last executing test programs: 11.481807258s ago: executing program 3 (id=1573): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') lseek(r3, 0x80, 0x0) 8.118643301s ago: executing program 0 (id=1583): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) sysinfo(&(0x7f00000003c0)=""/252) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x360, 0x0, 0x10, 0x1000, 0xfffffffe, 0x18, 0x0, {}, {}, {}, {0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}) 7.978102113s ago: executing program 3 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) 7.799554657s ago: executing program 1 (id=1585): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) socket$inet6(0xa, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x6001, 0x4, 0x410, 0x240, 0x240, 0x130, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "81bef90cac9eefdb69381fea88eb84c2a41045b786fd0e44b3da4f4734c128dba969309a9161e795a0057e17b4de122c8534fa15d5180793535f687585b4aa49"}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x1c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1df}}]}]}}]}, 0x50}}, 0x0) 6.977884754s ago: executing program 0 (id=1586): socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x88, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.678459458s ago: executing program 1 (id=1588): bpf$MAP_CREATE(0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x3, &(0x7f0000001300)=""/161, 0xa1) 6.677873498s ago: executing program 0 (id=1589): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.666964249s ago: executing program 2 (id=1590): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001c40)={'ip6tnl0\x00', &(0x7f0000001bc0)={'syztnl2\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private2}}) 6.52706318s ago: executing program 0 (id=1591): unshare(0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x18400, &(0x7f0000000140)={[{@noacl}, {@noextent_cache}, {@nolazytime}, {@fsync_mode_strict}, {@lazytime}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf519, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r2, 0x0) 6.52607108s ago: executing program 2 (id=1592): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095000000000000001611499c5ee10a18b004158fd43b51886025"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 6.419379649s ago: executing program 2 (id=1593): sched_setscheduler(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000014c0)=ANY=[], 0x1, 0xc4e, &(0x7f00000015c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r5, 0x200004) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r4, r5, 0x0, 0x80001d00c0d1) setsockopt(r4, 0x0, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x12}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.802080899s ago: executing program 2 (id=1594): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') lseek(r3, 0x80, 0x0) 4.441987399s ago: executing program 4 (id=1598): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) socket$inet6(0xa, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x6001, 0x4, 0x410, 0x240, 0x240, 0x130, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "81bef90cac9eefdb69381fea88eb84c2a41045b786fd0e44b3da4f4734c128dba969309a9161e795a0057e17b4de122c8534fa15d5180793535f687585b4aa49"}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x1c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1df}}]}]}}]}, 0x50}}, 0x0) 4.300267771s ago: executing program 4 (id=1599): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010001fff00000000000000000000bdbe", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=0x0, @ANYRES16], 0x48}}, 0x0) 4.208179978s ago: executing program 4 (id=1600): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004a40)=@delchain={0x141c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x139c, 0x2, [@TCA_ROUTE4_POLICE={0xc5c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}]}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_ACT={0x518, 0x6, [@m_sample={0xcc, 0x0, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x25, 0x6, "4453215fe7d3ed1a5cfc209beb521637afb8a2f41b0066cb72cd8daa1b4583dfa8"}, {0xc}, {0xc}}}, @m_ct={0xd0, 0x0, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "d62413a6dc0d74cb84e5c9b384f0f4a3"}]}, {0x91, 0x6, "73ddd55ebd851d2bc2a80464fe930bcd671b9b5ec0f728ce92db7f5a3c71a82c30a0d8cd97ebbd39edfb3d25e331a3ef5c2919793122724b74293352f8e68d6a9c929e0075773666937c17b164290875848c2b08a9b2d3c3415ee488ef65c26e09fae090eb1b6977cb4e6373be8ed738822afcae7710da8185d9b2a95122ff2c52db06756feffda720b6864ed2"}, {0xc}, {0xc}}}, @m_ct={0x19c, 0x0, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev}, @TCA_CT_ZONE={0x6}, @TCA_CT_ZONE={0x6}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "0f6987aead6b7e73b09cef7cda402930"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "792c762a11d2c461f4a9907caa538368"}]}, {0xf9, 0x6, "6caf8b6a5f815b199b0107623311a95c1065acaf53b199de9a0fb591e79e1a5d0e1e1958c4ca5c625f9f949943ab2679f4a95b0c930195be0a94e9d7d3f8b233bd12b98a1ddd7158d928fcb86ad36cf29cff5fd824e0c9f7655319e7cc2e6c701db2055338365c4cca947572844083aa102582ca1499a1cab248f224e08c1803bfff0c533c5f942b460267ebaf5e2583351575f57b4df29e8245c4643dbe0dc4dbed01bc175c77e062821eaff9d6f685030b5e2535c82737e9ac6d1969940c63e75087a181dd2473b81506c4de041b304517d82824f6830f152ddc3c1b01b5705ece020e899d370c775398001bc6760faab5e47908"}, {0xc}, {0xc}}}, @m_mpls={0x100, 0x0, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c}]}, {0x9d, 0x6, "abdb7c777d8de38bbf8a91d9bd13426d3437d82d87377422ce29f813f135c20c5d759313ae815a39a098ad24057c5eead9e8a7b357ef64923caa40af784ef5e6a8bdc78520453d7bc2070eca4046e1b1b5b0e93451dd1e909a56eed438c1f9269b8981113312726b0c04998e3bfa57bff112de79b4eb45d5cd93563b680ba8571675c4cf3df82f4920db1f6e9f6c3cb7232dfad55378d0e644"}, {0xc}, {0xc}}}, @m_pedit={0xdc, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0xad, 0x6, "bed59f6df42ded27f775db18fe27eacc81ad7d76608f5fda24098e4bd645b82068ebb66cf1587ece54e4ef95c95b832fef9929a1281d1d7b04a041af05f597a5a6db50523750d39edcce5055366e52a70dc7832845b0a94d9e1baf760c414ea6b4cdb893d245f8410ff62a749a47a9294a3b4c18398fa231177445cd360fb50f33ef3e2f87ee2f34a0a832664e5b85137c565815e77393d8bdb9b6b37ee103a93000483c08f9be3974"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x1b8, 0x6, [@m_ctinfo={0xb4, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x80, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b5"}, {0xc}, {0xc}}}, @m_nat={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_ife={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8}]}, @TCA_IFE_PARMS={0x1c}]}, {0x2d, 0x6, "304530e2049d030516e6b6a87888850c6698f96161a861acc41200ac626439f0f30f52067244e4a1e5"}, {0xc}, {0xc}}}]}]}}]}, 0x141c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.131348145s ago: executing program 4 (id=1601): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',usrquota,integrity,iocharset=iso8859-3,iocharset=cp949,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x60bd, &(0x7f0000006580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103a42, 0x0) ftruncate(0xffffffffffffffff, 0x7fff) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001240)=ANY=[], 0x640) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) 3.810093231s ago: executing program 3 (id=1602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0), 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 3.559880721s ago: executing program 3 (id=1603): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.480595899s ago: executing program 3 (id=1604): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000000)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60a1, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.350138439s ago: executing program 4 (id=1605): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) 2.168075244s ago: executing program 0 (id=1606): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003b00)=@delchain={0xeb4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0xe3c, 0x2, [@TCA_ROUTE4_POLICE={0xc5c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}]}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x168, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0x78, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x25, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e030"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xeb4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x12c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.017909736s ago: executing program 0 (id=1607): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007000000d60600000ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf5400000000000007"], 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce8220100090581af"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 1.902028585s ago: executing program 4 (id=1608): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x552d, &(0x7f000000d000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x1d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x800000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 1.746827938s ago: executing program 2 (id=1609): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) socket$inet6(0xa, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x6001, 0x4, 0x410, 0x240, 0x240, 0x130, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "81bef90cac9eefdb69381fea88eb84c2a41045b786fd0e44b3da4f4734c128dba969309a9161e795a0057e17b4de122c8534fa15d5180793535f687585b4aa49"}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) recvmmsg(r1, &(0x7f0000000840), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x1c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1df}}]}]}}]}, 0x50}}, 0x0) 1.538325455s ago: executing program 2 (id=1610): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) clock_gettime(0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) sysinfo(&(0x7f00000003c0)=""/252) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x360, 0x0, 0x10, 0x1000, 0xfffffffe, 0x18, 0x0, {}, {}, {}, {0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.391151647s ago: executing program 1 (id=1611): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004a40)=@delchain={0x141c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x139c, 0x2, [@TCA_ROUTE4_POLICE={0xc5c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}]}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_ACT={0x518, 0x6, [@m_sample={0xcc, 0x0, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x25, 0x6, "4453215fe7d3ed1a5cfc209beb521637afb8a2f41b0066cb72cd8daa1b4583dfa8"}, {0xc}, {0xc}}}, @m_ct={0xd0, 0x0, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "d62413a6dc0d74cb84e5c9b384f0f4a3"}]}, {0x91, 0x6, "73ddd55ebd851d2bc2a80464fe930bcd671b9b5ec0f728ce92db7f5a3c71a82c30a0d8cd97ebbd39edfb3d25e331a3ef5c2919793122724b74293352f8e68d6a9c929e0075773666937c17b164290875848c2b08a9b2d3c3415ee488ef65c26e09fae090eb1b6977cb4e6373be8ed738822afcae7710da8185d9b2a95122ff2c52db06756feffda720b6864ed2"}, {0xc}, {0xc}}}, @m_ct={0x19c, 0x0, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev}, @TCA_CT_ZONE={0x6}, @TCA_CT_ZONE={0x6}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "0f6987aead6b7e73b09cef7cda402930"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "792c762a11d2c461f4a9907caa538368"}]}, {0xf9, 0x6, "6caf8b6a5f815b199b0107623311a95c1065acaf53b199de9a0fb591e79e1a5d0e1e1958c4ca5c625f9f949943ab2679f4a95b0c930195be0a94e9d7d3f8b233bd12b98a1ddd7158d928fcb86ad36cf29cff5fd824e0c9f7655319e7cc2e6c701db2055338365c4cca947572844083aa102582ca1499a1cab248f224e08c1803bfff0c533c5f942b460267ebaf5e2583351575f57b4df29e8245c4643dbe0dc4dbed01bc175c77e062821eaff9d6f685030b5e2535c82737e9ac6d1969940c63e75087a181dd2473b81506c4de041b304517d82824f6830f152ddc3c1b01b5705ece020e899d370c775398001bc6760faab5e47908"}, {0xc}, {0xc}}}, @m_mpls={0x100, 0x0, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c}]}, {0x9d, 0x6, "abdb7c777d8de38bbf8a91d9bd13426d3437d82d87377422ce29f813f135c20c5d759313ae815a39a098ad24057c5eead9e8a7b357ef64923caa40af784ef5e6a8bdc78520453d7bc2070eca4046e1b1b5b0e93451dd1e909a56eed438c1f9269b8981113312726b0c04998e3bfa57bff112de79b4eb45d5cd93563b680ba8571675c4cf3df82f4920db1f6e9f6c3cb7232dfad55378d0e644"}, {0xc}, {0xc}}}, @m_pedit={0xdc, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0xad, 0x6, "bed59f6df42ded27f775db18fe27eacc81ad7d76608f5fda24098e4bd645b82068ebb66cf1587ece54e4ef95c95b832fef9929a1281d1d7b04a041af05f597a5a6db50523750d39edcce5055366e52a70dc7832845b0a94d9e1baf760c414ea6b4cdb893d245f8410ff62a749a47a9294a3b4c18398fa231177445cd360fb50f33ef3e2f87ee2f34a0a832664e5b85137c565815e77393d8bdb9b6b37ee103a93000483c08f9be3974"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x1b8, 0x6, [@m_ctinfo={0xb4, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x80, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b5"}, {0xc}, {0xc}}}, @m_nat={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_ife={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8}]}, @TCA_IFE_PARMS={0x1c}]}, {0x2d, 0x6, "304530e2049d030516e6b6a87888850c6698f96161a861acc41200ac626439f0f30f52067244e4a1e5"}, {0xc}, {0xc}}}]}]}}]}, 0x141c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.322589052s ago: executing program 3 (id=1612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) 1.249654638s ago: executing program 1 (id=1613): socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x88, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}]}, @CTA_TIMEOUT={0x8}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.094187191s ago: executing program 1 (id=1614): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 1 (id=1615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0), 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 69][ T7850] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 281.836499][ T7850] REISERFS (device loop4): using ordered data mode [ 281.859498][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.866854][ T7850] reiserfs: using flush barriers [ 281.911223][ T7850] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 281.937220][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.947391][ T4464] Bluetooth: hci0: command 0x0409 tx timeout [ 281.953851][ T7850] REISERFS (device loop4): checking transaction log (loop4) [ 281.960204][ T7817] device bridge_slave_1 entered promiscuous mode [ 282.131138][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.178638][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.211089][ T7850] REISERFS (device loop4): Using tea hash to sort names [ 282.228897][ T7850] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 282.304486][ T7817] team0: Port device team_slave_0 added [ 282.331512][ T7834] loop1: detected capacity change from 0 to 40427 [ 282.341586][ T7865] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 282.358895][ T7817] team0: Port device team_slave_1 added [ 282.403130][ T7865] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 282.430079][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.445817][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.510244][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.526154][ T7834] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 282.557217][ T7834] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 282.606980][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.616747][ T7834] F2FS-fs (loop1): invalid crc value [ 282.630062][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.784962][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.812759][ T7834] F2FS-fs (loop1): Found nat_bits in checkpoint [ 283.191923][ T7834] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 283.219875][ T7834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 283.236562][ T7817] device hsr_slave_0 entered promiscuous mode [ 283.250721][ T7817] device hsr_slave_1 entered promiscuous mode [ 283.258876][ T7817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.266467][ T7817] Cannot create hsr debugfs directory [ 284.098278][ T4464] Bluetooth: hci0: command 0x041b tx timeout [ 284.234231][ T7817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.358300][ T7893] loop3: detected capacity change from 0 to 4096 [ 284.394742][ T7893] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 284.420473][ T7817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.480671][ T7893] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 284.522830][ T7817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.599326][ T7371] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 284.708776][ T7817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.737492][ T4318] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 284.897272][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 284.904474][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 285.017204][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 285.197696][ T4318] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 285.288438][ T4318] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 285.562234][ T4318] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 285.592639][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.664836][ T7817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.694944][ T7817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.715726][ T7817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.744933][ T7817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.944432][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.095313][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.117357][ T4464] Bluetooth: hci0: command 0x040f tx timeout [ 286.128487][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.136599][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.165553][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.810833][ T7904] loop3: detected capacity change from 0 to 32768 [ 286.901075][ T7904] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1098 (7904) [ 286.972858][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.981651][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.988767][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.992285][ T7904] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 287.000485][ T3494] Bluetooth: hci1: command 0x1003 tx timeout [ 287.037195][ T7904] BTRFS info (device loop3): using free space tree [ 287.044133][ T7904] BTRFS info (device loop3): has skinny extents [ 287.054183][ T3512] Bluetooth: hci1: sending frame failed (-49) [ 287.062048][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.077770][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.097248][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.105684][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.112807][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.138209][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.147503][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.156583][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.166315][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.175321][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.186231][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.198260][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.216112][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.243929][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.273891][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.317570][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.354083][ T7904] BTRFS info (device loop3): enabling ssd optimizations [ 287.372101][ T7817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.437695][ T4464] usb 5-1: USB disconnect, device number 6 [ 287.927916][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.935464][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.980850][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.060395][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.072867][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.151139][ T7817] device veth0_vlan entered promiscuous mode [ 288.188580][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.196967][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.205180][ T3546] Bluetooth: hci0: command 0x0419 tx timeout [ 288.283352][ T7817] device veth1_vlan entered promiscuous mode [ 288.305339][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.328061][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.354712][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.425997][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.444629][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.473905][ T7817] device veth0_macvtap entered promiscuous mode [ 288.501288][ T7817] device veth1_macvtap entered promiscuous mode [ 288.558308][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.576309][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.602556][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.623033][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.642541][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.662929][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.690201][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.717775][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.745615][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.801512][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.802108][ T7941] loop4: detected capacity change from 0 to 40427 [ 288.846901][ T7817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.876099][ T7941] F2FS-fs (loop4): invalid crc value [ 288.877010][ T7817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.917158][ T7817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.936021][ T7941] F2FS-fs (loop4): Found nat_bits in checkpoint [ 288.946631][ T7817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.978957][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.988594][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.067890][ T3545] Bluetooth: hci1: command 0x1001 tx timeout [ 289.070372][ T7941] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 289.074033][ T3512] Bluetooth: hci1: sending frame failed (-49) [ 289.111331][ T7941] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 289.184367][ T5689] attempt to access beyond end of device [ 289.184367][ T5689] loop4: rw=2049, want=45112, limit=40427 [ 289.228470][ T3972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.236651][ T3972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.284001][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.335183][ T3972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.367476][ T3972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.393846][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.997508][ T3542] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 290.337307][ T3542] usb 3-1: Using ep0 maxpacket: 32 [ 290.478095][ T3542] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 290.554354][ T3542] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 290.597519][ T3542] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 290.640663][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.148271][ T3545] Bluetooth: hci1: command 0x1009 tx timeout [ 291.320011][ T7983] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 291.912691][ T7985] loop3: detected capacity change from 0 to 40427 [ 292.013069][ T7985] F2FS-fs (loop3): invalid crc value [ 292.053833][ T7985] F2FS-fs (loop3): Found nat_bits in checkpoint [ 292.179946][ T7985] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 292.196496][ T7985] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 292.278876][ T7371] attempt to access beyond end of device [ 292.278876][ T7371] loop3: rw=2049, want=45112, limit=40427 [ 292.777031][ T3545] usb 3-1: USB disconnect, device number 3 [ 293.590463][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 293.697820][ T8017] loop3: detected capacity change from 0 to 8 [ 293.775473][ T8017] SQUASHFS error: lzo decompression failed, data probably corrupt [ 293.812622][ T8017] SQUASHFS error: Failed to read block 0x91: -5 [ 293.822133][ T8017] SQUASHFS error: Unable to read metadata cache entry [8f] [ 293.829726][ T8017] SQUASHFS error: Unable to read inode 0x11f [ 294.906478][ T8028] loop4: detected capacity change from 0 to 512 [ 295.008526][ T8028] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.1132: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 295.117854][ T8028] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1132: couldn't read orphan inode 15 (err -117) [ 295.138818][ T8037] team0: Device bridge0 is up. Set it down before adding it as a team port [ 295.163714][ T8028] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.183496][ T8028] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038 (0x7fffffff) [ 295.400811][ T3542] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 295.673182][ T3542] usb 4-1: Using ep0 maxpacket: 32 [ 295.824412][ T3542] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 295.835879][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 295.865353][ T3542] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 295.906307][ T3542] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.956556][ T3542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.736676][ T8033] chnl_net:caif_netlink_parms(): no params data found [ 296.863389][ T8067] device veth2 entered promiscuous mode [ 296.986017][ T3583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.076269][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.087694][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.110447][ T8033] device bridge_slave_0 entered promiscuous mode [ 297.131643][ T3583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.157742][ T3494] Bluetooth: hci7: command 0x0409 tx timeout [ 297.176773][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.196973][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.214638][ T8033] device bridge_slave_1 entered promiscuous mode [ 297.313392][ T3583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.380931][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.419997][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.492402][ T3583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.553513][ T8033] team0: Port device team_slave_0 added [ 297.589174][ T8033] team0: Port device team_slave_1 added [ 297.690989][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.711035][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.783711][ T8083] loop4: detected capacity change from 0 to 512 [ 297.827501][ T8033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.932616][ T8083] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.1148: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 297.974798][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.993425][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.047217][ T8083] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1148: couldn't read orphan inode 15 (err -117) [ 298.095322][ T8083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.118864][ T3494] usb 4-1: USB disconnect, device number 3 [ 298.144251][ T8033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.167953][ T8083] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038 (0x7fffffff) [ 298.369992][ T8033] device hsr_slave_0 entered promiscuous mode [ 298.408158][ T8033] device hsr_slave_1 entered promiscuous mode [ 298.429173][ T8033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.492135][ T8033] Cannot create hsr debugfs directory [ 299.237486][ T3546] Bluetooth: hci7: command 0x041b tx timeout [ 301.147218][ T3546] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 301.223158][ T8033] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.240186][ T8142] binder_alloc: 8140: pid 8140 spamming oneway? 1 buffers allocated for a total size of 4096 [ 301.250814][ T8033] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.309107][ T3494] Bluetooth: hci7: command 0x040f tx timeout [ 301.407205][ T3546] usb 4-1: Using ep0 maxpacket: 32 [ 301.436111][ T8033] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.453237][ T8033] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.527560][ T3546] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 301.545294][ T3546] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.585775][ T3546] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 301.623515][ T3546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.685799][ T3583] device hsr_slave_0 left promiscuous mode [ 301.708013][ T3583] device hsr_slave_1 left promiscuous mode [ 301.729573][ T3546] hub 4-1:4.0: bad descriptor, ignoring hub [ 301.740319][ T3546] hub: probe of 4-1:4.0 failed with error -5 [ 301.782860][ T3546] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 301.839679][ T3583] device veth1_macvtap left promiscuous mode [ 301.863621][ T3583] device veth0_macvtap left promiscuous mode [ 301.890217][ T3583] device veth1_vlan left promiscuous mode [ 301.909921][ T3583] device veth0_vlan left promiscuous mode [ 302.125845][ T8118] loop4: detected capacity change from 0 to 40427 [ 302.255400][ T8118] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.382365][ T8118] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 302.458833][ T8118] attempt to access beyond end of device [ 302.458833][ T8118] loop4: rw=2049, want=45104, limit=40427 [ 302.774939][ T3583] bond0 (unregistering): Released all slaves [ 303.102479][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.167964][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.176116][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.237491][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.268257][ T3546] usb 4-1: USB disconnect, device number 4 [ 303.292138][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.318001][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.377429][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.384516][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.469066][ T7] Bluetooth: hci7: command 0x0419 tx timeout [ 303.482393][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.503079][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.522526][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.536444][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.543622][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.560359][ T8166] loop4: detected capacity change from 0 to 1024 [ 303.587762][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.643013][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.661366][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.696784][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.787683][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.819454][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.863328][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.873858][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.882683][ T3972] hfsplus: b-tree write err: -5, ino 4 [ 303.911578][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.974257][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.005771][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.028392][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.452549][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.466332][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.514405][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.598563][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.617488][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.689381][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.708348][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.747204][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.761088][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.790321][ T8033] device veth0_vlan entered promiscuous mode [ 304.838479][ T8033] device veth1_vlan entered promiscuous mode [ 305.086771][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 305.158479][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.186245][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 305.228575][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.262878][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.786236][ T8033] device veth0_macvtap entered promiscuous mode [ 305.813186][ T8033] device veth1_macvtap entered promiscuous mode [ 305.832789][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.867163][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.877031][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.935064][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.973727][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.996353][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.011805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.041930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.074397][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.099836][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.132728][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.166789][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.191026][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.217962][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.239796][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.271642][ T8033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.295221][ T8033] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.327020][ T8033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.344929][ T8033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.712350][ T4128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.741323][ T4128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.794462][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.852872][ T4128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.875844][ T4128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.905099][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.001472][ T8245] sp0: Synchronizing with TNC [ 307.964120][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997230][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997262][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997288][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997314][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997344][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997369][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997395][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997420][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997445][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997470][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997495][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997519][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997544][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997569][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997594][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997618][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997643][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997667][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997691][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997716][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997741][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997766][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997790][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997815][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997839][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997864][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997888][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997912][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997944][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997970][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.997995][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.998020][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.998045][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 307.998069][ T1068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 308.008120][ T1068] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 309.369520][ T8249] loop1: detected capacity change from 0 to 40427 [ 309.455448][ T8249] F2FS-fs (loop1): invalid crc value [ 309.499576][ T8249] F2FS-fs (loop1): Found nat_bits in checkpoint [ 309.709740][ T8249] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 309.729891][ T8249] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 309.733710][ T8284] sp0: Synchronizing with TNC [ 309.811708][ T8033] attempt to access beyond end of device [ 309.811708][ T8033] loop1: rw=2049, want=45112, limit=40427 [ 310.008997][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039792][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039822][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039844][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039866][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039888][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039911][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039933][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039975][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.039998][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040022][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040045][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040069][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040091][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040115][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040138][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040161][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040184][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040207][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040230][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040253][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040276][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040299][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040322][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040344][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040367][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040390][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040413][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040436][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040459][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040482][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040505][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040528][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040551][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.040574][ T3542] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 310.059133][ T3542] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 310.775145][ T8296] loop1: detected capacity change from 0 to 2048 [ 310.914698][ T8288] loop2: detected capacity change from 0 to 40427 [ 310.922822][ T8296] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 310.925430][ T8296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.996823][ T8288] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 310.996852][ T8288] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 311.021526][ T8288] F2FS-fs (loop2): invalid crc value [ 311.054837][ T8288] F2FS-fs (loop2): Found nat_bits in checkpoint [ 311.187375][ T8288] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 311.187425][ T8288] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 311.549196][ T8294] loop4: detected capacity change from 0 to 32768 [ 311.619009][ T8294] XFS: attr2 mount option is deprecated. [ 311.624725][ T8294] XFS: ikeep mount option is deprecated. [ 311.647250][ T8294] XFS: noikeep mount option is deprecated. [ 311.788476][ T8294] XFS (loop4): Mounting V5 Filesystem [ 311.900402][ T8317] loop3: detected capacity change from 0 to 256 [ 312.009471][ T8294] XFS (loop4): Ending clean mount [ 312.016377][ T8294] XFS (loop4): Quotacheck needed: Please wait. [ 312.028007][ T8317] exfat: Deprecated parameter 'utf8' [ 312.033857][ T8317] exfat: Deprecated parameter 'utf8' [ 312.061626][ T8317] exfat: Deprecated parameter 'utf8' [ 312.092596][ T8294] XFS (loop4): Quotacheck: Done. [ 312.110370][ T8317] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfa3b3837, utbl_chksum : 0xe619d30d) [ 312.229336][ T5689] XFS (loop4): Unmounting Filesystem [ 312.333466][ T8329] loop3: detected capacity change from 0 to 512 [ 312.528506][ T8329] EXT4-fs (loop3): 1 truncate cleaned up [ 312.534206][ T8329] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 313.572056][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 313.770871][ T8357] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 313.957210][ T4320] Bluetooth: hci6: command 0x0406 tx timeout [ 314.460243][ T8347] loop4: detected capacity change from 0 to 32768 [ 314.650019][ T8347] XFS (loop4): Mounting V5 Filesystem [ 314.768991][ T8359] loop3: detected capacity change from 0 to 32768 [ 314.788620][ T8359] XFS: attr2 mount option is deprecated. [ 314.794381][ T8359] XFS: ikeep mount option is deprecated. [ 314.801256][ T8359] XFS: noikeep mount option is deprecated. [ 314.876771][ T8359] XFS (loop3): Mounting V5 Filesystem [ 314.900031][ T8347] XFS (loop4): Ending clean mount [ 314.937642][ T8359] XFS (loop3): Ending clean mount [ 314.944449][ T8359] XFS (loop3): Quotacheck needed: Please wait. [ 315.047291][ T5689] XFS (loop4): Unmounting Filesystem [ 315.080456][ T8359] XFS (loop3): Quotacheck: Done. [ 315.164389][ T8375] loop1: detected capacity change from 0 to 8192 [ 315.218481][ T8375] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 315.244805][ T8375] REISERFS (device loop1): using ordered data mode [ 315.245908][ T7371] XFS (loop3): Unmounting Filesystem [ 315.253758][ T8375] reiserfs: using flush barriers [ 315.265357][ T8375] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 315.281883][ T8375] REISERFS (device loop1): checking transaction log (loop1) [ 315.339167][ T8368] loop2: detected capacity change from 0 to 40427 [ 315.400645][ T8368] F2FS-fs (loop2): Found nat_bits in checkpoint [ 315.455000][ T8368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 315.527969][ T8375] REISERFS (device loop1): Using tea hash to sort names [ 315.536150][ T8375] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 315.538415][ T8368] attempt to access beyond end of device [ 315.538415][ T8368] loop2: rw=2049, want=45104, limit=40427 [ 316.088109][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 316.211618][ T8409] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 316.467251][ T3576] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 316.591468][ T8424] loop1: detected capacity change from 0 to 2048 [ 316.674775][ T8424] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 316.690073][ T8424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.727168][ T3576] usb 4-1: Using ep0 maxpacket: 32 [ 316.857222][ T3576] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 316.879724][ T3576] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.923590][ T3576] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 316.954071][ T3576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.018286][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.024595][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.118370][ T3576] hub 4-1:4.0: bad descriptor, ignoring hub [ 317.137173][ T3576] hub: probe of 4-1:4.0 failed with error -5 [ 317.179284][ T3576] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 318.066639][ T8419] loop2: detected capacity change from 0 to 32768 [ 318.199683][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 318.215366][ T8419] XFS (loop2): Mounting V5 Filesystem [ 318.361023][ T8419] XFS (loop2): Ending clean mount [ 318.463131][ T4628] XFS (loop2): Unmounting Filesystem [ 318.522218][ T8449] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 319.273880][ T8461] loop2: detected capacity change from 0 to 2048 [ 319.313489][ T3545] usb 4-1: USB disconnect, device number 5 [ 319.547745][ T3583] Bluetooth: hci1: Frame reassembly failed (-84) [ 319.609399][ T8461] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 319.660887][ T3583] Bluetooth: hci1: Frame reassembly failed (-84) [ 320.048960][ T8461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.158830][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 320.158845][ T26] audit: type=1800 audit(1720608300.663:15): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1243" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 320.592176][ T8477] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 320.789678][ T8467] loop4: detected capacity change from 0 to 32768 [ 320.880493][ T8475] loop3: detected capacity change from 0 to 32768 [ 320.914179][ T8467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1244 (8467) [ 320.959934][ T8467] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 320.979027][ T8467] BTRFS info (device loop4): using free space tree [ 320.985598][ T8467] BTRFS info (device loop4): has skinny extents [ 320.996979][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 321.013505][ T8475] XFS (loop3): Mounting V5 Filesystem [ 321.154912][ T8467] BTRFS info (device loop4): enabling ssd optimizations [ 321.197976][ T8475] XFS (loop3): Ending clean mount [ 321.296804][ T7371] XFS (loop3): Unmounting Filesystem [ 321.557263][ T4320] Bluetooth: hci1: command 0x1003 tx timeout [ 321.563530][ T3505] Bluetooth: hci1: sending frame failed (-49) [ 322.312852][ T4320] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 322.607247][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 322.767513][ T4320] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 322.785996][ T4320] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.827186][ T4320] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 322.854640][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.972761][ T4320] hub 4-1:4.0: bad descriptor, ignoring hub [ 323.000036][ T4320] hub: probe of 4-1:4.0 failed with error -5 [ 323.021879][ T4320] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 323.637200][ T4320] Bluetooth: hci1: command 0x1001 tx timeout [ 323.644455][ T3505] Bluetooth: hci1: sending frame failed (-49) [ 323.793534][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 325.002345][ T8550] loop2: detected capacity change from 0 to 32768 [ 325.274327][ T3542] usb 4-1: USB disconnect, device number 6 [ 325.295339][ T8550] XFS (loop2): Mounting V5 Filesystem [ 325.484355][ T8550] XFS (loop2): Ending clean mount [ 325.576335][ T4628] XFS (loop2): Unmounting Filesystem [ 325.586508][ T8554] loop4: detected capacity change from 0 to 40427 [ 325.717194][ T3542] Bluetooth: hci1: command 0x1009 tx timeout [ 325.740981][ T8554] F2FS-fs (loop4): Found nat_bits in checkpoint [ 325.859637][ T8554] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 325.936593][ T8554] attempt to access beyond end of device [ 325.936593][ T8554] loop4: rw=2049, want=45104, limit=40427 [ 326.949906][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 327.921608][ T8602] loop4: detected capacity change from 0 to 32768 [ 327.973729][ T8602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1279 (8602) [ 328.025622][ T8602] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 328.057503][ T8602] BTRFS info (device loop4): using free space tree [ 328.069208][ T8608] loop3: detected capacity change from 0 to 32768 [ 328.085869][ T8602] BTRFS info (device loop4): has skinny extents [ 328.130427][ T8608] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.1282 (8608) [ 328.158409][ T3606] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (3606) [ 328.344562][ T8602] BTRFS info (device loop4): enabling ssd optimizations [ 328.979410][ T8618] loop3: detected capacity change from 0 to 40427 [ 329.337580][ T8618] F2FS-fs (loop3): Found nat_bits in checkpoint [ 329.915331][ T8618] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 330.015002][ T8618] attempt to access beyond end of device [ 330.015002][ T8618] loop3: rw=2049, want=45104, limit=40427 [ 330.570323][ T3959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.776186][ T3959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.011746][ T3959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.144092][ T3959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.249099][ T8659] chnl_net:caif_netlink_parms(): no params data found [ 331.389265][ T8658] loop2: detected capacity change from 0 to 32768 [ 331.437283][ T8658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1293 (8658) [ 331.576638][ T8658] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 331.681712][ T8658] BTRFS info (device loop2): using free space tree [ 331.707573][ T8658] BTRFS info (device loop2): has skinny extents [ 331.730275][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.744518][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.775782][ T8659] device bridge_slave_0 entered promiscuous mode [ 331.834749][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.879022][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.140313][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 332.306643][ T8659] device bridge_slave_1 entered promiscuous mode [ 332.688989][ T4036] Bluetooth: hci1: command 0x0409 tx timeout [ 332.789283][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.860347][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.877687][ T8658] BTRFS info (device loop2): enabling ssd optimizations [ 332.953338][ T8659] team0: Port device team_slave_0 added [ 332.974229][ T8659] team0: Port device team_slave_1 added [ 333.301728][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.346402][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.403899][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.460300][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.488036][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.587131][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.670461][ T8729] loop2: detected capacity change from 0 to 8192 [ 333.734805][ T8659] device hsr_slave_0 entered promiscuous mode [ 333.768840][ T8729] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 333.808162][ T8659] device hsr_slave_1 entered promiscuous mode [ 333.823321][ T8729] REISERFS (device loop2): using ordered data mode [ 333.830040][ T8729] reiserfs: using flush barriers [ 333.845233][ T8729] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 333.862994][ T8659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.872624][ T8729] REISERFS (device loop2): checking transaction log (loop2) [ 333.942574][ T8659] Cannot create hsr debugfs directory [ 333.998642][ T8729] REISERFS (device loop2): Using tea hash to sort names [ 334.006099][ T8729] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 334.118482][ T5775] Bluetooth: hci5: command 0x1003 tx timeout [ 334.134370][ T3508] Bluetooth: hci5: sending frame failed (-49) [ 334.165975][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 334.547763][ T3959] device hsr_slave_0 left promiscuous mode [ 334.558089][ T3959] device hsr_slave_1 left promiscuous mode [ 334.577834][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.605601][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.618514][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.636151][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.654682][ T3959] device bridge_slave_1 left promiscuous mode [ 334.670955][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.702517][ T3959] device bridge_slave_0 left promiscuous mode [ 334.717322][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.747164][ T5775] Bluetooth: hci1: command 0x041b tx timeout [ 334.765514][ T3959] device veth1_macvtap left promiscuous mode [ 334.778799][ T3959] device veth0_macvtap left promiscuous mode [ 334.802071][ T3959] device veth1_vlan left promiscuous mode [ 334.822448][ T3959] device veth0_vlan left promiscuous mode [ 335.498187][ T3959] team0 (unregistering): Port device team_slave_1 removed [ 335.533257][ T3959] team0 (unregistering): Port device team_slave_0 removed [ 335.571861][ T3959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.586566][ T8753] loop2: detected capacity change from 0 to 40427 [ 335.630781][ T3959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.729938][ T8753] F2FS-fs (loop2): Found nat_bits in checkpoint [ 335.756307][ T3959] bond0 (unregistering): Released all slaves [ 335.845241][ T8753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.897660][ T8753] attempt to access beyond end of device [ 335.897660][ T8753] loop2: rw=2049, want=45104, limit=40427 [ 336.187283][ T4384] Bluetooth: hci5: command 0x1001 tx timeout [ 336.193379][ T3508] Bluetooth: hci5: sending frame failed (-49) [ 336.458814][ T8659] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.525208][ T8659] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.585894][ T8659] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.623906][ T8659] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.837202][ T1065] Bluetooth: hci1: command 0x040f tx timeout [ 336.887872][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.964044][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.978410][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.992567][ T8659] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.050090][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.077893][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.086407][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.093551][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.136334][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.180045][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.207770][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.214897][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.274784][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 337.283323][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.339089][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.523654][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.533376][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.555068][ T8659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.959618][ T8659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.227585][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.236136][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.308039][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.356917][ T1065] Bluetooth: hci5: command 0x1009 tx timeout [ 338.390226][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.434481][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.484877][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.522334][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.564889][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 338.601705][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.903737][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.918056][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.918477][ T1065] Bluetooth: hci1: command 0x0419 tx timeout [ 338.962568][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.018754][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.034598][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.094294][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.113635][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.141671][ T8659] device veth0_vlan entered promiscuous mode [ 339.176932][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.186941][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.210440][ T8659] device veth1_vlan entered promiscuous mode [ 339.258021][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.336523][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.353795][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.366901][ T8659] device veth0_macvtap entered promiscuous mode [ 339.409016][ T8659] device veth1_macvtap entered promiscuous mode [ 339.507248][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.579189][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.607274][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.637972][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.660412][ T8843] loop2: detected capacity change from 0 to 2048 [ 339.669653][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.686014][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.696952][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.721065][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.747898][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.768859][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.780271][ T8843] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 339.817239][ T8843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.826231][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.867330][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.882026][ T26] audit: type=1800 audit(1720608320.383:16): pid=8843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1320" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 339.899043][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.956006][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.980905][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.001905][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.030603][ T8659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.049707][ T8659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.067140][ T3679] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 340.087431][ T8659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.121522][ T8659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.315142][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.323703][ T3679] usb 1-1: Using ep0 maxpacket: 16 [ 340.337755][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.375632][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.422239][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.447267][ T3679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.467183][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.483988][ T3679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.507138][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.535223][ T3679] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 340.584793][ T3679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.624301][ T3679] usb 1-1: config 0 descriptor?? [ 340.740589][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 341.257260][ T8876] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 342.637141][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 342.776260][ T3959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.877162][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 342.900017][ T3959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.997392][ T23] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.030741][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 343.051011][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.089540][ T3959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.142034][ T23] hub 2-1:4.0: bad descriptor, ignoring hub [ 343.160771][ T23] hub: probe of 2-1:4.0 failed with error -5 [ 343.182717][ T23] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 343.199049][ T3959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.615678][ T8896] chnl_net:caif_netlink_parms(): no params data found [ 343.790050][ T4384] Bluetooth: hci7: command 0x1003 tx timeout [ 343.796148][ T3505] Bluetooth: hci7: sending frame failed (-49) [ 343.977356][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.984470][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.024710][ T8896] device bridge_slave_0 entered promiscuous mode [ 344.070532][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.106544][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.125733][ T8896] device bridge_slave_1 entered promiscuous mode [ 344.279123][ T8896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.309707][ T8896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.424795][ T8896] team0: Port device team_slave_0 added [ 344.472097][ T8896] team0: Port device team_slave_1 added [ 344.567603][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.574604][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.602100][ T8936] loop2: detected capacity change from 0 to 2048 [ 344.619855][ T8896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.646496][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.665347][ T8936] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 344.682855][ T4384] Bluetooth: hci8: command 0x0409 tx timeout [ 344.697168][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.700451][ T8936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.773605][ T8896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.911178][ T26] audit: type=1800 audit(1720608325.413:17): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1331" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 344.956956][ T8896] device hsr_slave_0 entered promiscuous mode [ 344.973157][ T8896] device hsr_slave_1 entered promiscuous mode [ 344.998045][ T8896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.005652][ T8896] Cannot create hsr debugfs directory [ 345.437304][ T3576] usb 2-1: USB disconnect, device number 4 [ 345.593445][ T3959] device hsr_slave_0 left promiscuous mode [ 345.600081][ T3959] device hsr_slave_1 left promiscuous mode [ 345.669745][ T3959] device veth1_macvtap left promiscuous mode [ 345.675793][ T3959] device veth0_macvtap left promiscuous mode [ 345.724004][ T3959] device veth1_vlan left promiscuous mode [ 345.746086][ T3959] device veth0_vlan left promiscuous mode [ 345.867430][ T5775] Bluetooth: hci7: command 0x1001 tx timeout [ 345.877798][ T3505] Bluetooth: hci7: sending frame failed (-49) [ 346.107612][ T3679] usbhid 1-1:0.0: can't add hid device: -32 [ 346.119204][ T3679] usbhid: probe of 1-1:0.0 failed with error -32 [ 346.747256][ T5775] Bluetooth: hci8: command 0x041b tx timeout [ 347.297904][ T3959] bond0 (unregistering): Released all slaves [ 347.817741][ T8896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.861033][ T8896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.917815][ T8896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.953993][ T8896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.957367][ T1065] Bluetooth: hci7: command 0x1009 tx timeout [ 348.234120][ T8896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.293986][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.312174][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.335450][ T8896] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.388730][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.406016][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.435681][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.442907][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.508132][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.516144][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.586107][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.615657][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.622804][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.664746][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.708317][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.744962][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.773302][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.837160][ T5775] Bluetooth: hci8: command 0x040f tx timeout [ 348.839162][ T8896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.886024][ T8896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.976143][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.001853][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.035420][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.065669][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.102376][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.122540][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.170613][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.216928][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.510322][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.528134][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.569026][ T8896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.714275][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.765505][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.823045][ T8896] device veth0_vlan entered promiscuous mode [ 349.865174][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.878041][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.892042][ T8896] device veth1_vlan entered promiscuous mode [ 350.001256][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.016560][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.069218][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 350.087625][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 350.124137][ T8896] device veth0_macvtap entered promiscuous mode [ 350.155234][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.175763][ T9030] loop1: detected capacity change from 0 to 2048 [ 350.212146][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.271017][ T8896] device veth1_macvtap entered promiscuous mode [ 350.299719][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.315053][ T9003] loop4: detected capacity change from 0 to 32768 [ 350.316660][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.348402][ T9030] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 350.385827][ T9003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1341 (9003) [ 350.428593][ T9030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.475773][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.509802][ T9003] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 350.527950][ T26] audit: type=1800 audit(1720608331.033:18): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1346" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 350.547658][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.587487][ T9003] BTRFS info (device loop4): using free space tree [ 350.594035][ T9003] BTRFS info (device loop4): has skinny extents [ 350.637400][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.697531][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.777112][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.853360][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.887318][ T9003] BTRFS info (device loop4): enabling ssd optimizations [ 350.915833][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.917500][ T1065] Bluetooth: hci8: command 0x0419 tx timeout [ 350.945937][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.959811][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.042745][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.099567][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.179204][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.197370][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.217133][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.238424][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.262824][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.326904][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.347895][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.370403][ T8896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.407184][ T8896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.415933][ T8896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.447134][ T8896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.623323][ T4320] usb 1-1: USB disconnect, device number 7 [ 351.764287][ T9033] chnl_net:caif_netlink_parms(): no params data found [ 351.817954][ T4128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.826221][ T4128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.950373][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.187548][ T1065] Bluetooth: hci2: command 0x0409 tx timeout [ 352.203457][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.223387][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.427785][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.467021][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.474267][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.513383][ T9033] device bridge_slave_0 entered promiscuous mode [ 352.677305][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.684868][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.746721][ T9033] device bridge_slave_1 entered promiscuous mode [ 352.790187][ T9033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.923551][ T9033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.101771][ T9033] team0: Port device team_slave_0 added [ 353.112086][ T9099] loop1: detected capacity change from 0 to 1024 [ 353.121906][ T9033] team0: Port device team_slave_1 added [ 353.248676][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.266216][ T9099] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 353.300503][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.352055][ T9099] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,init_itable=0x0000000000000003,grpid,jqfmt=vfsold,nouid32,data_err=abort,,errors=continue. Quota mode: writeback. [ 353.369423][ T9033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.391571][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.398999][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.426426][ T9033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.690712][ T9033] device hsr_slave_0 entered promiscuous mode [ 353.713089][ T9033] device hsr_slave_1 entered promiscuous mode [ 353.736370][ T9033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.781532][ T9033] Cannot create hsr debugfs directory [ 354.307603][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 354.657955][ T9101] loop4: detected capacity change from 0 to 32768 [ 354.724372][ T9101] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1357 (9101) [ 354.766041][ T9033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.821621][ T9101] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 354.845843][ T9101] BTRFS info (device loop4): using free space tree [ 354.861224][ T9033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.867170][ T9101] BTRFS info (device loop4): has skinny extents [ 354.990464][ T9033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.168871][ T9101] BTRFS info (device loop4): enabling ssd optimizations [ 355.220725][ T9033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.516435][ T9145] loop2: detected capacity change from 0 to 64 [ 355.822306][ T9033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.864743][ T9033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.079335][ T9033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.105490][ T9033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.888469][ T4387] Bluetooth: hci2: command 0x040f tx timeout [ 356.976972][ T9163] loop3: detected capacity change from 0 to 1024 [ 357.068002][ T9163] EXT4-fs (loop3): Test dummy encryption mode enabled [ 357.078332][ T9163] EXT4-fs (loop3): Ignoring removed orlov option [ 357.130448][ T9163] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 357.262596][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.330348][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.340794][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.393380][ T9033] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.498079][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.527704][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.545092][ T9163] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 357.556584][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.563713][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.592330][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.623076][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.653239][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.660385][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.698978][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.754565][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.764091][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.798504][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.840040][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.874662][ T9161] loop4: detected capacity change from 0 to 32768 [ 357.906068][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.924249][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.943496][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.963741][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.001702][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.045901][ T9033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.083660][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.109330][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.137893][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.208015][ T3959] device hsr_slave_0 left promiscuous mode [ 358.214696][ T3959] device hsr_slave_1 left promiscuous mode [ 358.229341][ T9186] loop3: detected capacity change from 0 to 64 [ 358.277797][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.305811][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.317181][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.324847][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.407946][ T3959] device bridge_slave_1 left promiscuous mode [ 358.435290][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.469863][ T3959] device bridge_slave_0 left promiscuous mode [ 358.505649][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.540009][ T3959] device veth1_macvtap left promiscuous mode [ 358.566591][ T3959] device veth0_macvtap left promiscuous mode [ 358.605860][ T3959] device veth1_vlan left promiscuous mode [ 358.664011][ T3959] device veth0_vlan left promiscuous mode [ 358.842209][ T9181] loop1: detected capacity change from 0 to 32768 [ 358.918968][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 358.929787][ T9181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1374 (9181) [ 358.988656][ T9181] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 359.008954][ T9181] BTRFS info (device loop1): using free space tree [ 359.040422][ T9181] BTRFS info (device loop1): has skinny extents [ 359.222782][ T9181] BTRFS info (device loop1): enabling ssd optimizations [ 359.711391][ T3959] team0 (unregistering): Port device team_slave_1 removed [ 359.769591][ T3959] team0 (unregistering): Port device team_slave_0 removed [ 359.800874][ T3959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.830854][ T3959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.914739][ T3959] bond0 (unregistering): Released all slaves [ 359.973010][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 360.245104][ T9236] loop3: detected capacity change from 0 to 256 [ 360.288764][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.296250][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.318334][ T9236] FAT-fs (loop3): Unrecognized mount option "uni_xlate=1shortname=winnt" or missing value [ 360.345741][ T9239] loop2: detected capacity change from 0 to 64 [ 360.382131][ T9033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.518091][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.533252][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.572004][ T9033] device veth0_vlan entered promiscuous mode [ 360.629206][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.661175][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.700839][ T9033] device veth1_vlan entered promiscuous mode [ 360.748554][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.756451][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.788496][ T9236] loop3: detected capacity change from 0 to 8192 [ 360.795673][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.807971][ T9250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1393'. [ 360.875918][ T9236] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "hashed_relocationacl" for option "block-allocator" [ 360.875918][ T9236] [ 360.899184][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.948037][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.984335][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.020451][ T9033] device veth0_macvtap entered promiscuous mode [ 361.048549][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 361.083611][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.105575][ T9033] device veth1_macvtap entered promiscuous mode [ 361.207915][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.262984][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.292941][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.326093][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.354670][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.385654][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.425588][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.454457][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.466660][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.499197][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.534448][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.565023][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.597133][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.624606][ T9252] loop2: detected capacity change from 0 to 32768 [ 361.638208][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.654539][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.684345][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.702930][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.730228][ T9252] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1390 (9252) [ 361.753953][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.797470][ T9033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.832111][ T9033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.874211][ T9033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.915024][ T9033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.984564][ T9252] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 362.015006][ T9252] BTRFS info (device loop2): using free space tree [ 362.047229][ T9252] BTRFS info (device loop2): has skinny extents [ 362.054490][ T9272] loop1: detected capacity change from 0 to 64 [ 362.347182][ T9252] BTRFS info (device loop2): enabling ssd optimizations [ 362.365555][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.389849][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.492728][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.551787][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.578646][ T9236] loop3: detected capacity change from 0 to 32768 [ 362.597262][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.707820][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.727973][ T9236] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.1385 (9236) [ 362.784260][ T9236] overlayfs: missing 'lowerdir' [ 362.800452][ T3495] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (3495) [ 363.163535][ T9301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1403'. [ 363.335680][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 363.402464][ T9311] Cannot find set identified by id 0 to match [ 363.652493][ T9317] dccp_invalid_packet: P.CsCov 15 exceeds packet length 400 [ 364.180525][ T9296] loop4: detected capacity change from 0 to 40427 [ 364.312910][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 364.321954][ T9296] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 364.337184][ T9296] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 364.370518][ T9296] F2FS-fs (loop4): invalid crc value [ 364.415065][ T9296] F2FS-fs (loop4): Found nat_bits in checkpoint [ 364.632651][ T9296] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 364.651613][ T9296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 365.807095][ T9357] loop1: detected capacity change from 0 to 64 [ 365.935199][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 366.341686][ T9370] loop1: detected capacity change from 0 to 4096 [ 366.389834][ T9368] loop4: detected capacity change from 0 to 40427 [ 366.457134][ T9370] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 366.493659][ T9368] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 366.501605][ T9368] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 366.594729][ T9368] F2FS-fs (loop4): Found nat_bits in checkpoint [ 366.601751][ T9370] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 366.662387][ T9368] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 366.669567][ T9368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 367.847429][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 368.103808][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1434'. [ 368.324111][ T9407] loop4: detected capacity change from 0 to 4096 [ 368.324110][ T9414] loop2: detected capacity change from 0 to 256 [ 368.585245][ T9407] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 368.868606][ T1117] Bluetooth: hci0: Frame reassembly failed (-84) [ 370.185113][ T9414] FAT-fs (loop2): Unrecognized mount option "uni_xlate=1shortname=winnt" or missing value [ 370.226512][ T9407] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 370.594001][ T4320] Bluetooth: hci0: command 0x1003 tx timeout [ 370.607259][ T3508] Bluetooth: hci0: sending frame failed (-49) [ 370.639058][ T9414] loop2: detected capacity change from 0 to 8192 [ 370.669382][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1443'. [ 370.767210][ T9414] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "hashed_relocationacl" for option "block-allocator" [ 370.767210][ T9414] [ 371.103635][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1446'. [ 371.730851][ T9414] loop2: detected capacity change from 0 to 32768 [ 371.828453][ T9414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1439 (9414) [ 371.862647][ T9414] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 371.899593][ T9414] BTRFS info (device loop2): using free space tree [ 371.919988][ T9414] BTRFS info (device loop2): has skinny extents [ 372.217210][ T9414] BTRFS error (device loop2): open_ctree failed [ 372.684950][ T3673] Bluetooth: hci0: command 0x1001 tx timeout [ 372.834253][ T3508] Bluetooth: hci0: sending frame failed (-49) [ 373.669432][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 373.820720][ T26] audit: type=1326 audit(1720608354.323:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669c863bd9 code=0x7ffc0000 [ 373.886134][ T26] audit: type=1326 audit(1720608354.323:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f669c863bd9 code=0x7ffc0000 [ 373.968331][ T26] audit: type=1326 audit(1720608354.323:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669c863bd9 code=0x7ffc0000 [ 374.034429][ T26] audit: type=1326 audit(1720608354.323:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f669c863bd9 code=0x7ffc0000 [ 374.123170][ T26] audit: type=1326 audit(1720608354.323:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669c863bd9 code=0x7ffc0000 [ 374.195329][ T26] audit: type=1326 audit(1720608354.323:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f669c863bd9 code=0x7ffc0000 [ 374.271009][ T26] audit: type=1326 audit(1720608354.323:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f669c863c13 code=0x7ffc0000 [ 374.348394][ T26] audit: type=1326 audit(1720608354.733:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f669c86275f code=0x7ffc0000 [ 374.406813][ T9469] loop2: detected capacity change from 0 to 40427 [ 374.546300][ T9469] F2FS-fs (loop2): Found nat_bits in checkpoint [ 374.629541][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 374.730700][ T26] audit: type=1326 audit(1720608355.233:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f669c863c67 code=0x7ffc0000 [ 374.753157][ T9469] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 374.762859][ T9490] loop4: detected capacity change from 0 to 32768 [ 374.783396][ T26] audit: type=1326 audit(1720608355.273:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f669c862610 code=0x7ffc0000 [ 374.907256][ T3673] Bluetooth: hci0: command 0x1009 tx timeout [ 375.944451][ T9510] loop2: detected capacity change from 0 to 32768 [ 376.504416][ T9521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.512290][ T9521] IPv6: NLM_F_CREATE should be set when creating new route [ 377.292526][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'. [ 377.358156][ T9535] loop1: detected capacity change from 0 to 512 [ 377.587759][ T9535] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 377.620363][ T9535] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038 (0x7fffffff) [ 378.236048][ T9542] loop4: detected capacity change from 0 to 40427 [ 378.351257][ T9542] F2FS-fs (loop4): Found nat_bits in checkpoint [ 378.496557][ T9542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 378.711116][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.717559][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.411001][ T9561] chnl_net:caif_netlink_parms(): no params data found [ 379.563666][ T3706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.612656][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 379.638950][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.646075][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.678332][ T9561] device bridge_slave_0 entered promiscuous mode [ 379.691023][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.699041][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.714872][ T9561] device bridge_slave_1 entered promiscuous mode [ 379.778028][ T3706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.416982][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.681685][ T3706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.771557][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.827492][ T3679] Bluetooth: hci5: command 0x0409 tx timeout [ 380.937438][ T3706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.042236][ T9561] team0: Port device team_slave_0 added [ 381.080716][ T9561] team0: Port device team_slave_1 added [ 381.292343][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.304820][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.392319][ T9561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.416205][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 381.457295][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 381.463932][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 381.470544][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 381.477079][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 381.483636][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.491586][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.499665][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.507605][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.515562][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.523484][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.531482][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.539403][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.547396][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.555294][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.563285][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.571210][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.579206][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.587191][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.595152][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.603113][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.611097][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.619043][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.626995][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.634942][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.642935][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.650865][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.658882][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.666787][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.674780][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.682708][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.690733][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.698688][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.706656][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.714602][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.722598][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.730740][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.738735][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.746745][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.754751][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.762684][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.770685][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.778610][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.786594][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.794555][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.802536][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.810484][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.818466][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.826371][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.834383][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.842319][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.850331][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.858270][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.866233][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.874184][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.882178][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.890126][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.898103][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.906006][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.914007][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.922017][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 381.930009][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 381.937956][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 382.028677][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.057187][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.114118][ T9609] loop4: detected capacity change from 0 to 32768 [ 382.157083][ T9561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.398869][ T9561] device hsr_slave_0 entered promiscuous mode [ 382.417789][ T9561] device hsr_slave_1 entered promiscuous mode [ 382.434710][ T9561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.466755][ T9561] Cannot create hsr debugfs directory [ 382.925943][ T4384] Bluetooth: hci5: command 0x041b tx timeout [ 384.051036][ T9653] loop2: detected capacity change from 0 to 8 [ 384.718404][ T9661] loop4: detected capacity change from 0 to 65536 [ 384.960074][ T9661] XFS (loop4): Mounting V5 Filesystem [ 384.997169][ T4384] Bluetooth: hci5: command 0x040f tx timeout [ 385.148792][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 385.158946][ T9661] XFS (loop4): Ending clean mount [ 385.215510][ T9661] XFS (loop4): Quotacheck needed: Please wait. [ 385.347479][ T9661] XFS (loop4): Quotacheck: Done. [ 385.363981][ T9690] loop2: detected capacity change from 0 to 16 [ 385.540204][ T9561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 385.571006][ T9690] erofs: (device loop2): mounted with root inode @ nid 36. [ 386.377021][ T9561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.595907][ T9561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.676026][ T9561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.068578][ T4318] Bluetooth: hci5: command 0x0419 tx timeout [ 387.158277][ T3706] device hsr_slave_0 left promiscuous mode [ 387.170072][ T3706] device hsr_slave_1 left promiscuous mode [ 387.187758][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.218394][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.247841][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.255279][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.303950][ T3706] device bridge_slave_1 left promiscuous mode [ 387.332510][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.378693][ T3706] device bridge_slave_0 left promiscuous mode [ 387.384962][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.571768][ T9688] loop1: detected capacity change from 0 to 32768 [ 387.701545][ T5689] XFS (loop4): Unmounting Filesystem [ 387.920961][ T9688] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 387.957668][ T9688] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 387.987280][ T3706] device veth1_macvtap left promiscuous mode [ 387.993353][ T3706] device veth0_macvtap left promiscuous mode [ 387.993953][ T9688] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 388.010446][ T3706] device veth1_vlan left promiscuous mode [ 388.016262][ T3706] device veth0_vlan left promiscuous mode [ 388.046445][ T3542] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 388.056755][ T3542] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 388.193503][ T3542] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms [ 388.210548][ T3542] gfs2: fsid=syz:syz.0: jid=0: Done [ 388.225201][ T9688] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 388.255914][ T9688] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 389.387269][ T9729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.420919][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 389.458412][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 389.475775][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.514422][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.632460][ T3706] bond0 (unregistering): Released all slaves [ 389.718235][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.768035][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.775866][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.810960][ T9561] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.857888][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 389.870796][ T9735] loop2: detected capacity change from 0 to 512 [ 389.887068][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.896238][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.903331][ T9149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.125246][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 390.147907][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 390.161088][ T9735] EXT4-fs (loop2): 1 truncate cleaned up [ 390.177195][ T9735] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 390.257378][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 390.317707][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.324799][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.365434][ T9737] loop4: detected capacity change from 0 to 65536 [ 390.409838][ T9735] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz.2.1518: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 390.423672][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 390.494619][ T9735] EXT4-fs (loop2): Remounting filesystem read-only [ 390.556659][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 390.563333][ T9737] XFS (loop4): Mounting V5 Filesystem [ 390.598913][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 390.679013][ T9737] XFS (loop4): Ending clean mount [ 390.747656][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 390.758689][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 390.818421][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 390.872799][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 390.915805][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 390.933093][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.953946][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 390.993911][ T9149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 391.028066][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 391.080704][ T9737] XFS (loop4): Quotacheck needed: Please wait. [ 391.097325][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 391.221091][ T9737] XFS (loop4): Quotacheck: Done. [ 391.404606][ T9783] loop1: detected capacity change from 0 to 8192 [ 392.372856][ T9783] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 392.497271][ T9783] REISERFS (device loop1): using ordered data mode [ 392.503819][ T9783] reiserfs: using flush barriers [ 392.527025][ T9783] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 392.597722][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 392.605315][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 392.650879][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.669984][ T9783] REISERFS (device loop1): checking transaction log (loop1) [ 392.817632][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.836654][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.907203][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.962491][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.008730][ T9561] device veth0_vlan entered promiscuous mode [ 393.239238][ T9561] device veth1_vlan entered promiscuous mode [ 393.710098][ T9783] REISERFS (device loop1): Using tea hash to sort names [ 393.727771][ T9783] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 393.763372][ T9561] device veth0_macvtap entered promiscuous mode [ 393.825151][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.851462][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.868057][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 393.886060][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 393.895602][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.916767][ T9802] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 393.958944][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.975925][ T9802] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 394.000407][ T9561] device veth1_macvtap entered promiscuous mode [ 394.014973][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 394.024662][ T9783] REISERFS warning: vs-16090 direntry_bytes_number: bytes number is asked for direntry [ 394.205076][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.296967][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.344145][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.378922][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.417092][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.457388][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.497757][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.526517][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 394.535663][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.549342][ T5689] XFS (loop4): Unmounting Filesystem [ 394.570248][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.587836][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.632746][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.653557][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.678906][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.709753][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.750110][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.769157][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 394.787891][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.851189][ T9561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.905296][ T9561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.947070][ T9561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.967196][ T9561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.158036][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.172157][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.204832][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 395.242943][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.273623][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.321011][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 395.670392][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'. [ 396.218345][ T9808] loop2: detected capacity change from 0 to 40427 [ 396.313520][ T9820] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.947630][ T9808] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 396.955329][ T9808] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 397.068065][ T9808] F2FS-fs (loop2): invalid crc value [ 397.138746][ T9808] F2FS-fs (loop2): Found nat_bits in checkpoint [ 397.424105][ T9808] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 397.457159][ T9808] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 398.617089][ T4323] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 398.888523][ T4323] usb 1-1: Using ep0 maxpacket: 32 [ 398.967548][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 399.033968][ T4323] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.065404][ T4323] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.116175][ T4323] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 399.166762][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.196870][ T9856] loop2: detected capacity change from 0 to 2048 [ 399.229352][ T4323] hub 1-1:4.0: USB hub found [ 399.290709][ T9856] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 399.344698][ T9856] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.451392][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 399.451407][ T26] audit: type=1800 audit(1720608379.953:44): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1547" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 399.507225][ T4323] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 399.578367][ T4323] usb 1-1: USB disconnect, device number 8 [ 399.695312][ T9847] loop3: detected capacity change from 0 to 40427 [ 399.858991][ T9847] F2FS-fs (loop3): Found nat_bits in checkpoint [ 400.065322][ T9847] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 400.157743][ T9561] attempt to access beyond end of device [ 400.157743][ T9561] loop3: rw=2049, want=45104, limit=40427 [ 401.251679][ T9867] loop2: detected capacity change from 0 to 32768 [ 401.329712][ T9867] XFS: attr2 mount option is deprecated. [ 401.336026][ T9867] XFS: ikeep mount option is deprecated. [ 401.370634][ T9867] XFS: noikeep mount option is deprecated. [ 401.530224][ T9867] XFS (loop2): Mounting V5 Filesystem [ 401.707593][ T9867] XFS (loop2): Ending clean mount [ 401.725205][ T9867] XFS (loop2): Quotacheck needed: Please wait. [ 401.832614][ T9867] XFS (loop2): Quotacheck: Done. [ 401.935025][ T4628] XFS (loop2): Unmounting Filesystem [ 402.202461][ T9881] chnl_net:caif_netlink_parms(): no params data found [ 402.528473][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.535566][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.593580][ T9881] device bridge_slave_0 entered promiscuous mode [ 402.619457][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.657316][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.717226][ T9881] device bridge_slave_1 entered promiscuous mode [ 402.784057][ T9881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.832907][ T9881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.901825][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 402.976054][ T9881] team0: Port device team_slave_0 added [ 403.031164][ T9881] team0: Port device team_slave_1 added [ 403.119141][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.126190][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.226506][ T9897] loop4: detected capacity change from 0 to 40427 [ 403.232560][ T9913] loop2: detected capacity change from 0 to 2048 [ 403.261694][ T9881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.309034][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.322748][ T9897] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 403.326680][ T9913] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 403.338844][ T9897] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 403.350683][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.399643][ T9897] F2FS-fs (loop4): invalid crc value [ 403.420298][ T9913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.459686][ T26] audit: type=1800 audit(1720608383.963:45): pid=9913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1559" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 403.467370][ T9881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.494773][ T9897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 403.547622][ T4316] Bluetooth: hci0: command 0x0409 tx timeout [ 403.659840][ T9881] device hsr_slave_0 entered promiscuous mode [ 403.687904][ T9897] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 403.702199][ T9881] device hsr_slave_1 entered promiscuous mode [ 403.719552][ T9881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.745487][ T9881] Cannot create hsr debugfs directory [ 403.817200][ T9897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 405.036626][ T9881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.238596][ T9881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.446401][ T9881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.589609][ T9881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.637559][ T4323] Bluetooth: hci0: command 0x041b tx timeout [ 405.906558][ T9881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.948413][ T9881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.998294][ T9881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 406.076860][ T9881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 406.412907][ T9881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.465310][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.474668][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.867757][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.027548][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.036212][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.229097][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.236205][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.244990][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.253821][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.262794][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.269903][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.718096][ T4316] Bluetooth: hci0: command 0x040f tx timeout [ 407.969342][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.978357][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.987314][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.996688][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.019754][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.204144][ T3304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.215967][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.224550][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.253945][ T9881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.785045][ T9881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.066532][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.101027][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.138131][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.146596][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.309964][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.682558][ T9881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.718516][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.736478][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.789198][ T4316] Bluetooth: hci0: command 0x0419 tx timeout [ 409.820120][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.836609][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.897982][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.916618][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.948139][ T9881] device veth0_vlan entered promiscuous mode [ 409.957766][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.965521][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.029773][ T9881] device veth1_vlan entered promiscuous mode [ 410.108100][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.116136][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.158385][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.166963][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.230215][ T9881] device veth0_macvtap entered promiscuous mode [ 410.268655][ T9881] device veth1_macvtap entered promiscuous mode [ 410.327721][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.342879][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.414723][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.448224][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.497239][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.537055][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.577110][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.597825][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.628219][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.669407][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.710139][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.750007][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.760737][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.811168][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.847057][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.897101][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.937105][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.967201][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.997071][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.006918][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.021461][ T9981] loop2: detected capacity change from 0 to 40427 [ 411.047080][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.101823][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.132424][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.143319][ T9981] F2FS-fs (loop2): Found nat_bits in checkpoint [ 411.171804][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.213334][ T9881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.227080][ T9881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.237724][ T9881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.246450][ T9881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.309987][ T9981] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 411.439337][ T4628] attempt to access beyond end of device [ 411.439337][ T4628] loop2: rw=2049, want=45104, limit=40427 [ 411.509654][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.524108][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.555107][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.594087][ T4128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.629923][ T4128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.673160][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 413.630360][T10035] loop2: detected capacity change from 0 to 2048 [ 413.731925][T10035] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 413.767241][T10035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.834510][ T26] audit: type=1800 audit(1720608394.333:46): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1593" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 416.250859][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 417.390855][T10064] loop4: detected capacity change from 0 to 32768 [ 417.489183][T10064] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 417.489183][T10064] [ 417.489600][T10064] ERROR: (device loop4): remounting filesystem as read-only [ 418.237234][ T3673] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 418.477094][ T3673] usb 1-1: Using ep0 maxpacket: 32 [ 418.481839][T10078] loop3: detected capacity change from 0 to 32768 [ 418.597320][ T3673] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.627233][ T3673] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.685175][ T3673] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 418.717178][ T3673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.788255][ T3673] hub 1-1:4.0: USB hub found [ 419.893389][T10086] loop4: detected capacity change from 0 to 40427 [ 419.895507][ T27] INFO: task kworker/0:19:4463 blocked for more than 143 seconds. [ 419.907838][ T3673] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 419.958238][ T3673] usb 1-1: USB disconnect, device number 9 [ 419.962713][ T27] Not tainted 5.15.162-syzkaller #0 [ 420.009648][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.028024][ T27] task:kworker/0:19 state:D stack:25408 pid: 4463 ppid: 2 flags:0x00004000 [ 420.064575][ T27] Workqueue: events_long flush_old_commits [ 420.080898][ T27] Call Trace: [ 420.084010][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 420.084208][ T27] [ 420.084223][ T27] __schedule+0x12c4/0x45b0 [ 420.164872][ T27] ? mark_lock+0x98/0x340 [ 420.187053][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 420.193091][ T27] ? release_firmware_map_entry+0x190/0x190 [ 420.237055][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 420.242636][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 420.257091][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 420.262333][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 420.297179][ T27] schedule+0x11b/0x1f0 [ 420.301396][ T27] schedule_preempt_disabled+0xf/0x20 [ 420.306788][ T27] __mutex_lock_common+0xe34/0x25a0 [ 420.337063][ T27] ? reiserfs_write_lock+0x76/0xd0 [ 420.342257][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 420.367154][ T27] ? dquot_writeback_dquots+0x979/0xa50 [ 420.372757][ T27] ? dqput+0x440/0x440 [ 420.376843][ T27] mutex_lock_nested+0x17/0x20 [ 420.417147][ T27] reiserfs_write_lock+0x76/0xd0 [ 420.422252][ T27] flush_old_commits+0x1df/0x2e0 [ 420.444606][ T27] ? reiserfs_fill_super+0x2690/0x2690 [ 420.450845][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 420.467173][ T27] process_one_work+0x8a1/0x10c0 [ 420.472253][ T27] ? worker_detach_from_pool+0x260/0x260 [ 420.484851][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 420.507122][ T27] ? kthread_data+0x4e/0xc0 [ 420.638202][ T27] ? wq_worker_running+0x97/0x170 [ 420.681181][ T27] worker_thread+0xaca/0x1280 [ 420.711254][ T27] kthread+0x3f6/0x4f0 [ 420.732156][ T27] ? rcu_lock_release+0x20/0x20 [ 420.757868][ T27] ? kthread_blkcg+0xd0/0xd0 [ 420.788112][ T27] ret_from_fork+0x1f/0x30 [ 420.813411][ T27] [ 420.831222][ T27] [ 420.831222][ T27] Showing all locks held in the system: [ 420.890674][ T27] 1 lock held by khungtaskd/27: [ 420.924773][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 420.975553][ T27] 3 locks held by kworker/u4:4/1130: [ 421.014897][ T27] #0: ffff8880b9a3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 421.047944][ T27] #1: ffffc90004cdfd20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 421.088800][ T27] #2: ffff88801ec05c58 (key#17){+...}-{2:2}, at: rcu_lock_acquire+0x5/0x30 [ 421.117094][ T27] 2 locks held by udevd/2962: [ 421.121799][ T27] #0: ffff88801b4ae118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 421.147042][ T27] #1: ffff88801b4e0468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 421.166269][ T27] 2 locks held by getty/3263: [ 421.171180][ T27] #0: ffff888024373098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 421.207040][ T27] #1: ffffc900024b32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 421.237063][ T27] 2 locks held by kworker/1:9/3673: [ 421.242291][ T27] #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 421.283142][ T27] #1: ffffc90003267d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 421.318618][ T27] 3 locks held by kworker/1:16/4122: [ 421.323951][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 421.377087][ T27] #1: ffffc900037b7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 421.397040][ T27] #2: ffffffff8d9e8088 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 421.427065][ T27] 3 locks held by kworker/0:10/4316: [ 421.432370][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 421.487062][ T27] #1: ffffc9000126fd20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 421.517124][ T27] #2: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 421.547287][ T27] 4 locks held by kworker/0:19/4463: [ 421.552591][ T27] #0: ffff888011c71138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 421.597042][ T27] #1: ffffc90004797d20 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 421.638302][ T27] #2: ffff88807768c0e0 (&type->s_umount_key#72){++++}-{3:3}, at: flush_old_commits+0xc7/0x2e0 [ 421.667102][ T27] #3: ffff88807979d090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 421.676568][ T27] 4 locks held by kworker/0:21/5775: [ 421.697055][ T27] #0: ffff888011c71138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 421.708035][ T27] #1: ffffc900032e7d20 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 421.737175][ T27] #2: ffff8880682940e0 (&type->s_umount_key#72){++++}-{3:3}, at: flush_old_commits+0xc7/0x2e0 [ 421.767080][ T27] #3: ffff888070cee090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 421.776517][ T27] 4 locks held by syz.0.1018/7640: [ 421.815418][ T27] 4 locks held by syz.1.1527/9783: [ 421.820632][ T27] 1 lock held by syz.4.1608/10086: [ 421.825745][ T27] #0: ffff88801b4ae118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 421.858360][ T27] 1 lock held by syz.2.1610/10092: [ 421.863499][ T27] #0: ffffffff8d9e8088 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 421.894869][ T27] 1 lock held by syz.2.1610/10106: [ 421.900058][ T27] 2 locks held by syz.1.1615/10105: [ 421.905270][ T27] #0: ffffffff8d9e8088 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 421.944577][ T27] #1: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 421.992601][ T27] [ 422.011526][ T27] ============================================= [ 422.011526][ T27] [ 422.037992][T10086] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 422.044667][ T27] NMI backtrace for cpu 1 [ 422.045754][T10086] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 422.050076][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.162-syzkaller #0 [ 422.050095][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 422.050106][ T27] Call Trace: [ 422.050112][ T27] [ 422.050119][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 422.087135][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 422.092782][ T27] ? panic+0x860/0x860 [ 422.096863][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 422.102012][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 422.106979][ T27] ? __wake_up_klogd+0xd5/0x100 [ 422.111847][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 422.118032][ T27] ? _printk+0xd1/0x120 [ 422.122211][ T27] ? panic+0x860/0x860 [ 422.126295][ T27] ? __wake_up_klogd+0xcc/0x100 [ 422.131147][ T27] ? panic+0x860/0x860 [ 422.135238][ T27] ? __rcu_read_unlock+0x92/0x100 [ 422.140266][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 422.146339][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 422.152328][ T27] watchdog+0xe72/0xeb0 [ 422.156499][ T27] kthread+0x3f6/0x4f0 [ 422.160572][ T27] ? hungtask_pm_notify+0x50/0x50 [ 422.165599][ T27] ? kthread_blkcg+0xd0/0xd0 [ 422.170196][ T27] ret_from_fork+0x1f/0x30 [ 422.174639][ T27] [ 422.178336][ T27] Sending NMI from CPU 1 to CPUs 0: [ 422.183550][ C0] NMI backtrace for cpu 0 [ 422.183560][ C0] CPU: 0 PID: 9783 Comm: syz.1.1527 Not tainted 5.15.162-syzkaller #0 [ 422.183574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 422.183591][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 422.183629][ C0] Code: 8d 42 28 4c 39 d0 77 22 89 f8 89 f6 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 49 ff c1 4c 89 09 0f 1f 00 4c 8b 04 24 65 48 8b 0d 74 10 82 7e 65 8b 05 75 10 82 [ 422.183655][ C0] RSP: 0018:ffffc900033a69d8 EFLAGS: 00000297 [ 422.183668][ C0] RAX: 0000000000000002 RBX: 0000000000000003 RCX: 0000000000040000 [ 422.183677][ C0] RDX: ffff8880204f9dc0 RSI: 0000000000000003 RDI: 0000000000000010 [ 422.183687][ C0] RBP: ffffc900033a6b20 R08: ffffffff820d47a1 R09: 00000000ffffffff [ 422.183697][ C0] R10: 0000000000000004 R11: ffff8880204f9dc0 R12: 0000000000000fe8 [ 422.183706][ C0] R13: 0000000000001018 R14: 1ffff1100e53e010 R15: 0000000000000000 [ 422.183716][ C0] FS: 00007facd31686c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 422.183728][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.183738][ C0] CR2: 00007f669c846de0 CR3: 00000000236e2000 CR4: 00000000003506f0 [ 422.183750][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.183758][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.183766][ C0] Call Trace: [ 422.183793][ C0] [ 422.183798][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 422.183816][ C0] ? read_lock_is_recursive+0x10/0x10 [ 422.183833][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 422.183850][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 422.183889][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 422.183905][ C0] ? nmi_handle+0xf7/0x370 [ 422.183922][ C0] ? __sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 422.183941][ C0] ? default_do_nmi+0x62/0x150 [ 422.183960][ C0] ? exc_nmi+0xa8/0x100 [ 422.183975][ C0] ? end_repeat_nmi+0x16/0x31 [ 422.183994][ C0] ? get_num_ver+0x481/0x1150 [ 422.184015][ C0] ? __sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 422.184034][ C0] ? __sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 422.184053][ C0] ? __sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 422.184091][ C0] [ 422.184095][ C0] [ 422.184099][ C0] get_num_ver+0x481/0x1150 [ 422.184125][ C0] ? is_leaf_removable+0x8c0/0x8c0 [ 422.184150][ C0] fix_nodes+0x2967/0x8c70 [ 422.184168][ C0] ? __might_sleep+0xc0/0xc0 [ 422.184203][ C0] ? make_empty_dir_item+0x790/0x790 [ 422.184228][ C0] ? reiserfs_paste_into_item+0x3ef/0x880 [ 422.184247][ C0] reiserfs_paste_into_item+0x65d/0x880 [ 422.184271][ C0] ? reiserfs_cut_from_item+0x2560/0x2560 [ 422.184329][ C0] ? __kmalloc+0x168/0x300 [ 422.184348][ C0] reiserfs_get_block+0x226a/0x5390 [ 422.184394][ C0] ? make_le_item_head+0x5c0/0x5c0 [ 422.184412][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 422.184433][ C0] ? mark_lock+0x98/0x340 [ 422.184450][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 422.184486][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 422.184500][ C0] ? alloc_buffer_head+0xd3/0xf0 [ 422.184519][ C0] ? alloc_page_buffers+0x54a/0x660 [ 422.184544][ C0] ? create_page_buffers+0x24b/0x330 [ 422.184564][ C0] __block_write_begin_int+0x60b/0x1650 [ 422.184593][ C0] ? make_le_item_head+0x5c0/0x5c0 [ 422.184610][ C0] ? page_zero_new_buffers+0x510/0x510 [ 422.184628][ C0] ? fault_in_readable+0x206/0x2e0 [ 422.184647][ C0] ? fix_tail_page_for_writing+0x97/0x220 [ 422.184667][ C0] reiserfs_write_begin+0x346/0x810 [ 422.184690][ C0] generic_perform_write+0x2bf/0x5b0 [ 422.184716][ C0] ? grab_cache_page_write_begin+0x90/0x90 [ 422.184735][ C0] ? file_remove_privs+0x610/0x610 [ 422.184758][ C0] __generic_file_write_iter+0x243/0x4f0 [ 422.184839][ C0] generic_file_write_iter+0xa7/0x1b0 [ 422.184863][ C0] vfs_write+0xacf/0xe50 [ 422.184886][ C0] ? file_end_write+0x250/0x250 [ 422.184907][ C0] ? __fget_files+0x413/0x480 [ 422.184929][ C0] ? mutex_lock_nested+0x17/0x20 [ 422.184947][ C0] ? __fdget_pos+0x2cb/0x380 [ 422.184963][ C0] ? ksys_write+0x77/0x2c0 [ 422.184981][ C0] ksys_write+0x1a2/0x2c0 [ 422.185009][ C0] ? print_irqtrace_events+0x210/0x210 [ 422.185027][ C0] ? __ia32_sys_read+0x80/0x80 [ 422.185045][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 422.185063][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 422.185082][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 422.185102][ C0] do_syscall_64+0x3b/0xb0 [ 422.185117][ C0] ? clear_bhb_loop+0x15/0x70 [ 422.185133][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.185149][ C0] RIP: 0033:0x7facd46e7bd9 [ 422.185165][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.185184][ C0] RSP: 002b:00007facd3168048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.185205][ C0] RAX: ffffffffffffffda RBX: 00007facd4875f60 RCX: 00007facd46e7bd9 [ 422.185218][ C0] RDX: 0000000000000018 RSI: 00000000200002c0 RDI: 0000000000000005 [ 422.185227][ C0] RBP: 00007facd4756e60 R08: 0000000000000000 R09: 0000000000000000 [ 422.185237][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.185247][ C0] R13: 000000000000004d R14: 00007facd4875f60 R15: 00007ffe724e4408 [ 422.185265][ C0] [ 422.219778][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 422.267353][T10086] F2FS-fs (loop4): invalid crc value [ 422.273942][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.162-syzkaller #0 [ 422.282659][T10086] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 422.290820][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 422.290847][ T27] Call Trace: [ 422.290854][ T27] [ 422.290862][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 422.755115][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 422.760746][ T27] ? panic+0x860/0x860 [ 422.764820][ T27] panic+0x318/0x860 [ 422.768708][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 422.774330][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 422.780477][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 422.785669][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 422.791745][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 422.797892][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 422.804056][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 422.810204][ T27] watchdog+0xeb0/0xeb0 [ 422.814363][ T27] kthread+0x3f6/0x4f0 [ 422.818426][ T27] ? hungtask_pm_notify+0x50/0x50 [ 422.823443][ T27] ? kthread_blkcg+0xd0/0xd0 [ 422.828024][ T27] ret_from_fork+0x1f/0x30 [ 422.832453][ T27] [ 422.835747][ T27] Kernel Offset: disabled [ 422.840072][ T27] Rebooting in 86400 seconds..