last executing test programs: 9.86394394s ago: executing program 4 (id=1404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private0}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 9.850351742s ago: executing program 4 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 9.817156095s ago: executing program 0 (id=1406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7}, 0x8}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) 9.753142391s ago: executing program 4 (id=1409): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010050, &(0x7f0000000680)={[{@lazytime}, {@usrjquota}, {@noblock_validity}, {@norecovery}, {}, {@nomblk_io_submit}]}, 0x3, 0x546, &(0x7f0000000b80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 9.543273599s ago: executing program 0 (id=1414): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) r4 = socket(0x23, 0x2, 0x0) socketpair(0x15, 0x0, 0x3d5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r0, 0x406, r4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r8, 0x3cf505ed59406f4b, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0xa, 'syz0\x00'}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r9, @ANYBLOB="c2"], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r9, 0x22a0b}}, 0x74}}, 0x0) pwritev(r5, &(0x7f0000000700)=[{&(0x7f0000000340)="09d352e36dae9dce18ecf0cd10ee49c9cd4a29275141771328d8996fb654a9c885fcfaa0cef4e292c69e241aa4ff38b2777fefe352fb458019f798d274a2b05db9b754fd6139387f66bcef753d8a606b44c51b79693cdf7dde4655cfe9fff36a7fdc28776cb84b321891aad08ce1375f19c45d58b8aed7436fc8ba4f2da639c377eac8496dd927d617d254d3f3475d159c7d75c44d5d520671", 0x99}, {&(0x7f0000000500)="409c18ae390c8585f92ebb3fefbab57ab516b329d768e750449a5c367cbdc80de4a159525e264645229eda4ccaeadd06f4742d0045606aadba1a0e1343a80e1ef74add04df3a5a56b7c4a3c07de5791ae6ea43818b872e007cca3284034414e13c653394063c3c7fe1a9e99f7b11e499493acc66d6ec399dc85db3a634abb9eccd", 0x81}, {&(0x7f00000005c0)="8281f1b3465a23097ff560340709cadb4ee8b8d7c7d8a86c5259a1aa6b27e5fce010", 0x22}, {&(0x7f0000000600)="7ef8e9fde5256f1b75df504db0bcb0ace6edfe88c0f3eae42e40119061527cdaf84cca381efd13602f54ab0f7d5169038f624126552a2bd97b3529e7ff09a79a9bb60ac1c1d292bc1ef54e10fa9c4c59022433d412fa7db9a3641e8f7fd27864c7814e7c785e6fa9a5410d46cca16db67cce70310712ce5a65127eead170226f2e156eb9f8ae90637c17cb19f63458a8153ae2b2cd6af3a2a5aeaf500a5ebf33e440160de7178602fd79a887f03479a3944fd7e94d0daf3076f6b08d62a3654e9acc693c2a1afb64eb762755271c7d65d52bd2eb146afdc7553b39485157b857", 0xe0}], 0x4, 0x1, 0x8) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x5, @vifc_lcl_ifindex=r9, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$PPPOEIOCDFWD(r4, 0x89ee, 0x1000000000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r9, 0x0, 0x0, 0x1f, 0x4, {{0x1c, 0x4, 0x3, 0x8, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @remote, @private=0xa010102, {[@lsrr={0x83, 0x23, 0x52, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback]}, @cipso={0x86, 0x16, 0x3, [{0x2, 0x2}, {0x2, 0x8, "364e1d0137b8"}, {0x1, 0x6, "c120df41"}]}, @generic={0x86, 0xc, "2e0b006de17b6b7eb9c6"}, @timestamp_prespec={0x44, 0x14, 0x40, 0x3, 0x3, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xfffffffc}]}]}}}}}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) 8.661341587s ago: executing program 4 (id=1416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) chdir(&(0x7f0000000040)='./file0\x00') 8.451793945s ago: executing program 4 (id=1421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1}, {r1}], 0x2, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7.288889358s ago: executing program 0 (id=1428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private0}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 7.15257607s ago: executing program 0 (id=1431): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) chdir(&(0x7f0000000040)='./file0\x00') 6.870309884s ago: executing program 4 (id=1434): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x1c) 6.089854853s ago: executing program 0 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x20, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) 5.951552406s ago: executing program 1 (id=1440): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180)="98", &(0x7f0000000040)}, 0x20) 5.793467619s ago: executing program 1 (id=1442): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x9, 0x0}) 5.692077698s ago: executing program 1 (id=1443): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}}]}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x80}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.812064076s ago: executing program 0 (id=1445): unshare(0x8040480) fchmod(0xffffffffffffffff, 0x0) 4.811752286s ago: executing program 1 (id=1446): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) chdir(&(0x7f0000000040)='./file0\x00') 4.578337397s ago: executing program 1 (id=1449): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x2, 0x2100, 0x7f}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r1, &(0x7f0000000440), &(0x7f0000000480)=""/165}, 0x20) 3.593480314s ago: executing program 3 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x1, 0x0, 0x0, {0x34}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 3.557033917s ago: executing program 3 (id=1452): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180)="98", &(0x7f0000000040)}, 0x20) 3.460012765s ago: executing program 1 (id=1453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x9, 0x0}) 3.335158366s ago: executing program 3 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x48, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x34, 0xe, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x29, 0x2, "ee0f7365ddf5ac9665a75a1ee46fa05aaefd5ecb613ca220561b3a00fe70e0f324bc522458"}}]}]}, 0x48}}, 0x0) 3.232059135s ago: executing program 3 (id=1458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) chdir(&(0x7f0000000040)='./file0\x00') 2.182467868s ago: executing program 3 (id=1459): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) r4 = socket(0x23, 0x2, 0x0) socketpair(0x15, 0x0, 0x3d5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r0, 0x406, r4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r8, 0x3cf505ed59406f4b, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0xa, 'syz0\x00'}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000100000475000000000000", @ANYRES32=r9, @ANYBLOB="c2"], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r9, 0x22a0b}}, 0x74}}, 0x0) pwritev(r5, &(0x7f0000000700)=[{&(0x7f0000000340)="09d352e36dae9dce18ecf0cd10ee49c9cd4a29275141771328d8996fb654a9c885fcfaa0cef4e292c69e241aa4ff38b2777fefe352fb458019f798d274a2b05db9b754fd6139387f66bcef753d8a606b44c51b79693cdf7dde4655cfe9fff36a7fdc28776cb84b321891aad08ce1375f19c45d58b8aed7436fc8ba4f2da639c377eac8496dd927d617d254d3f3475d159c7d75c44d5d520671", 0x99}, {&(0x7f0000000500)="409c18ae390c8585f92ebb3fefbab57ab516b329d768e750449a5c367cbdc80de4a159525e264645229eda4ccaeadd06f4742d0045606aadba1a0e1343a80e1ef74add04df3a5a56b7c4a3c07de5791ae6ea43818b872e007cca3284034414e13c653394063c3c7fe1a9e99f7b11e499493acc66d6ec399dc85db3a634abb9eccd", 0x81}, {&(0x7f00000005c0)="8281f1b3465a23097ff560340709cadb4ee8b8d7c7d8a86c5259a1aa6b27e5fce010", 0x22}, {&(0x7f0000000600)="7ef8e9fde5256f1b75df504db0bcb0ace6edfe88c0f3eae42e40119061527cdaf84cca381efd13602f54ab0f7d5169038f624126552a2bd97b3529e7ff09a79a9bb60ac1c1d292bc1ef54e10fa9c4c59022433d412fa7db9a3641e8f7fd27864c7814e7c785e6fa9a5410d46cca16db67cce70310712ce5a65127eead170226f2e156eb9f8ae90637c17cb19f63458a8153ae2b2cd6af3a2a5aeaf500a5ebf33e440160de7178602fd79a887f03479a3944fd7e94d0daf3076f6b08d62a3654e9acc693c2a1afb64eb762755271c7d65d52bd2eb146afdc7553b39485157b857", 0xe0}], 0x4, 0x1, 0x8) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x5, @vifc_lcl_ifindex=r9, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$PPPOEIOCDFWD(r4, 0x89ee, 0x1000000000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r9, 0x0, 0x0, 0x1f, 0x4, {{0x1c, 0x4, 0x3, 0x8, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @remote, @private=0xa010102, {[@lsrr={0x83, 0x23, 0x52, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback]}, @cipso={0x86, 0x16, 0x3, [{0x2, 0x2}, {0x2, 0x8, "364e1d0137b8"}, {0x1, 0x6, "c120df41"}]}, @generic={0x86, 0xc, "2e0b006de17b6b7eb9c6"}, @timestamp_prespec={0x44, 0x14, 0x40, 0x3, 0x3, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xfffffffc}]}]}}}}}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) 862.763534ms ago: executing program 2 (id=1462): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180)="98", &(0x7f0000000040)}, 0x20) 818.671738ms ago: executing program 2 (id=1463): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x9, 0x0}) 763.999943ms ago: executing program 3 (id=1464): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) 709.671827ms ago: executing program 2 (id=1466): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}}]}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x80}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 601.858587ms ago: executing program 2 (id=1467): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) chdir(&(0x7f0000000040)='./file0\x00') 490.981437ms ago: executing program 2 (id=1468): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8, 0x1b0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa40000000000000704", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000d001500000076000000bf98000000000000560800000000002ef500000007000000b7000000000000009500070000000000af5e8ad16232b55ccafe7cb76cabbdec6bf147b52ea1580399baaac47fedba3fe566c35dcf370a4fbdc492109f159b62c49aa15e1de1f6c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0xfffffbfa, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000440)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 0s ago: executing program 2 (id=1469): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010050, &(0x7f0000000680)={[{@lazytime}, {@usrjquota}, {@noblock_validity}, {@norecovery}, {}, {@nomblk_io_submit}]}, 0x3, 0x546, &(0x7f0000000b80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) kernel console output (not intermixed with test programs): 3][ T4236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.845661][ T4236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.775402][ T9] bond0 (unregistering): Released all slaves [ 103.932647][ T4236] Bluetooth: hci0: command tx timeout [ 104.010117][ T5567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.022004][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 104.024522][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 104.140700][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.143701][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.192093][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.195044][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.197903][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.211242][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.215698][ T5567] device veth0_vlan entered promiscuous mode [ 104.253346][ T5567] device veth1_vlan entered promiscuous mode [ 104.299798][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.302792][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.305710][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.308546][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.326533][ T5567] device veth0_macvtap entered promiscuous mode [ 104.343100][ T5567] device veth1_macvtap entered promiscuous mode [ 104.427716][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.430844][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.433782][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.436667][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.439384][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.448167][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.450959][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.457313][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.459999][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.466468][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.471708][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.476781][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.485195][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.490002][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 104.494484][ T1955] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.497286][ T1955] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.500210][ T1955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.520511][ T1955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.537241][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.540075][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.544058][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.546891][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.549558][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.583138][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.585921][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.588802][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.610303][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.622344][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.629834][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.636506][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.645566][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.689388][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.693355][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.698200][ T5567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.700735][ T5567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.711202][ T5567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.716128][ T5567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.977538][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.983188][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.985873][ T5860] device bridge_slave_0 entered promiscuous mode [ 105.003806][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.005859][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.008623][ T5860] device bridge_slave_1 entered promiscuous mode [ 105.251305][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.275697][ T5908] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 105.277742][ T5908] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 105.281417][ T5913] capability: warning: `syz.0.593' uses 32-bit capabilities (legacy support in use) [ 105.283078][ T5908] vhci_hcd vhci_hcd.0: Device attached [ 105.603005][ T22] usb 3-1: SetAddress Request (2) to port 0 [ 105.605830][ T22] usb 3-1: new SuperSpeed USB device number 2 using vhci_hcd [ 106.027778][ T4241] Bluetooth: hci0: command tx timeout [ 106.039949][ T4973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.043950][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.050017][ T4973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.100532][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.206434][ T5860] team0: Port device team_slave_0 added [ 106.226505][ T5860] team0: Port device team_slave_1 added [ 106.231586][ T5909] vhci_hcd: connection reset by peer [ 106.244021][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 106.247564][ T5458] vhci_hcd: stop threads [ 106.249865][ T5458] vhci_hcd: release socket [ 106.263131][ T5459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.272872][ T5459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.278918][ T5458] vhci_hcd: disconnect device [ 106.279766][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.285239][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.329230][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.342864][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.359351][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.372678][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.379812][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.701724][ T5860] device hsr_slave_0 entered promiscuous mode [ 106.762112][ T5860] device hsr_slave_1 entered promiscuous mode [ 107.013322][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 107.536800][ T5860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.102540][ T4241] Bluetooth: hci0: command tx timeout [ 108.115082][ T5959] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 108.116877][ T5959] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.171299][ T5959] vhci_hcd vhci_hcd.0: Device attached [ 108.199445][ T5960] vhci_hcd: connection closed [ 108.199719][ T4858] vhci_hcd: stop threads [ 108.202259][ T4858] vhci_hcd: release socket [ 108.203722][ T4858] vhci_hcd: disconnect device [ 108.248386][ T5860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.451295][ T5860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.504586][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 108.633287][ T5860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.642883][ T5982] input: syz1 as /devices/virtual/input/input2 [ 109.870447][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.944640][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.974753][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.006101][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.096763][ T6011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 110.098706][ T6011] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.105379][ T6011] vhci_hcd vhci_hcd.0: Device attached [ 110.173776][ T4241] Bluetooth: hci0: command tx timeout [ 110.180302][ T6012] vhci_hcd: connection closed [ 110.181563][ T5741] vhci_hcd: stop threads [ 110.184700][ T5741] vhci_hcd: release socket [ 110.185999][ T5741] vhci_hcd: disconnect device [ 110.229749][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.231578][ T6015] loop3: detected capacity change from 0 to 512 [ 110.265394][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.267940][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.283230][ T6015] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 110.285023][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.285423][ T6015] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 110.294017][ T6015] EXT4-fs (loop3): 1 truncate cleaned up [ 110.295608][ T6015] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.303710][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.306487][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.309707][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.311698][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.342033][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.346277][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.349188][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.351714][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.353802][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.356783][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.359701][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.364139][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.367862][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.370862][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.371281][ T6019] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 110.408285][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.412235][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.417205][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.419971][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.444024][ T6015] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 110.453350][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.456341][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.461904][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.508838][ T4632] EXT4-fs (loop3): unmounting filesystem. [ 110.508951][ T6017] loop1: detected capacity change from 0 to 8192 [ 110.604330][ T6017] loop1: p1 < > p2 [ 110.605515][ T6017] loop1: partition table partially beyond EOD, truncated [ 110.609288][ T6017] loop1: p1 start 4177526784 is beyond EOD, truncated [ 110.615305][ T6017] loop1: p2 start 163840 is beyond EOD, truncated [ 110.660882][ T22] usb 3-1: device descriptor read/8, error -110 [ 110.962749][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.965068][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.998561][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.031536][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.036129][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.055486][ T6041] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 111.084125][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.087045][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.096038][ T22] usb usb3-port1: attempt power cycle [ 111.098726][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.101206][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.114689][ T5860] device veth0_vlan entered promiscuous mode [ 111.120911][ T5860] device veth1_vlan entered promiscuous mode [ 111.153541][ T6043] loop1: detected capacity change from 0 to 512 [ 111.187720][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.190442][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.193308][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.196025][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.209443][ T6043] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.275369][ T6023] loop3: detected capacity change from 0 to 32768 [ 111.321315][ T6023] XFS (loop3): Mounting V5 Filesystem [ 111.364090][ T5860] device veth0_macvtap entered promiscuous mode [ 111.368814][ T5860] device veth1_macvtap entered promiscuous mode [ 111.391529][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.395793][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.476617][ T6023] XFS (loop3): Ending clean mount [ 111.494476][ T6023] XFS (loop3): Quotacheck needed: Please wait. [ 111.509836][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.526327][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.541729][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.550376][ T6023] XFS (loop3): Quotacheck: Done. [ 111.551919][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.560741][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.567192][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.586801][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.616569][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.639920][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.659370][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.662120][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.676143][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.678877][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.681690][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.700822][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.710089][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 111.720928][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.733182][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.753186][ T22] usb usb3-port1: unable to enumerate USB device [ 111.792835][ T4632] XFS (loop3): Unmounting Filesystem [ 111.810023][ T6063] loop1: detected capacity change from 0 to 512 [ 111.921891][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.925069][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.928310][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.931342][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.934236][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.936954][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.939535][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.941093][ T6063] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 111.945294][ T6063] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 111.952402][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.955303][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.959475][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.961353][ T6063] EXT4-fs (loop1): 1 truncate cleaned up [ 111.962169][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.966730][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.969401][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.970049][ T6063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.300534][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.708641][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.735037][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.737983][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.747916][ T6063] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 112.808843][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 112.820123][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.830729][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.833169][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.835550][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.948460][ T6072] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 113.134713][ T4860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.137074][ T4860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.230970][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.379026][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.384746][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.390180][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.609330][ T6099] loop1: detected capacity change from 0 to 1024 [ 113.652417][ T6099] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 113.656836][ T6099] EXT4-fs (loop1): invalid journal inode [ 113.694509][ T6099] netlink: 172 bytes leftover after parsing attributes in process `syz.1.662'. [ 114.201254][ T6120] loop2: detected capacity change from 0 to 32768 [ 114.206412][ T6120] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.672 (6120) [ 114.219087][ T6120] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.221919][ T6120] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 114.224566][ T6120] BTRFS info (device loop2): using free space tree [ 114.318523][ T6133] loop3: detected capacity change from 0 to 1024 [ 114.337945][ T6133] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 114.386113][ T6133] EXT4-fs (loop3): invalid journal inode [ 114.519230][ T6133] netlink: 172 bytes leftover after parsing attributes in process `syz.3.676'. [ 114.528066][ T6125] loop1: detected capacity change from 0 to 32768 [ 114.643694][ T6125] XFS (loop1): Mounting V5 Filesystem [ 114.670365][ T6120] BTRFS info (device loop2): enabling ssd optimizations [ 114.744683][ T6125] XFS (loop1): Ending clean mount [ 114.757930][ T6125] XFS (loop1): Quotacheck needed: Please wait. [ 114.793920][ T6125] XFS (loop1): Quotacheck: Done. [ 115.363296][ T5567] XFS (loop1): Unmounting Filesystem [ 115.525148][ T5860] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.554974][ T9] device hsr_slave_0 left promiscuous mode [ 115.605299][ T9] device hsr_slave_1 left promiscuous mode [ 115.674240][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.681056][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.756845][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.759129][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.761825][ T9] device bridge_slave_1 left promiscuous mode [ 115.787277][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.949232][ T9] device bridge_slave_0 left promiscuous mode [ 115.951108][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.043999][ T6177] loop3: detected capacity change from 0 to 32768 [ 116.070849][ T6193] loop1: detected capacity change from 0 to 1024 [ 116.075304][ T6193] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 116.089854][ T6193] EXT4-fs (loop1): invalid journal inode [ 116.092080][ T6177] read_mapping_page failed! [ 116.093655][ T6177] bread failed! [ 116.094624][ T6177] jfs_create: dtInsert returned -EIO [ 116.096107][ T6177] ERROR: (device loop3): txAbort: [ 116.096107][ T6177] [ 116.108643][ T6177] ERROR: (device loop3): remounting filesystem as read-only [ 116.112679][ T9] device veth1_macvtap left promiscuous mode [ 116.114418][ T9] device veth0_macvtap left promiscuous mode [ 116.116125][ T9] device veth1_vlan left promiscuous mode [ 116.138091][ T6177] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 116.138091][ T6177] [ 116.154531][ T6177] ERROR: (device loop3): __get_metapage: using a discarded metapage [ 116.154531][ T6177] [ 116.198622][ T6193] netlink: 172 bytes leftover after parsing attributes in process `syz.1.692'. [ 116.717887][ T6217] loop1: detected capacity change from 0 to 32768 [ 116.720712][ T6217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.702 (6217) [ 116.732017][ T6217] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.735630][ T6217] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 116.738041][ T6217] BTRFS info (device loop1): using free space tree [ 116.942119][ T6217] BTRFS info (device loop1): enabling ssd optimizations [ 116.950734][ T6239] input: syz1 as /devices/virtual/input/input3 [ 117.779034][ T5567] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.119592][ T6263] loop1: detected capacity change from 0 to 1024 [ 118.147697][ T6263] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 118.157299][ T6263] EXT4-fs (loop1): invalid journal inode [ 118.250465][ T6263] netlink: 172 bytes leftover after parsing attributes in process `syz.1.707'. [ 118.545448][ T6273] loop1: detected capacity change from 0 to 32768 [ 118.562157][ T6273] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.718 (6273) [ 118.581576][ T6273] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.584478][ T6273] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 118.587005][ T6273] BTRFS info (device loop1): using free space tree [ 118.695063][ T6273] BTRFS info (device loop1): enabling ssd optimizations [ 119.560567][ T5567] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.928627][ T6312] loop1: detected capacity change from 0 to 512 [ 119.963371][ T6314] netlink: 172 bytes leftover after parsing attributes in process `syz.0.727'. [ 119.971024][ T6312] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.728: casefold flag without casefold feature [ 119.983026][ T6312] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.728: missing EA_INODE flag [ 119.995268][ T6312] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.728: error while reading EA inode 2 err=-117 [ 119.998962][ T6312] EXT4-fs (loop1): 1 orphan inode deleted [ 120.000663][ T6312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.058941][ T9] team0 (unregistering): Port device team_slave_1 removed [ 120.136508][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 120.278976][ T9] team0 (unregistering): Port device team_slave_0 removed [ 120.463298][ T6325] loop1: detected capacity change from 0 to 32768 [ 120.467775][ T6325] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.732 (6325) [ 120.483651][ T6325] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.486409][ T6325] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 120.488815][ T6325] BTRFS info (device loop1): using free space tree [ 120.622606][ T6325] BTRFS info (device loop1): enabling ssd optimizations [ 120.643409][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.475474][ T5567] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.527017][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.712606][ T6359] netlink: 172 bytes leftover after parsing attributes in process `syz.0.740'. [ 121.944093][ T4241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.949521][ T4241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.953782][ T4241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.956632][ T4241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.959124][ T4241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 121.961283][ T4241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.281379][ T6375] loop1: detected capacity change from 0 to 4096 [ 122.309157][ T6375] ntfs: volume version 3.1. [ 122.319836][ T6375] __ntfs_error: 43 callbacks suppressed [ 122.319853][ T6375] ntfs: (device loop1): map_mft_record_page(): Attempt to read mft record 0x660ec41d, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 122.327707][ T6375] ntfs: (device loop1): map_mft_record(): Failed with error code 2. [ 122.330019][ T6375] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x660ec41d as bad. Run chkdsk. [ 122.375763][ T5567] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 122.444533][ T6379] loop1: detected capacity change from 0 to 512 [ 122.461391][ T6379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 122.581084][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 122.668536][ T6386] loop1: detected capacity change from 0 to 512 [ 122.693314][ T6386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 122.732282][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 122.840123][ T6394] loop1: detected capacity change from 0 to 1024 [ 122.852094][ T6394] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 122.856235][ T6394] EXT4-fs (loop1): invalid journal inode [ 122.943131][ T6394] netlink: 172 bytes leftover after parsing attributes in process `syz.1.753'. [ 123.405179][ T6405] loop1: detected capacity change from 0 to 4096 [ 123.432934][ T6405] ntfs: volume version 3.1. [ 123.450470][ T6405] ntfs: (device loop1): map_mft_record_page(): Attempt to read mft record 0x660ec41d, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 123.459950][ T6405] ntfs: (device loop1): map_mft_record(): Failed with error code 2. [ 123.465349][ T6405] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x660ec41d as bad. Run chkdsk. [ 123.491227][ T5567] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 123.539604][ T6407] loop1: detected capacity change from 0 to 512 [ 123.566929][ T6407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 123.682054][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 123.766517][ T6413] loop1: detected capacity change from 0 to 512 [ 123.803580][ T6413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 123.831873][ T9] bond0 (unregistering): Released all slaves [ 123.849344][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 123.951599][ T6421] loop1: detected capacity change from 0 to 1024 [ 123.964283][ T6421] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 123.969838][ T6421] EXT4-fs (loop1): invalid journal inode [ 124.014130][ T4241] Bluetooth: hci4: command tx timeout [ 124.047049][ T6421] netlink: 172 bytes leftover after parsing attributes in process `syz.1.764'. [ 124.061917][ T6259] netlink: 'syz.2.712': attribute type 5 has an invalid length. [ 124.307714][ T6434] loop2: detected capacity change from 0 to 512 [ 124.444555][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 124.470919][ T6434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 124.704757][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.706826][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.709604][ T6370] device bridge_slave_0 entered promiscuous mode [ 124.714679][ T6451] netlink: 172 bytes leftover after parsing attributes in process `syz.4.775'. [ 124.726538][ T5860] EXT4-fs (loop2): unmounting filesystem. [ 124.742895][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.745336][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.748668][ T6370] device bridge_slave_1 entered promiscuous mode [ 124.803200][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.808194][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.985999][ T6370] team0: Port device team_slave_0 added [ 124.989477][ T6370] team0: Port device team_slave_1 added [ 125.076106][ T6460] loop2: detected capacity change from 0 to 4096 [ 125.086397][ T4241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.100825][ T4241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.106159][ T4241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.109217][ T4241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.111981][ T4241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 125.116305][ T4239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.121846][ T6460] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 125.152486][ T6460] ntfs3: loop2: Failed to load $LogFile. [ 125.172984][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.174991][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.233183][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.238226][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.240118][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.294415][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.298267][ T6474] loop1: detected capacity change from 0 to 512 [ 125.363524][ T6474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.494863][ T6370] device hsr_slave_0 entered promiscuous mode [ 125.592834][ T6370] device hsr_slave_1 entered promiscuous mode [ 125.636671][ T6370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.638825][ T6370] Cannot create hsr debugfs directory [ 125.680048][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 125.934606][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.936533][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.942186][ T6486] loop2: detected capacity change from 0 to 4096 [ 125.995044][ T6463] chnl_net:caif_netlink_parms(): no params data found [ 126.039545][ T6486] ntfs: volume version 3.1. [ 126.082673][ T6486] ntfs: (device loop2): map_mft_record_page(): Attempt to read mft record 0x660ec41d, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 126.093930][ T4239] Bluetooth: hci4: command tx timeout [ 126.096232][ T6486] ntfs: (device loop2): map_mft_record(): Failed with error code 2. [ 126.196585][ T6370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.352772][ T6492] loop2: detected capacity change from 0 to 4096 [ 126.373405][ T6492] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 126.380669][ T6492] ntfs3: loop2: Failed to load $LogFile. [ 126.382902][ T6488] loop1: detected capacity change from 0 to 32768 [ 126.405789][ T6370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.454960][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.461009][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.473177][ T6463] device bridge_slave_0 entered promiscuous mode [ 126.556052][ T6370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.582820][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.584855][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.587583][ T6463] device bridge_slave_1 entered promiscuous mode [ 126.718803][ T6370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.736368][ T6463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.886821][ T6463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.950678][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.966579][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.978378][ T6463] team0: Port device team_slave_0 added [ 127.008209][ T6463] team0: Port device team_slave_1 added [ 127.080863][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.083285][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.090140][ T6463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.124822][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.126738][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.161486][ T6463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.213178][ T4236] Bluetooth: hci5: command tx timeout [ 127.263753][ T6370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.279052][ T6509] loop2: detected capacity change from 0 to 32768 [ 127.314346][ T6370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.342079][ T6509] XFS (loop2): Mounting V5 Filesystem [ 127.390770][ T6463] device hsr_slave_0 entered promiscuous mode [ 127.432763][ T6463] device hsr_slave_1 entered promiscuous mode [ 127.456381][ T6509] XFS (loop2): Ending clean mount [ 127.472525][ T6463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.474615][ T6463] Cannot create hsr debugfs directory [ 127.477537][ T6370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.511929][ T5860] XFS (loop2): Unmounting Filesystem [ 127.567736][ T6370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.105640][ T6549] loop2: detected capacity change from 0 to 4096 [ 128.108420][ T6549] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.112137][ T6549] ntfs3: loop2: Failed to load $LogFile. [ 128.173016][ T4239] Bluetooth: hci4: command tx timeout [ 128.349691][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.351929][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.491964][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.511149][ T6370] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.516730][ T6555] loop1: detected capacity change from 0 to 32768 [ 128.681682][ T6463] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.715263][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.717880][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.830430][ T6557] loop2: detected capacity change from 0 to 32768 [ 128.838083][ T6463] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.853796][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.856654][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.859286][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.861223][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.866397][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 128.866409][ T27] audit: type=1326 audit(128.840:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.819" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2f41e28 code=0x0 [ 128.874599][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.877329][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.880122][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.882185][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.884983][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.890272][ T6557] XFS (loop2): Mounting V5 Filesystem [ 128.949777][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.952592][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.955499][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.960040][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.962909][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.965780][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.991142][ T6557] XFS (loop2): Ending clean mount [ 129.035658][ T6463] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.047855][ T6370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.057124][ T6370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.062219][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.065629][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.068352][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.071478][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.074617][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.092411][ T5860] XFS (loop2): Unmounting Filesystem [ 129.140414][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.224411][ T6463] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.295978][ T4236] Bluetooth: hci5: command tx timeout [ 129.519657][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.616235][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.619743][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.627426][ T4860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.630382][ T4860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.736355][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.739276][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.780635][ T6463] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.824440][ T6463] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.151363][ T6599] loop2: detected capacity change from 0 to 32768 [ 130.222480][ T6463] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.253828][ T4239] Bluetooth: hci4: command tx timeout [ 130.265794][ T6463] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.290783][ T6370] device veth0_vlan entered promiscuous mode [ 130.311507][ T6608] loop1: detected capacity change from 0 to 32768 [ 130.352177][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.356973][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.368342][ T6370] device veth1_vlan entered promiscuous mode [ 130.398814][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.401582][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.404703][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.404958][ T6608] XFS (loop1): Mounting V5 Filesystem [ 130.496898][ T6608] XFS (loop1): Ending clean mount [ 130.538698][ T5567] XFS (loop1): Unmounting Filesystem [ 130.790107][ T27] audit: type=1326 audit(130.760:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.4.837" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95741e28 code=0x0 [ 130.894799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.900008][ T5171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.902893][ T5171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.951062][ T9] device hsr_slave_0 left promiscuous mode [ 130.982913][ T9] device hsr_slave_1 left promiscuous mode [ 131.063355][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.065591][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.068820][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.071226][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.093482][ T9] device bridge_slave_1 left promiscuous mode [ 131.096485][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.133800][ T9] device bridge_slave_0 left promiscuous mode [ 131.135815][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.292775][ T9] device veth1_macvtap left promiscuous mode [ 131.294493][ T9] device veth0_macvtap left promiscuous mode [ 131.296234][ T9] device veth1_vlan left promiscuous mode [ 131.297886][ T9] device veth0_vlan left promiscuous mode [ 131.373594][ T4236] Bluetooth: hci5: command tx timeout [ 131.638444][ T6639] loop1: detected capacity change from 0 to 32768 [ 133.398272][ T9] team0 (unregistering): Port device team_slave_1 removed [ 133.453337][ T4239] Bluetooth: hci5: command tx timeout [ 133.595853][ T9] team0 (unregistering): Port device team_slave_0 removed [ 133.803330][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.005960][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.557657][ T9] bond0 (unregistering): Released all slaves [ 136.788088][ T6370] device veth0_macvtap entered promiscuous mode [ 136.793114][ T6370] device veth1_macvtap entered promiscuous mode [ 136.802913][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.805960][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.808663][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.811487][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.816176][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.819062][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.821713][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.825234][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.828029][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.831719][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.853471][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.856407][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.874344][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.878091][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.881023][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.884971][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.887672][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.890592][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.903618][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.924585][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.927411][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.929921][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.944741][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.947481][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.950403][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.954400][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.957109][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.959991][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.974728][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.977468][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.980194][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.003009][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.009066][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.012183][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.020803][ T6370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.023821][ T6370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.026075][ T6370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.028491][ T6370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.101127][ T6463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.172596][ T5171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.182505][ T5171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.196206][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.199414][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.209597][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.233570][ T6463] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.249730][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.260830][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.266759][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.268725][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.271493][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.285910][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.288563][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.290448][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.302217][ T4860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.329051][ T4860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.337809][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.351176][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.357132][ T27] audit: type=1326 audit(137.330:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.852" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2f41e28 code=0x0 [ 137.357221][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.409681][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.412950][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.416315][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.419080][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.421849][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.434970][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.437717][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.440367][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.452255][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.465240][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.471896][ T6666] netlink: 'syz.4.853': attribute type 12 has an invalid length. [ 137.480819][ T6666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.853'. [ 137.485539][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.501405][ T6666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.853'. [ 137.601162][ T6670] capability: warning: `syz.0.744' uses deprecated v2 capabilities in a way that may be insecure [ 137.637514][ T6650] loop2: detected capacity change from 0 to 32768 [ 137.688293][ T6650] XFS (loop2): Mounting V5 Filesystem [ 137.707226][ T4973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.709895][ T4973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.796265][ T6650] XFS (loop2): Ending clean mount [ 137.920787][ T5860] XFS (loop2): Unmounting Filesystem [ 137.957567][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.959853][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.993877][ T6463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.036631][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.039551][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.070761][ T6463] device veth0_vlan entered promiscuous mode [ 138.094741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.097680][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.101077][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.115562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.134370][ T6463] device veth1_vlan entered promiscuous mode [ 138.143022][ T6699] netlink: 'syz.4.863': attribute type 12 has an invalid length. [ 138.146385][ T6699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.863'. [ 138.177742][ T6699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.863'. [ 138.205756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.208559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.211089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.224871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.233329][ T6463] device veth0_macvtap entered promiscuous mode [ 138.238341][ T6463] device veth1_macvtap entered promiscuous mode [ 138.277060][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.297872][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.300648][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.321998][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.324974][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.327923][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.330696][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.362385][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.365664][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.368683][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.371387][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.392625][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.402490][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.410045][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.421699][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.627887][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.631104][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.634332][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.649879][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.660991][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.664305][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.667071][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.670239][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.683989][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.687244][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.690316][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.704442][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.715904][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.729173][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.742204][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.753063][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.757871][ T27] audit: type=1326 audit(138.730:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.2.875" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f41e28 code=0x0 [ 138.764277][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.773823][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.788669][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.803486][ T5171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.805570][ T5171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.814068][ T6729] netlink: 'syz.4.876': attribute type 12 has an invalid length. [ 138.816208][ T6729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.876'. [ 138.819282][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.822170][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.844408][ T6729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.876'. [ 138.850236][ T6463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.855850][ T6463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.860631][ T6463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.866458][ T6463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.032988][ T4860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.035485][ T4860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.058656][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.109039][ T4860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.111543][ T4860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.118811][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.467904][ T6719] loop1: detected capacity change from 0 to 32768 [ 139.580336][ T6719] XFS (loop1): Mounting V5 Filesystem [ 139.688092][ T6719] XFS (loop1): Ending clean mount [ 139.718782][ T6762] netlink: 'syz.0.888': attribute type 12 has an invalid length. [ 139.721082][ T6762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.888'. [ 139.757940][ T6769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.888'. [ 139.766747][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.768861][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.906310][ T5567] XFS (loop1): Unmounting Filesystem [ 140.147919][ T27] audit: type=1326 audit(140.120:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.900" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f41e28 code=0x0 [ 140.350061][ T6798] netlink: 'syz.4.903': attribute type 12 has an invalid length. [ 140.352235][ T6798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.903'. [ 140.373833][ T6798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.903'. [ 140.465030][ T6804] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 140.641420][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.643985][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.058898][ T6838] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 141.293258][ T27] audit: type=1326 audit(141.260:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.4.931" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95741e28 code=0x0 [ 141.345867][ T6855] Zero length message leads to an empty skb [ 141.354570][ T5171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.356685][ T5171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.493876][ T6859] loop1: detected capacity change from 0 to 8192 [ 141.554311][ T6859] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.557893][ T6859] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 141.560676][ T6859] REISERFS (device loop1): using ordered data mode [ 141.576368][ T4239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 141.586561][ T6859] reiserfs: using flush barriers [ 141.590012][ T6859] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.595778][ T6859] REISERFS (device loop1): checking transaction log (loop1) [ 141.612562][ T6859] REISERFS (device loop1): Using r5 hash to sort names [ 141.613133][ T4239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 141.618067][ T4239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 141.618717][ T6859] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 141.624249][ T4239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 141.626784][ T4239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 141.629901][ T4239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 141.636109][ T6859] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 141.666408][ T6873] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 141.817489][ T6869] chnl_net:caif_netlink_parms(): no params data found [ 142.057277][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.059316][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.062062][ T6869] device bridge_slave_0 entered promiscuous mode [ 142.090707][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.094357][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.097178][ T6869] device bridge_slave_1 entered promiscuous mode [ 142.157899][ T6899] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 142.177177][ T6901] loop1: detected capacity change from 0 to 512 [ 142.179579][ T6901] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.231369][ T6901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 142.233811][ T6901] System zones: 1-12 [ 142.242065][ T6901] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.946: corrupted in-inode xattr [ 142.273151][ T6901] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.946: couldn't read orphan inode 15 (err -117) [ 142.285102][ T6901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.320397][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 142.410602][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.580437][ T27] audit: type=1326 audit(142.550:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.0.956" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83f41e28 code=0x0 [ 142.588809][ T5956] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.605639][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.621603][ T6925] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 142.724380][ T5956] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.737729][ T6869] team0: Port device team_slave_0 added [ 142.743825][ T6869] team0: Port device team_slave_1 added [ 142.788771][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.790790][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.802072][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.846659][ T6932] loop2: detected capacity change from 0 to 8192 [ 142.866791][ T6932] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.870231][ T6932] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 142.879196][ T6932] REISERFS (device loop2): using ordered data mode [ 142.881266][ T6932] reiserfs: using flush barriers [ 142.885549][ T5956] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.892097][ T6932] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.897934][ T6932] REISERFS (device loop2): checking transaction log (loop2) [ 142.899772][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.902137][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.905787][ T6932] REISERFS (device loop2): Using r5 hash to sort names [ 142.912002][ T6932] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 142.915979][ T6932] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 142.918402][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.044564][ T5956] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.096499][ T6947] loop2: detected capacity change from 0 to 512 [ 143.096865][ T6944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'. [ 143.098878][ T6947] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.187606][ T6947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 143.189867][ T6947] System zones: 1-12 [ 143.196095][ T6947] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.965: corrupted in-inode xattr [ 143.200872][ T6947] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.965: couldn't read orphan inode 15 (err -117) [ 143.204351][ T6869] device hsr_slave_0 entered promiscuous mode [ 143.211414][ T6947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.222889][ T6869] device hsr_slave_1 entered promiscuous mode [ 143.235277][ T5860] EXT4-fs (loop2): unmounting filesystem. [ 143.272540][ T6869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.279710][ T6869] Cannot create hsr debugfs directory [ 143.359746][ T6957] binder: 6956:6957 tried to acquire reference to desc 0, got 1 instead [ 143.407092][ T6957] binder: 6956:6957 tried to acquire reference to desc 0, got 1 instead [ 143.473156][ T4932] binder: release 6956:6957 transaction 8 out, still active [ 143.475487][ T4932] binder: undelivered TRANSACTION_COMPLETE [ 143.477359][ T4932] binder: undelivered TRANSACTION_COMPLETE [ 143.483278][ T4278] binder: release 6956:6957 transaction 10 out, still active [ 143.486012][ T4278] binder: undelivered TRANSACTION_COMPLETE [ 143.523808][ T4932] binder: undelivered transaction 7, process died. [ 143.525708][ T4932] binder: send failed reply for transaction 8, target dead [ 143.527643][ T4932] binder: send failed reply for transaction 10, target dead [ 143.702878][ T4236] Bluetooth: hci8: command tx timeout [ 144.512938][ T6968] loop2: detected capacity change from 0 to 8192 [ 144.532733][ T6968] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.536562][ T6968] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 144.546753][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.978'. [ 144.558675][ T6968] REISERFS (device loop2): using ordered data mode [ 144.560495][ T6968] reiserfs: using flush barriers [ 144.568148][ T6968] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.580344][ T6988] loop1: detected capacity change from 0 to 512 [ 144.586598][ T6968] REISERFS (device loop2): checking transaction log (loop2) [ 144.600920][ T6988] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.609746][ T6968] REISERFS (device loop2): Using r5 hash to sort names [ 144.625056][ T6968] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 144.631221][ T6988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 144.634514][ T6988] System zones: 1-12 [ 144.639216][ T6968] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 144.675916][ T6988] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.980: corrupted in-inode xattr [ 144.706557][ T6988] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.980: couldn't read orphan inode 15 (err -117) [ 144.740888][ T6988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.843047][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 144.891835][ T7006] loop1: detected capacity change from 0 to 256 [ 144.923342][ T7006] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 145.023380][ T7003] binder: 7002:7003 tried to acquire reference to desc 0, got 1 instead [ 145.043669][ T7003] binder: 7002:7003 tried to acquire reference to desc 0, got 1 instead [ 145.063300][ T4275] binder: release 7002:7003 transaction 18 out, still active [ 145.065329][ T4275] binder: undelivered TRANSACTION_COMPLETE [ 145.238247][ T27] audit: type=1326 audit(145.210:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.2.983" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8f41e28 code=0x0 [ 145.500415][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.991'. [ 145.663055][ T6869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.789675][ T4236] Bluetooth: hci8: command tx timeout [ 145.795263][ T6869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.342985][ T6869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.463042][ T7017] overlayfs: statfs failed on './file0' [ 146.584316][ T7033] loop1: detected capacity change from 0 to 8192 [ 146.598332][ T6869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.623133][ T7033] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.626684][ T7033] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 146.631620][ T7040] loop2: detected capacity change from 0 to 512 [ 146.651353][ T7033] REISERFS (device loop1): using ordered data mode [ 146.661398][ T7040] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.668424][ T7033] reiserfs: using flush barriers [ 146.687303][ T7033] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.700743][ T7040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 146.705752][ T7040] System zones: 1-12 [ 146.712983][ T7033] REISERFS (device loop1): checking transaction log (loop1) [ 146.723603][ T7040] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.994: corrupted in-inode xattr [ 146.731795][ T7033] REISERFS (device loop1): Using r5 hash to sort names [ 146.744209][ T7033] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 146.748542][ T7040] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.994: couldn't read orphan inode 15 (err -117) [ 146.752278][ T7040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.764562][ T7033] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 146.796492][ T7054] binder: 7053:7054 tried to acquire reference to desc 0, got 1 instead [ 146.800296][ T7054] binder: 7053:7054 tried to acquire reference to desc 0, got 1 instead [ 146.816522][ T5860] EXT4-fs (loop2): unmounting filesystem. [ 146.994337][ T7062] loop2: detected capacity change from 0 to 256 [ 147.015296][ T7062] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 147.109079][ T27] audit: type=1326 audit(147.080:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.4.1004" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95741e28 code=0x0 [ 147.306687][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1002'. [ 148.046545][ T4239] Bluetooth: hci8: command tx timeout [ 148.090762][ T7079] loop2: detected capacity change from 0 to 512 [ 148.106799][ T7079] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.130005][ T7082] binder: 7080:7082 tried to acquire reference to desc 0, got 1 instead [ 148.137260][ T7079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 148.139527][ T7079] System zones: 1-12 [ 148.165079][ T7079] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.1007: corrupted in-inode xattr [ 148.177967][ T7079] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1007: couldn't read orphan inode 15 (err -117) [ 148.193498][ T7082] binder: 7080:7082 tried to acquire reference to desc 0, got 1 instead [ 148.198507][ T7079] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.365162][ T5860] EXT4-fs (loop2): unmounting filesystem. [ 148.373757][ T5956] device hsr_slave_0 left promiscuous mode [ 148.451150][ T5956] device hsr_slave_1 left promiscuous mode [ 148.533824][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.536058][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.540777][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.544366][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.550443][ T5956] device bridge_slave_1 left promiscuous mode [ 148.556971][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.577790][ T7111] Illegal XDP return value 65535 on prog (id 61) dev N/A, expect packet loss! [ 148.598555][ T5956] device bridge_slave_0 left promiscuous mode [ 148.600542][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.844013][ T5956] device veth1_macvtap left promiscuous mode [ 148.845917][ T5956] device veth0_macvtap left promiscuous mode [ 148.847863][ T5956] device veth1_vlan left promiscuous mode [ 148.849834][ T5956] device veth0_vlan left promiscuous mode [ 148.904450][ T7089] overlayfs: statfs failed on './file0' [ 149.995606][ T7127] binder: 7126:7127 tried to acquire reference to desc 0, got 1 instead [ 150.005252][ T7127] binder: 7126:7127 tried to acquire reference to desc 0, got 1 instead [ 150.025447][ T4746] binder_debug: 22 callbacks suppressed [ 150.025470][ T4746] binder: release 7126:7127 transaction 48 out, still active [ 150.029001][ T4746] binder: undelivered TRANSACTION_COMPLETE [ 150.030578][ T4746] binder: undelivered TRANSACTION_COMPLETE [ 150.039482][ T4746] binder: release 7126:7127 transaction 50 out, still active [ 150.041778][ T4746] binder: undelivered TRANSACTION_COMPLETE [ 150.048444][ T4746] binder: undelivered transaction 47, process died. [ 150.050324][ T4746] binder: send failed reply for transaction 48, target dead [ 150.071726][ T4746] binder: send failed reply for transaction 50, target dead [ 150.092577][ T4239] Bluetooth: hci8: command tx timeout [ 151.078662][ T7140] overlayfs: statfs failed on './file0' [ 151.119840][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 151.736476][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 151.923398][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 152.163335][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.531429][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.227025][ T7167] overlayfs: statfs failed on './file0' [ 154.285525][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'. [ 155.304337][ T5956] bond0 (unregistering): Released all slaves [ 156.132195][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.154565][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.201803][ T6869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.211773][ T6869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.242615][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1016'. [ 156.263576][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.266132][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.268766][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.271482][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.292889][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.294962][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.322625][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.329950][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.338717][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.340715][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.352179][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.363250][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.366329][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.381933][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.393158][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.396131][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.398822][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.412690][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.418023][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.424537][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.453638][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.456492][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.459032][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.531395][ T7199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'. [ 156.574405][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.576520][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.589757][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.644871][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.647727][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.690006][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.696105][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.698896][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.701971][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.851227][ T6869] device veth0_vlan entered promiscuous mode [ 156.858033][ T6869] device veth1_vlan entered promiscuous mode [ 156.860267][ T7215] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1055'. [ 156.870191][ T7215] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1055'. [ 156.891943][ T6869] device veth0_macvtap entered promiscuous mode [ 156.908268][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.910960][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.919506][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.926496][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.931857][ T6869] device veth1_macvtap entered promiscuous mode [ 156.946824][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.949655][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.980407][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.995066][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.998062][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.001032][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.013986][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.017147][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.020123][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.024401][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.027506][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.030469][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.033732][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.036741][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.039583][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.043122][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.048272][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.051666][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.056279][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.062783][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.075376][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.080554][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.087105][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.091044][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.096023][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.098837][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.102905][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.107345][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.110342][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.113578][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.116625][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.119598][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.138068][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.146695][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.151898][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.155370][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.174775][ T6869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.180887][ T6869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.189936][ T6869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.197877][ T6869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.345587][ T7204] overlayfs: statfs failed on './file0' [ 157.348190][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.350841][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.033019][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.117163][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 158.134540][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.136852][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.142038][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.228182][ T7241] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1067'. [ 158.236881][ T7241] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1067'. [ 158.772491][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 159.355379][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1080'. [ 159.373165][ T7272] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1082'. [ 159.375581][ T7272] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1082'. [ 160.854059][ T7320] loop1: detected capacity change from 0 to 1024 [ 160.858022][ T7320] hfsplus: failed to load catalog file [ 162.114060][ T7356] input: syz0 as /devices/virtual/input/input4 [ 163.479836][ T7392] input: syz0 as /devices/virtual/input/input5 [ 164.113607][ T7439] input: syz0 as /devices/virtual/input/input6 [ 164.538251][ T7470] input: syz0 as /devices/virtual/input/input7 [ 164.700954][ T7473] loop1: detected capacity change from 0 to 2048 [ 164.735700][ T7473] loop1: p2 p3 < > p4 < p5 > [ 164.737083][ T7473] loop1: partition table partially beyond EOD, truncated [ 164.739112][ T7473] loop1: p2 start 33028 is beyond EOD, truncated [ 164.740907][ T7473] loop1: p3 start 4284160 is beyond EOD, truncated [ 164.750343][ T7473] loop1: p5 start 33028 is beyond EOD, truncated [ 164.919371][ T3843] loop1: p2 p3 < > p4 < p5 > [ 164.920842][ T3843] loop1: partition table partially beyond EOD, truncated [ 164.923576][ T3843] loop1: p2 start 33028 is beyond EOD, truncated [ 164.933439][ T3843] loop1: p3 start 4284160 is beyond EOD, truncated [ 164.944067][ T3843] loop1: p5 start 33028 is beyond EOD, truncated [ 164.975768][ T7505] input: syz0 as /devices/virtual/input/input8 [ 165.000841][ T7506] loop1: detected capacity change from 0 to 512 [ 165.012666][ T7506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 165.132002][ T7506] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.1169: iget: bad extended attribute block 128 [ 165.136473][ T7506] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1169: couldn't read orphan inode 16 (err -117) [ 165.143096][ T7506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.424022][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 165.428656][ T5741] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 165.432004][ T5741] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:18: Failed to release dquot type 1 [ 165.851597][ T7555] loop1: detected capacity change from 0 to 2048 [ 165.915724][ T7555] loop1: p2 p3 < > p4 < p5 > [ 165.917049][ T7555] loop1: partition table partially beyond EOD, truncated [ 165.919037][ T7555] loop1: p2 start 33028 is beyond EOD, truncated [ 165.920797][ T7565] mkiss: ax0: crc mode is auto. [ 165.953105][ T7555] loop1: p3 start 4284160 is beyond EOD, truncated [ 165.957685][ T7555] loop1: p5 start 33028 is beyond EOD, truncated [ 166.033053][ T7576] netlink: 'syz.3.1212': attribute type 21 has an invalid length. [ 166.127925][ T7580] loop1: detected capacity change from 0 to 512 [ 166.194866][ T7580] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.1203: iget: bad extended attribute block 128 [ 166.201157][ T7580] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1203: couldn't read orphan inode 16 (err -117) [ 166.215331][ T7580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 166.317145][ T6863] udevd[6863]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 166.346601][ T6863] udevd[6863]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 166.471003][ T7608] mkiss: ax0: crc mode is auto. [ 166.487543][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 166.517064][ T5501] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 166.519944][ T5501] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:16: Failed to release dquot type 1 [ 166.625607][ T7618] netlink: 'syz.1.1227': attribute type 21 has an invalid length. [ 166.969442][ T7632] loop1: detected capacity change from 0 to 2048 [ 167.009901][ T7645] mkiss: ax0: crc mode is auto. [ 167.030561][ T7632] loop1: p2 p3 < > p4 < p5 > [ 167.031860][ T7632] loop1: partition table partially beyond EOD, truncated [ 167.038600][ T7632] loop1: p2 start 33028 is beyond EOD, truncated [ 167.040346][ T7632] loop1: p3 start 4284160 is beyond EOD, truncated [ 167.058918][ T7632] loop1: p5 start 33028 is beyond EOD, truncated [ 167.079068][ T7649] netlink: 'syz.4.1244': attribute type 21 has an invalid length. [ 167.194972][ T6863] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.198246][ T7655] loop1: detected capacity change from 0 to 512 [ 167.259949][ T7655] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.1238: iget: bad extended attribute block 128 [ 167.268076][ T7667] loop2: detected capacity change from 0 to 512 [ 167.270203][ T7655] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1238: couldn't read orphan inode 16 (err -117) [ 167.279565][ T7655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.291545][ T7667] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.384095][ T7667] EXT4-fs (loop2): 1 orphan inode deleted [ 167.385698][ T7667] EXT4-fs (loop2): 1 truncate cleaned up [ 167.387336][ T7667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.487694][ T7667] EXT4-fs error (device loop2): empty_inline_dir:1858: inode #12: block 7: comm syz.2.1251: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 167.496850][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 167.498790][ T4461] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 167.501561][ T4461] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:8: Failed to release dquot type 1 [ 167.527901][ T7667] EXT4-fs (loop2): Remounting filesystem read-only [ 167.530522][ T7667] EXT4-fs warning (device loop2): empty_inline_dir:1865: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 167.599368][ T5860] EXT4-fs (loop2): unmounting filesystem. [ 167.618763][ T7692] netlink: 'syz.4.1262': attribute type 21 has an invalid length. [ 167.624603][ T7688] mkiss: ax0: crc mode is auto. [ 167.763707][ T7701] mmap: syz.3.1267 (7701): VmData 175833088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 167.983043][ T7720] netlink: 'syz.3.1276': attribute type 21 has an invalid length. [ 167.998175][ T6659] udevd[6659]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 168.009350][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 168.111743][ T7728] mkiss: ax0: crc mode is auto. [ 168.178171][ T7736] loop2: detected capacity change from 0 to 512 [ 168.214811][ T7739] loop1: detected capacity change from 0 to 8 [ 168.226296][ T7736] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 168.228542][ T7736] System zones: 0-2, 18-18, 34-35 [ 168.241583][ T7736] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.291395][ T7739] SQUASHFS error: lzo decompression failed, data probably corrupt [ 168.304234][ T7739] SQUASHFS error: Failed to read block 0x1c0: -5 [ 168.305940][ T7739] SQUASHFS error: Unable to read metadata cache entry [1be] [ 168.347447][ T5860] EXT4-fs (loop2): unmounting filesystem. [ 168.482512][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 168.625610][ T7768] loop2: detected capacity change from 0 to 8 [ 168.659029][ T7771] loop1: detected capacity change from 0 to 512 [ 168.663010][ T7768] SQUASHFS error: lzo decompression failed, data probably corrupt [ 168.670564][ T7768] SQUASHFS error: Failed to read block 0x1c0: -5 [ 168.674055][ T7768] SQUASHFS error: Unable to read metadata cache entry [1be] [ 168.726379][ T7771] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 168.731126][ T7771] System zones: 0-2, 18-18, 34-35 [ 168.746709][ T7771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.804699][ T6659] udevd[6659]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 168.965995][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'. [ 168.990404][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 169.039322][ T7792] loop2: detected capacity change from 0 to 256 [ 169.115370][ T7792] FAT-fs (loop2): Directory bread(block 64) failed [ 169.117776][ T7792] FAT-fs (loop2): Directory bread(block 65) failed [ 169.130772][ T7792] FAT-fs (loop2): Directory bread(block 66) failed [ 169.140853][ T7792] FAT-fs (loop2): Directory bread(block 67) failed [ 169.143812][ T7792] FAT-fs (loop2): Directory bread(block 68) failed [ 169.145643][ T7792] FAT-fs (loop2): Directory bread(block 69) failed [ 169.147445][ T7792] FAT-fs (loop2): Directory bread(block 70) failed [ 169.164740][ T7792] FAT-fs (loop2): Directory bread(block 71) failed [ 169.166891][ T7792] FAT-fs (loop2): Directory bread(block 72) failed [ 169.168630][ T7792] FAT-fs (loop2): Directory bread(block 73) failed [ 169.170413][ T7804] loop1: detected capacity change from 0 to 8 [ 169.181716][ T7803] netlink: 'syz.0.1315': attribute type 10 has an invalid length. [ 169.222144][ T7804] SQUASHFS error: lzo decompression failed, data probably corrupt [ 169.232420][ T7804] SQUASHFS error: Failed to read block 0x1c0: -5 [ 169.234192][ T7804] SQUASHFS error: Unable to read metadata cache entry [1be] [ 169.357447][ T7809] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1315'. [ 169.360179][ T7809] device veth0_vlan left promiscuous mode [ 169.369114][ T7809] device veth0_vlan entered promiscuous mode [ 169.466663][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.470278][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.480220][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 169.493519][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.769528][ T7848] loop1: detected capacity change from 0 to 256 [ 169.789430][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 169.856423][ T7848] FAT-fs (loop1): Directory bread(block 64) failed [ 169.858396][ T7848] FAT-fs (loop1): Directory bread(block 65) failed [ 169.860220][ T7848] FAT-fs (loop1): Directory bread(block 66) failed [ 169.861945][ T7848] FAT-fs (loop1): Directory bread(block 67) failed [ 169.861963][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 169.910093][ T7848] FAT-fs (loop1): Directory bread(block 68) failed [ 169.911963][ T7848] FAT-fs (loop1): Directory bread(block 69) failed [ 169.931221][ T7848] FAT-fs (loop1): Directory bread(block 70) failed [ 169.948594][ T7848] FAT-fs (loop1): Directory bread(block 71) failed [ 169.955905][ T7848] FAT-fs (loop1): Directory bread(block 72) failed [ 169.957748][ T7848] FAT-fs (loop1): Directory bread(block 73) failed [ 169.970187][ T7860] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 170.159153][ T7866] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1341'. [ 170.168999][ T151] kworker/u4:3: attempt to access beyond end of device [ 170.168999][ T151] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 170.183076][ T7866] device veth0_vlan left promiscuous mode [ 170.189326][ T7866] device veth0_vlan entered promiscuous mode [ 170.256016][ T7879] loop1: detected capacity change from 0 to 64 [ 170.327725][ T7879] syz.1.1348: attempt to access beyond end of device [ 170.327725][ T7879] loop1: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 170.339104][ T7879] Buffer I/O error on dev loop1, logical block 117440531, async page read [ 170.361761][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 170.461548][ T7890] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 170.829390][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 173.044492][ T7928] netlink: 'syz.4.1368': attribute type 10 has an invalid length. [ 173.250163][ T7932] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1368'. [ 173.259149][ T7932] device veth0_vlan left promiscuous mode [ 173.261315][ T7932] device veth0_vlan entered promiscuous mode [ 173.327679][ T7949] loop2: detected capacity change from 0 to 256 [ 173.348709][ T7949] FAT-fs (loop2): Directory bread(block 64) failed [ 173.351014][ T7949] FAT-fs (loop2): Directory bread(block 65) failed [ 173.363742][ T7949] FAT-fs (loop2): Directory bread(block 66) failed [ 173.365460][ T7949] FAT-fs (loop2): Directory bread(block 67) failed [ 173.375465][ T7934] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 173.387360][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.393478][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.396715][ T7949] FAT-fs (loop2): Directory bread(block 68) failed [ 173.397255][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.401169][ T7949] FAT-fs (loop2): Directory bread(block 69) failed [ 173.427959][ T7949] FAT-fs (loop2): Directory bread(block 70) failed [ 173.429761][ T7949] FAT-fs (loop2): Directory bread(block 71) failed [ 173.431635][ T7949] FAT-fs (loop2): Directory bread(block 72) failed [ 173.441436][ T7949] FAT-fs (loop2): Directory bread(block 73) failed [ 173.468150][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 173.726389][ T4973] kworker/u4:11: attempt to access beyond end of device [ 173.726389][ T4973] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 174.607471][ T4239] Bluetooth: hci3: command 0x0406 tx timeout [ 174.764835][ T7975] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 174.967344][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 175.012653][ T7986] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 175.646839][ T8003] loop2: detected capacity change from 0 to 512 [ 175.657854][ T8003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.770612][ T8003] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.823866][ T7990] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1392'. [ 175.831266][ T7990] device veth0_vlan left promiscuous mode [ 175.832468][ T8003] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:337: inode #15: comm syz.2.1397: verity file corrupted; can't find descriptor [ 175.840569][ T8003] EXT4-fs (loop2): Remounting filesystem read-only [ 175.843182][ T8003] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 175.849407][ T7990] device veth0_vlan entered promiscuous mode [ 175.971427][ T5860] EXT4-fs (loop2): unmounting filesystem. [ 176.148440][ T8016] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 177.222506][ T8038] loop2: detected capacity change from 0 to 64 [ 177.243710][ T8038] syz.2.1408: attempt to access beyond end of device [ 177.243710][ T8038] loop2: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 177.251910][ T8038] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 177.273544][ T8040] loop1: detected capacity change from 0 to 512 [ 177.291727][ T8040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.441597][ T8040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.452153][ T8051] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 177.983601][ T8040] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.1410: verity file corrupted; can't find descriptor [ 178.166444][ T8040] EXT4-fs (loop1): Remounting filesystem read-only [ 178.168482][ T8040] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 178.291595][ T8046] netlink: 'syz.0.1414': attribute type 10 has an invalid length. [ 178.350599][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 178.458931][ T8046] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1414'. [ 178.461625][ T8046] device veth0_vlan left promiscuous mode [ 178.465251][ T8046] device veth0_vlan entered promiscuous mode [ 178.477738][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.489800][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.500926][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.689658][ T8077] loop1: detected capacity change from 0 to 64 [ 178.719514][ T8077] syz.1.1424: attempt to access beyond end of device [ 178.719514][ T8077] loop1: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 178.723362][ T8077] Buffer I/O error on dev loop1, logical block 117440531, async page read [ 179.730392][ T8088] loop1: detected capacity change from 0 to 512 [ 179.732816][ T8088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.741376][ T8088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.793199][ T8088] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 179.795466][ T8088] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 179.798328][ T8088] EXT4-fs (loop1): orphan cleanup on readonly fs [ 179.800102][ T8088] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 179.802677][ T8088] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 179.806780][ T8088] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 179.810574][ T8088] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1427: bg 0: block 40: padding at end of block bitmap is not set [ 179.818237][ T8088] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 179.821825][ T8088] EXT4-fs (loop1): 1 truncate cleaned up [ 179.823490][ T8088] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 180.775889][ T5567] EXT4-fs (loop1): unmounting filesystem. [ 180.798431][ T4401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.971635][ T4239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.983554][ T4239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.989998][ T4239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.994405][ T4239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.998096][ T4239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 181.001113][ T4239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.034637][ T4401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.233352][ T8114] netlink: 'syz.2.1439': attribute type 10 has an invalid length. [ 181.254468][ T4401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.368806][ T8124] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1439'. [ 182.372010][ T4239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.377385][ T8124] device veth0_vlan left promiscuous mode [ 182.379553][ T8124] device veth0_vlan entered promiscuous mode [ 182.437286][ T4239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.441107][ T4239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.444301][ T4239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.446748][ T4239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 182.449103][ T4239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.544539][ T4401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.550505][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.554513][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.557229][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.073706][ T4241] Bluetooth: hci5: command tx timeout [ 183.654855][ T8115] chnl_net:caif_netlink_parms(): no params data found [ 183.752886][ T4239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.758305][ T4239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.761954][ T4239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.767301][ T4239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.769764][ T4239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 183.771988][ T4239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.781382][ T4236] Bluetooth: hci4: command tx timeout [ 184.840191][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 184.853299][ T8115] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.855843][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.858564][ T8115] device bridge_slave_0 entered promiscuous mode [ 184.861988][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.867637][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.870236][ T8115] device bridge_slave_1 entered promiscuous mode [ 184.954326][ T8186] loop2: detected capacity change from 0 to 512 [ 184.956595][ T8186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.960164][ T8186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.988275][ T8186] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 184.990532][ T8186] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 184.993394][ T8186] EXT4-fs (loop2): orphan cleanup on readonly fs [ 184.995209][ T8186] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 184.997818][ T8186] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 185.001756][ T8186] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 185.007607][ T8186] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1460: bg 0: block 40: padding at end of block bitmap is not set [ 185.011975][ T8186] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 185.015201][ T8186] EXT4-fs (loop2): 1 truncate cleaned up [ 185.016823][ T8186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.142984][ T4239] Bluetooth: hci5: command tx timeout [ 185.624124][ T8115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.889948][ T4236] Bluetooth: hci6: command tx timeout [ 185.993597][ T5860] EXT4-fs (loop2): unmounting filesystem. [ 186.114575][ T8115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.272698][ T4236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.276822][ T4236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.279830][ T4236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.282636][ T4236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.284988][ T4236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 186.287561][ T4236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.380469][ T8115] team0: Port device team_slave_0 added [ 186.412093][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.415192][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.420953][ T8143] device bridge_slave_0 entered promiscuous mode [ 186.497030][ T8115] team0: Port device team_slave_1 added [ 186.503756][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.505854][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.508604][ T8143] device bridge_slave_1 entered promiscuous mode [ 186.552252][ T8162] chnl_net:caif_netlink_parms(): no params data found [ 186.617882][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.628828][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.631937][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.634906][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.642256][ T8115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.793272][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.795283][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.806230][ T8115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.812877][ T4236] Bluetooth: hci4: command tx timeout [ 186.836796][ T8143] team0: Port device team_slave_0 added [ 186.956790][ T8143] team0: Port device team_slave_1 added [ 187.040981][ T4236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.046517][ T4236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.050008][ T4236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.054863][ T8115] device hsr_slave_0 entered promiscuous mode [ 187.056108][ T4236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.059196][ T4236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.061553][ T4236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.092910][ T8115] device hsr_slave_1 entered promiscuous mode [ 187.132722][ T8115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.134898][ T8115] Cannot create hsr debugfs directory [ 187.142220][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.144559][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.147471][ T8162] device bridge_slave_0 entered promiscuous mode [ 187.212436][ T4236] Bluetooth: hci5: command tx timeout [ 187.374614][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.376352][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.488309][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.490311][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.498123][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.544088][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.546231][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.549090][ T8162] device bridge_slave_1 entered promiscuous mode [ 187.575847][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.577671][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.592470][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.624700][ T8162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.632003][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 187.917005][ T8162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.932444][ T4236] Bluetooth: hci6: command tx timeout [ 188.018808][ T4401] device hsr_slave_0 left promiscuous mode [ 188.052781][ T4401] device hsr_slave_1 left promiscuous mode [ 188.132508][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.134717][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.137413][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.139409][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.142051][ T4401] device bridge_slave_1 left promiscuous mode [ 188.144079][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.194338][ T4401] device bridge_slave_0 left promiscuous mode [ 188.196269][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.332521][ T4236] Bluetooth: hci7: command tx timeout [ 188.342750][ T4401] device veth1_macvtap left promiscuous mode [ 188.344428][ T4401] device veth0_macvtap left promiscuous mode [ 188.346183][ T4401] device veth1_vlan left promiscuous mode [ 188.347780][ T4401] device veth0_vlan left promiscuous mode [ 188.893287][ T4236] Bluetooth: hci4: command tx timeout [ 189.133147][ T4236] Bluetooth: hci0: command tx timeout [ 189.294923][ T4236] Bluetooth: hci5: command tx timeout [ 190.012543][ T4239] Bluetooth: hci6: command tx timeout [ 190.423982][ T4236] Bluetooth: hci7: command tx timeout [ 190.658014][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 190.874271][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 190.982559][ T4239] Bluetooth: hci4: command tx timeout [ 191.075512][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.213329][ T4236] Bluetooth: hci0: command tx timeout [ 191.304524][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.093959][ T4239] Bluetooth: hci6: command tx timeout [ 192.493685][ T4236] Bluetooth: hci7: command tx timeout [ 193.292957][ T4239] Bluetooth: hci0: command tx timeout [ 194.058534][ T4401] bond0 (unregistering): Released all slaves [ 194.324668][ T8143] device hsr_slave_0 entered promiscuous mode [ 194.363904][ T8143] device hsr_slave_1 entered promiscuous mode [ 194.402538][ T8143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.404626][ T8143] Cannot create hsr debugfs directory [ 194.447836][ T8162] team0: Port device team_slave_0 added [ 194.495862][ T8162] team0: Port device team_slave_1 added [ 194.499472][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.501525][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.505417][ T8206] device bridge_slave_0 entered promiscuous mode [ 194.546806][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.548813][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.551536][ T8206] device bridge_slave_1 entered promiscuous mode [ 194.572633][ T4236] Bluetooth: hci7: command tx timeout [ 194.606453][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.608329][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.617311][ T8162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.637210][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.642156][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.644701][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.651751][ T8162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.682994][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.749142][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 194.824909][ T8162] device hsr_slave_0 entered promiscuous mode [ 194.852900][ T8162] device hsr_slave_1 entered promiscuous mode [ 194.893788][ T8162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.895848][ T8162] Cannot create hsr debugfs directory [ 194.905680][ T8206] team0: Port device team_slave_0 added [ 195.019655][ T8206] team0: Port device team_slave_1 added [ 195.156168][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.158045][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.165725][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.205620][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.207752][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.232540][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.336305][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.338137][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.340882][ T8233] device bridge_slave_0 entered promiscuous mode [ 195.373066][ T4239] Bluetooth: hci0: command tx timeout [ 195.407271][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.409494][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.413305][ T8233] device bridge_slave_1 entered promiscuous mode [ 195.514344][ T8206] device hsr_slave_0 entered promiscuous mode [ 195.542779][ T8206] device hsr_slave_1 entered promiscuous mode [ 195.592414][ T8206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.594556][ T8206] Cannot create hsr debugfs directory [ 195.600637][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.626076][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.671309][ T8233] team0: Port device team_slave_0 added [ 195.680659][ T8233] team0: Port device team_slave_1 added [ 195.747576][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.749671][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.762957][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.800829][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.803068][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.810034][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.934380][ T8233] device hsr_slave_0 entered promiscuous mode [ 195.953623][ T8233] device hsr_slave_1 entered promiscuous mode [ 196.002568][ T8233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.004628][ T8233] Cannot create hsr debugfs directory [ 196.057103][ T8115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.086857][ T8115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.188818][ T8143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.197762][ T8115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.256940][ T8115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.344164][ T8143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.484574][ T8143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.508152][ T8115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.607852][ T8143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.623336][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.626647][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.633395][ T8115] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.639770][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.643658][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.646284][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.648237][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.658201][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.660812][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.673007][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.675634][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.677622][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.680024][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.698679][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.712521][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.716876][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.719676][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.735445][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.740057][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.753018][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.246028][ T8115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.249658][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.256826][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.259572][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.262237][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.613637][ T28] INFO: task syz.0.141:4747 blocked for more than 143 seconds. [ 197.615732][ T28] Not tainted 6.1.97-syzkaller #0 [ 197.618258][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 197.621138][ T28] task:syz.0.141 state:D stack:0 pid:4747 ppid:4231 flags:0x00000009 [ 197.624690][ T28] Call trace: [ 197.625624][ T28] __switch_to+0x320/0x754 [ 197.626841][ T28] __schedule+0xee4/0x1c98 [ 197.628062][ T28] schedule+0xc4/0x170 [ 197.629199][ T28] io_schedule+0x8c/0x188 [ 197.630899][ T28] folio_wait_bit_common+0x65c/0xb90 [ 197.633598][ T28] __folio_lock+0x2c/0x3c [ 197.634777][ T28] release_metapage+0x168/0xc84 [ 197.636073][ T28] __get_metapage+0xb0c/0x1050 [ 197.637377][ T28] jfs_readdir+0x1ed4/0x37bc [ 197.638604][ T28] iterate_dir+0x1f4/0x4e4 [ 197.639781][ T28] __arm64_sys_getdents64+0x1c4/0x4a0 [ 197.641242][ T28] invoke_syscall+0x98/0x2c0 [ 197.652893][ T28] el0_svc_common+0x138/0x258 [ 197.654393][ T28] do_el0_svc+0x64/0x218 [ 197.656025][ T28] el0_svc+0x58/0x168 [ 197.657068][ T28] el0t_64_sync_handler+0x84/0xf0 [ 197.658455][ T28] el0t_64_sync+0x18c/0x190 [ 197.665540][ T28] [ 197.665540][ T28] Showing all locks held in the system: [ 197.667640][ T28] 1 lock held by rcu_tasks_kthre/12: [ 197.669073][ T28] #0: ffff800015a34eb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 197.671948][ T28] 1 lock held by rcu_tasks_trace/13: [ 197.677354][ T28] #0: ffff800015a356b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 197.680374][ T28] 1 lock held by khungtaskd/28: [ 197.681692][ T28] #0: ffff800015a34ce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 197.685477][ T28] 4 locks held by udevd/3843: [ 197.686680][ T28] #0: ffff0000f7bca8b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xac/0xc44 [ 197.689319][ T28] #1: ffff000100257c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x384 [ 197.691782][ T28] #2: ffff0001001a0bd0 (kn->active#4){.+.+}-{0:0}, at: kernfs_seq_start+0x74/0x384 [ 197.694856][ T28] #3: ffff0000ebae20e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x178/0x338 [ 197.697416][ T28] 1 lock held by dhcpcd/3896: [ 197.698635][ T28] #0: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x104/0x698 [ 197.701337][ T28] 2 locks held by getty/3985: [ 197.702530][ T28] #0: ffff0000d6444098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 197.705231][ T28] #1: ffff80001bcf02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 197.708249][ T28] 3 locks held by kworker/1:6/4277: [ 197.709816][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.712974][ T28] #1: ffff80001e297c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.715857][ T28] #2: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.718249][ T28] 6 locks held by kworker/u4:7/4401: [ 197.719653][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.722645][ T28] #1: ffff80001dac7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.725421][ T28] #2: ffff800017e36290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994 [ 197.728085][ T28] #3: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.730537][ T28] #4: ffff0000eaa413e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xbc/0x1d0 [ 197.733622][ T28] #5: ffff800015a3a2b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e0/0x77c [ 197.736601][ T28] 2 locks held by syz.0.141/4747: [ 197.737902][ T28] #0: ffff0000e8ec20e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x124/0x16c [ 197.740453][ T28] #1: ffff0000eafe4640 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: iterate_dir+0x124/0x4e4 [ 197.744042][ T28] 3 locks held by kworker/0:9/4748: [ 197.745492][ T28] #0: ffff0000d60b2538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.748591][ T28] #1: ffff80001f3b7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.751748][ T28] #2: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.754438][ T28] 2 locks held by syz.4.190/4900: [ 197.755869][ T28] #0: ffff0000d9f57768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x124/0x16c [ 197.758840][ T28] #1: ffff0000eafe58c0 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: iterate_dir+0x124/0x4e4 [ 197.761538][ T28] 3 locks held by kworker/1:8/4929: [ 197.763494][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.766379][ T28] #1: ffff80001e247c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.769589][ T28] #2: ffff0000e9791240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x32bc [ 197.772945][ T28] 3 locks held by kworker/1:9/4931: [ 197.774440][ T28] #0: ffff0000d60b2538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.777466][ T28] #1: ffff80001e227c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.780871][ T28] #2: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.783278][ T28] 2 locks held by kworker/u4:16/5501: [ 197.784765][ T28] 2 locks held by syz.3.686/6177: [ 197.786087][ T28] #0: ffff0000ddf97768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x124/0x16c [ 197.788629][ T28] #1: ffff0000ef0ebd00 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: iterate_dir+0x124/0x4e4 [ 197.791402][ T28] 1 lock held by syz-executor/8115: [ 197.793071][ T28] #0: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 197.795706][ T28] 7 locks held by syz-executor/8143: [ 197.797065][ T28] #0: ffff0000d84c6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 197.799693][ T28] #1: ffff0001003e3488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 197.802576][ T28] #2: ffff0000d05921d8 (kn->active#46){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 197.805247][ T28] #3: ffff800017236a28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x170/0x664 [ 197.808010][ T28] #4: ffff0000ebae20e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x90/0x480 [ 197.810574][ T28] #5: ffff0000ebae72f8 (&devlink->lock_key#15){+.+.}-{3:3}, at: devl_lock+0x24/0x34 [ 197.813383][ T28] #6: ffff800017e420c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 197.815728][ T28] 4 locks held by syz-executor/8162: [ 197.817187][ T28] #0: ffff0000d84c6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 197.819579][ T28] #1: ffff0000ffe3c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 197.822259][ T28] #2: ffff0000d05922c0 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 197.825148][ T28] #3: ffff800017236a28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 197.827919][ T28] 4 locks held by syz-executor/8206: [ 197.829346][ T28] #0: ffff0000d84c6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 197.831769][ T28] #1: ffff00010001d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 197.834726][ T28] #2: ffff0000d05922c0 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 197.837520][ T28] #3: ffff800017236a28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 197.840373][ T28] 4 locks held by syz-executor/8233: [ 197.841755][ T28] #0: ffff0000d84c6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x914 [ 197.844295][ T28] #1: ffff0000e2597888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 197.846970][ T28] #2: ffff0000d05922c0 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 197.849740][ T28] #3: ffff800017236a28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 197.853287][ T28] [ 197.853914][ T28] ============================================= [ 197.853914][ T28] [ 197.856195][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 197.857989][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 197.860044][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.862768][ T28] Call trace: [ 197.863701][ T28] dump_backtrace+0x1c8/0x1f4 [ 197.865000][ T28] show_stack+0x2c/0x3c [ 197.866179][ T28] dump_stack_lvl+0x108/0x170 [ 197.867483][ T28] dump_stack+0x1c/0x5c [ 197.868585][ T28] panic+0x300/0x804 [ 197.869636][ T28] hung_task_panic+0x0/0x2c [ 197.870861][ T28] kthread+0x250/0x2d8 [ 197.871958][ T28] ret_from_fork+0x10/0x20 [ 197.873221][ T28] SMP: stopping secondary CPUs [ 197.874542][ T28] Kernel Offset: disabled [ 197.875731][ T28] CPU features: 0x00000,02070084,26017203 [ 197.877337][ T28] Memory Limit: none [ 198.516668][ T28] Rebooting in 86400 seconds..