac/0x1404 [ 193.347300][ T4300] worker_thread+0x8e4/0xfec [ 193.348300][ T4300] kthread+0x250/0x2d8 [ 193.349200][ T4300] ret_from_fork+0x10/0x20 [ 193.350096][ T4300] irq event stamp: 2928 [ 193.351034][ T4300] hardirqs last enabled at (2927): [] _raw_spin_unlock_irq+0x3c/0x90 [ 193.353122][ T4300] hardirqs last disabled at (2928): [] el1_dbg+0x24/0x80 [ 193.354917][ T4300] softirqs last enabled at (2896): [] local_bh_enable+0x10/0x34 [ 193.356910][ T4300] softirqs last disabled at (2894): [] local_bh_disable+0x10/0x34 [ 193.358972][ T4300] ---[ end trace 0000000000000000 ]--- [ 193.400484][ T6422] loop0: detected capacity change from 0 to 24 [ 193.410129][ T6422] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 193.460533][ T6422] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 193.698254][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 195.398970][ T4300] Bluetooth: hci0: command 0x0c20 tx timeout