last executing test programs: 7.349416339s ago: executing program 0 (id=690): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b48090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f390068090890e0878f0e1ac6e7049b074a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000095802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 6.893465429s ago: executing program 0 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x300) 6.159029721s ago: executing program 0 (id=697): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3}}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 5.988666277s ago: executing program 2 (id=700): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.856571317s ago: executing program 0 (id=704): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r0 = creat(&(0x7f0000001840)='./file2\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0\x00', 0x0) 5.809063584s ago: executing program 4 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0xee01) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x2}, 0x20) 5.777401059s ago: executing program 4 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x300) 5.719236347s ago: executing program 2 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) 5.717293288s ago: executing program 4 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff1106"]) 5.632514811s ago: executing program 2 (id=712): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) 5.631056551s ago: executing program 1 (id=713): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000800)='./file2\x00', 0x100400b, &(0x7f00000000c0), 0x1, 0x769, &(0x7f0000000fc0)="$eJzs3c9rHOUbAPBnZvOraftN+qVUK4ILHiqom6a2/jq1VRSqiKh4bki3pXTblCSCiQVTjx5EUPCo/hcFL714FjxUvepJoUi1l4qyMruzTUh2kxA2O+p8PjDb9513t8/7ZEiemZ1l3wBKq5o9pBGHI+JsEjGR708iYrjVGoo42X7evTvXZv+4c202iWbzzV+T1nOyfbHmNZm9eWcsIr49ncT/KxvjLiwtX5ppNOrzeX9q8fLVqYWl5ScvXp65UL9Qv3Ls+InpZ048+/Tx5/qVauXQmSdeO/TBC7e+ar7x8ovfnFhJssSG2oNr8+iXalTv/0zWykK+1O9gBank+eR5JhGjkQwVPSu2K11zDA/FRFRi9eBNxNffFTo5AGBXNCsRTQCgZBL1HwBKpvM+wL0712Y7W7HvSAzW7VPRulG5Mf+hONn6d6I5HBHjvyerd0aq7ftdk32IX42IG3ffvpVtsUv3ITezcj0iHuyWf+vuaEy27uKuyz+/Z3S0D/Gr6/r/pvxP9iF+0fkDUE43T7UL2cb6l+b1rXv9G+tSu3ai6PrX+/xvNf9Kl/yz87/Xtxnji48efqDX2Nrzv2zL4nfOBQfh9vWIh4Z6n/9k+Sc98j+7zRg3fn5vptdY0fk3v4w40vX6Z/WTe8nmn0+cOn+xUT/afuwa45OpMx/2il90/tnxH++R/1bH/+o2Y/x18MfTvca2zj/9ZSR5q9Uayfe8O7O4OD8dMZK8unH/sc3n0nlO5//I8n/s0c1//7vln10Trmwz/89f+e2znee/u7L8z+3w+H+8zRh/zv001mus6PwBAAAAAAAAAAAAAAAAAAAAAAAAYBDSiNgXSVq7307TWq29hvfBGE8bcwuLj5+fe+fKuWwsYjKG0843XU60+0nWn86/D7/TP7au/1REHIiIT0f3tPq12bnGuaKTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDc3nXr/98dba//DwD8x40VPQEAYODUfwAoH/UfAMpH/QeA8lH/AaB81H8AKB/1HwAAAAAAAAAAAAAAAAAAAAAABurAIzd/SCJi5fk9rS0zko8NFzozYLelRU8AKEyl6AkAhRkq7MVA0VzjA8kW4z2/InzFFQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOVx5LD1/6GsrP8P5bWD1Tv3j+/GRICBs4Q/lJdrfMD6/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsLV9rS1Ja/la4PsiTWu1iP0RMRnDyfmLjfrRiPhfRHw/Ojya9aeLnjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NnC0vKlmUajPj+wRnWnL09WIgY7VQ2Nf07j/Rho0KL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDgrS76XfRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKNLC0vKlmUajPr+LjaJzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOinvwMAAP//msoqbQ==") rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 5.556543663s ago: executing program 2 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 5.529052147s ago: executing program 2 (id=716): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 5.463917947s ago: executing program 0 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, r1, 0xb01}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) 5.448022609s ago: executing program 4 (id=718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0xee01) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x2}, 0x20) 5.44206768s ago: executing program 2 (id=719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 5.394874927s ago: executing program 4 (id=720): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000000)=""/234, &(0x7f0000000140)=0xffffff98) 5.333081206s ago: executing program 1 (id=721): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000500), 0x4) 5.325847988s ago: executing program 4 (id=722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000ebda967fc623c77a36c8e89eddad650d00000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = gettid() fcntl$setownex(r7, 0xf, &(0x7f0000000700)={0x0, r8}) sendmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x24008881) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.286681823s ago: executing program 0 (id=723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) 5.053572389s ago: executing program 1 (id=724): dup(0xffffffffffffffff) chdir(0x0) lchown(0x0, 0xee00, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 4.975805861s ago: executing program 1 (id=725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000000080003400000000a0900010073797a3000000000090002"], 0x5c}}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffe4) 4.256581391s ago: executing program 1 (id=726): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x60d0}) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x40000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x50, 0xffffffffffffffff, 0x1a80000) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.159424154s ago: executing program 1 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) socket$packet(0x11, 0x3, 0x300) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x2}, {&(0x7f0000000440)=""/4093, 0xffd}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @private0}, @IFAL_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x0}}]}, 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaf53a000000000000080046002230000000000011907800000000000008009404000000004e42b2543b61c23f21bf912aad7e3d97220018907804e0b9b7e402c17279242a4ac66fba1d32d03b50fb870bcbf70b9d2a23e3d1aabddc0a2487461986d45c55834744aafb804bc3ab18c8921db52d517b8a8f79de270e8242a7a09be68ff8f198b5d11632"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000280)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) eventfd(0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {}, {0x2, 0x13, @l2={'ib', 0x3a, 'rose0\x00'}}}}, 0x2c}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x6b5a, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000001440)) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x1b, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @remote}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "15859e", 0x1, "cdfaaf"}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x30}}, 0x0) 354.906226ms ago: executing program 3 (id=742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000040500000000000000008500000007000000670000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_unlink_enter\x00', r0}, 0x10) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x0, 0x0}, 0x30) 309.858323ms ago: executing program 3 (id=743): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000800)='./file2\x00', 0x100400b, &(0x7f00000000c0), 0x1, 0x769, &(0x7f0000000fc0)="$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") rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 95.482896ms ago: executing program 3 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, r1, 0xb01}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) 59.411681ms ago: executing program 3 (id=745): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01"], 0x1d) 30.722425ms ago: executing program 3 (id=746): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000500), 0x4) 0s ago: executing program 3 (id=747): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 137785][ T4585] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.159091][ T4585] REISERFS (device loop1): checking transaction log (loop1) [ 87.177548][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.213971][ T4583] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 87.248998][ T4585] REISERFS (device loop1): Using tea hash to sort names [ 87.259173][ T4585] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 87.269813][ T4583] REISERFS (device loop4): using ordered data mode [ 87.289639][ T3543] Bluetooth: hci3: command 0x0409 tx timeout [ 87.299415][ T4526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.316825][ T4583] reiserfs: using flush barriers [ 87.404150][ T4583] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.421177][ T4583] REISERFS (device loop4): checking transaction log (loop4) [ 87.438528][ T4526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.465113][ T4611] netlink: 22 bytes leftover after parsing attributes in process `syz.3.265'. [ 87.474918][ T4583] REISERFS (device loop4): Using r5 hash to sort names [ 87.509974][ T4583] REISERFS (device loop4): using 3.5.x disk format [ 87.525869][ T4583] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 87.673121][ T4616] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿî§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒ«öWgéÛ½{XA¨Î>´LqQÞ·¸ùχ [ 87.673121][ T4616] ðOÉQ±•Çý6ÿÛÐb" [ 87.818362][ T4526] team0: Port device team_slave_0 added [ 87.843935][ T4526] team0: Port device team_slave_1 added [ 87.929997][ T3998] Bluetooth: hci0: command 0x041b tx timeout [ 87.947196][ T4526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.989494][ T4526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.079750][ T4526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.111810][ T4526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.140039][ T4526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.197829][ T4526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.369851][ T3550] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.459097][ T4648] tmpfs: Bad value for 'nr_inodes' [ 88.461538][ T4526] device hsr_slave_0 entered promiscuous mode [ 88.476313][ T4641] loop1: detected capacity change from 0 to 8192 [ 88.483547][ T4526] device hsr_slave_1 entered promiscuous mode [ 88.495818][ T4526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.504413][ T4526] Cannot create hsr debugfs directory [ 88.615757][ T4641] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 88.659880][ T3550] usb 5-1: Using ep0 maxpacket: 8 [ 88.660466][ T4641] REISERFS (device loop1): using ordered data mode [ 88.688089][ T4641] reiserfs: using flush barriers [ 88.707296][ T4641] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.748625][ T4641] REISERFS (device loop1): checking transaction log (loop1) [ 88.819202][ T4641] REISERFS (device loop1): Using tea hash to sort names [ 88.849925][ T4641] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 88.989895][ T3550] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 89.013798][ T3550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.051738][ T3550] usb 5-1: Product: syz [ 89.064408][ T3550] usb 5-1: Manufacturer: syz [ 89.071035][ T4483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.078037][ T3550] usb 5-1: SerialNumber: syz [ 89.111945][ T3550] usb 5-1: config 0 descriptor?? [ 89.127801][ T4483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.180555][ T3550] ums-datafab 5-1:0.0: USB Mass Storage device detected [ 89.190344][ T4483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.337038][ T3550] ums-sddr55 5-1:0.0: USB Mass Storage device detected [ 89.369662][ T3998] Bluetooth: hci3: command 0x041b tx timeout [ 89.557880][ T4483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.885683][ T4483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.898965][ T4526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.938875][ T4526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.966263][ T4526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.009210][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.018379][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.036226][ T4483] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.045623][ T3549] Bluetooth: hci0: command 0x040f tx timeout [ 90.053701][ T4526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.116422][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.147685][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.184758][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.192176][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.315490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.323792][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.334209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.348635][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.355835][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.365932][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.388854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.416895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.447258][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.473549][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.500979][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.522482][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.570617][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.611488][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.917980][ T4697] loop1: detected capacity change from 0 to 65536 [ 90.932920][ T4483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.971065][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.038591][ T4697] XFS (loop1): Mounting V5 Filesystem [ 91.051132][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.073372][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.143063][ T4526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.179188][ T4697] XFS (loop1): Ending clean mount [ 91.195565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.207290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.218435][ T4697] XFS (loop1): Quotacheck needed: Please wait. [ 91.242082][ T4526] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.265781][ T4697] XFS (loop1): Quotacheck: Done. [ 91.291904][ T25] audit: type=1326 audit(1719359277.945:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684f05bae9 code=0x7fc00000 [ 91.314120][ T3547] usb 5-1: USB disconnect, device number 2 [ 91.554228][ T3543] Bluetooth: hci3: command 0x040f tx timeout [ 91.561517][ T144] device hsr_slave_0 left promiscuous mode [ 91.585729][ T144] device hsr_slave_1 left promiscuous mode [ 91.830863][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.855891][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.068549][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.080988][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.096461][ T144] device bridge_slave_1 left promiscuous mode [ 92.105647][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.121917][ T144] device bridge_slave_0 left promiscuous mode [ 92.128211][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.181766][ T144] device hsr_slave_0 left promiscuous mode [ 92.189212][ T144] device hsr_slave_1 left promiscuous mode [ 92.204907][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.216274][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.241786][ T4715] loop4: detected capacity change from 0 to 64 [ 92.248055][ T3547] Bluetooth: hci0: command 0x0419 tx timeout [ 92.258924][ T4182] XFS (loop1): Unmounting Filesystem [ 92.267836][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.288947][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.321017][ T144] device bridge_slave_1 left promiscuous mode [ 92.328438][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.407063][ T144] device bridge_slave_0 left promiscuous mode [ 92.442713][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.458762][ T4718] loop4: detected capacity change from 0 to 2048 [ 92.479983][ T144] device veth1_macvtap left promiscuous mode [ 92.486288][ T144] device veth0_macvtap left promiscuous mode [ 92.496834][ T144] device veth1_vlan left promiscuous mode [ 92.509174][ T144] device veth0_vlan left promiscuous mode [ 92.513620][ T4718] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 92.546250][ T4718] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.572579][ T144] device veth1_macvtap left promiscuous mode [ 92.578690][ T144] device veth0_macvtap left promiscuous mode [ 92.595972][ T144] device veth1_vlan left promiscuous mode [ 92.604379][ T144] device veth0_vlan left promiscuous mode [ 92.733745][ T4720] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 93.109841][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.279118][ T144] team0 (unregistering): Port device team_slave_1 removed [ 93.312217][ T144] team0 (unregistering): Port device team_slave_0 removed [ 93.353382][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.369269][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 93.408460][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.507142][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.549188][ T144] bond0 (unregistering): Released all slaves [ 93.679808][ T26] usb 2-1: New USB device found, idVendor=040d, idProduct=3801, bcdDevice=75.f1 [ 93.689044][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.702579][ T3545] Bluetooth: hci3: command 0x0419 tx timeout [ 93.713034][ T26] usb 2-1: Product: syz [ 93.717325][ T26] usb 2-1: Manufacturer: syz [ 93.731625][ T26] usb 2-1: SerialNumber: syz [ 93.738263][ T26] usb 2-1: config 0 descriptor?? [ 93.782577][ T26] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 93.858500][ T144] team0 (unregistering): Port device team_slave_1 removed [ 93.877623][ T144] team0 (unregistering): Port device team_slave_0 removed [ 93.889317][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.910732][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.988527][ T144] bond0 (unregistering): Released all slaves [ 94.075702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.085561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.094930][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.102133][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.109901][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.118655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.127160][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.134253][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.145723][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.153824][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 94.196466][ T4726] loop3: detected capacity change from 0 to 256 [ 94.228076][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.239081][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.247302][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.269663][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.290427][ T4483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.307196][ T25] audit: type=1800 audit(1719359280.955:8): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="file1" dev="loop3" ino=1048656 res=0 errno=0 [ 94.343127][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.353699][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.363214][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.375842][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.388413][ T25] audit: type=1804 audit(1719359280.955:9): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.291" name="/root/syzkaller.NPN9XG/67/file0/file1" dev="loop3" ino=1048656 res=1 errno=0 [ 94.396186][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.427822][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.436447][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.449245][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.460329][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.469227][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.523471][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.538370][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.619951][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.635086][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.651007][ T4483] device veth0_vlan entered promiscuous mode [ 94.683070][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.698589][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.716848][ T4483] device veth1_vlan entered promiscuous mode [ 94.766892][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.782958][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.796214][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.806984][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.832378][ T4483] device veth0_macvtap entered promiscuous mode [ 94.847196][ T1069] usb 2-1: USB disconnect, device number 2 [ 94.869301][ T4526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.891586][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.903633][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.911525][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.932555][ T4483] device veth1_macvtap entered promiscuous mode [ 94.974932][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.998907][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.042302][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.064112][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.078419][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.110439][ T1066] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.118021][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.139128][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.161632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.185705][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.194808][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.211464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.226422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.265506][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.276682][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.287138][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.298810][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.309155][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.322298][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.341427][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.349751][ T1066] usb 5-1: Using ep0 maxpacket: 8 [ 95.396168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.406005][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.431807][ T4483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.445961][ T4483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.457030][ T4483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.475637][ T4483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.487199][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.500284][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.550260][ T4526] device veth0_vlan entered promiscuous mode [ 95.570819][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.579200][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.622544][ T4526] device veth1_vlan entered promiscuous mode [ 95.641622][ T1066] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 95.670214][ T1066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.689417][ T1066] usb 5-1: Product: syz [ 95.694218][ T1066] usb 5-1: Manufacturer: syz [ 95.703223][ T1066] usb 5-1: SerialNumber: syz [ 95.718614][ T1066] usb 5-1: config 0 descriptor?? [ 95.800049][ T1066] ums-datafab 5-1:0.0: USB Mass Storage device detected [ 95.839745][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.870341][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.889758][ T1066] ums-sddr55 5-1:0.0: USB Mass Storage device detected [ 95.900690][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.912836][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.999425][ T4526] device veth0_macvtap entered promiscuous mode [ 96.009427][ T4526] device veth1_macvtap entered promiscuous mode [ 96.139945][ T568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.148119][ T568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.190918][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.199102][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.274764][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.359211][ T4526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.375912][ T4526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.399616][ T4526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.436237][ T4526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.458635][ T4526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.475775][ T4526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.485993][ T4526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.517315][ T4526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.549141][ T4526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.574035][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.583836][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.594928][ T4783] loop1: detected capacity change from 0 to 40427 [ 96.611275][ T4526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.625767][ T3959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.659005][ T3959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.667480][ T4526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.697835][ T4526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.714160][ T4526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.733056][ T4526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.747559][ T4526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.767844][ T4526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.788757][ T4526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.811501][ T4526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.831639][ T4526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.856631][ T4526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.862231][ T4783] F2FS-fs (loop1): invalid crc value [ 96.876055][ T4526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.892272][ T4783] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 96.900977][ T4526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.912037][ T4783] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.922515][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.938054][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.959107][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.974658][ T4783] F2FS-fs (loop1): recover fsync data on readonly fs [ 96.985952][ T4754] chnl_net:caif_netlink_parms(): no params data found [ 97.002855][ T4783] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 97.044065][ T4783] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 97.092727][ T4783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.243142][ T4813] loop0: detected capacity change from 0 to 64 [ 97.289651][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 97.354447][ T3854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.386597][ T3854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.443974][ T4820] loop1: detected capacity change from 0 to 256 [ 97.455695][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.482527][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.509215][ T4816] loop0: detected capacity change from 0 to 2048 [ 97.516291][ T25] audit: type=1800 audit(1719359284.175:10): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.301" name="file1" dev="loop1" ino=1048665 res=0 errno=0 [ 97.555162][ T4754] device bridge_slave_0 entered promiscuous mode [ 97.575079][ T4816] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 97.585223][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.608917][ T25] audit: type=1804 audit(1719359284.175:11): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.301" name="/root/syzkaller.4Jsy2R/23/file0/file1" dev="loop1" ino=1048665 res=1 errno=0 [ 97.654555][ T4816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.663626][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.701591][ T4754] device bridge_slave_1 entered promiscuous mode [ 97.727327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.798158][ T25] audit: type=1326 audit(1719359284.445:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4745 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684f05bae9 code=0x7fc00000 [ 97.899801][ T3581] usb 5-1: USB disconnect, device number 3 [ 98.123792][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 98.193229][ T3854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.205476][ T4754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.228776][ T4754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.231554][ T3854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.319035][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.372265][ T4754] team0: Port device team_slave_0 added [ 98.386384][ T4836] loop4: detected capacity change from 0 to 4096 [ 98.440486][ T4754] team0: Port device team_slave_1 added [ 98.510792][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.519874][ T4848] loop0: detected capacity change from 0 to 64 [ 98.546465][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.603420][ T4836] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 98.628123][ T4754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.685192][ T4848] Trying to free block not in datazone [ 98.713779][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.732521][ T4854] UBIFS error (pid: 4854): cannot open "./file2", error -22 [ 98.734129][ T4848] Trying to free block not in datazone [ 98.777460][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.814505][ T4848] Trying to free block not in datazone [ 98.844850][ T4848] Trying to free block not in datazone [ 98.865097][ T4848] Trying to free block not in datazone [ 98.889482][ T4754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.912216][ T4848] minix_free_block (loop0:6): bit already cleared [ 98.922900][ T4848] Trying to free block not in datazone [ 98.928390][ T4848] Trying to free block not in datazone [ 99.231262][ T4867] batman_adv: batadv0: Adding interface: ipvlan2 [ 99.238331][ T4867] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.291973][ T4867] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 99.903793][ T3543] Bluetooth: hci2: command 0x041b tx timeout [ 99.942295][ T4754] device hsr_slave_0 entered promiscuous mode [ 99.989991][ T4754] device hsr_slave_1 entered promiscuous mode [ 100.234720][ T4888] loop4: detected capacity change from 0 to 2048 [ 100.291581][ T4894] tmpfs: Bad value for 'nr_inodes' [ 100.348427][ T4888] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 100.657367][ T4754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.684264][ T4888] loop4: detected capacity change from 0 to 4096 [ 100.750748][ T4888] ntfs3: Unknown parameter 'þÿÿÿÿÿ' [ 100.916269][ T4754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.023050][ T4859] chnl_net:caif_netlink_parms(): no params data found [ 101.049997][ T3544] Bluetooth: hci4: command 0x0409 tx timeout [ 101.089767][ T4754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.152885][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.329424][ T4754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.377277][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.391335][ T4892] loop2: detected capacity change from 0 to 32768 [ 101.430596][ T4892] XFS: ikeep mount option is deprecated. [ 101.474776][ T4924] loop4: detected capacity change from 0 to 4096 [ 101.510352][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.532177][ T4924] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 101.553760][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.564489][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.576546][ T4859] device bridge_slave_0 entered promiscuous mode [ 101.586077][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.593602][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.601980][ T4859] device bridge_slave_1 entered promiscuous mode [ 101.645626][ T4892] XFS (loop2): Mounting V5 Filesystem [ 101.683756][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.714019][ T4931] loop0: detected capacity change from 0 to 4096 [ 101.727245][ T4859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.739227][ T4859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.772549][ T4931] ntfs3: Unknown parameter '00000000000000000003' [ 101.774390][ T4859] team0: Port device team_slave_0 added [ 101.787031][ T4859] team0: Port device team_slave_1 added [ 101.809346][ T4892] XFS (loop2): Ending clean mount [ 101.823869][ T4892] XFS (loop2): Quotacheck needed: Please wait. [ 101.878305][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.913056][ T4892] XFS (loop2): Quotacheck: Done. [ 101.919875][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.948060][ T3544] Bluetooth: hci2: command 0x040f tx timeout [ 101.989776][ T4526] XFS (loop2): Unmounting Filesystem [ 101.997778][ T4859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.062919][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.073339][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.084213][ T4931] loop0: detected capacity change from 0 to 2048 [ 102.109950][ T4859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.139368][ T4938] loop4: detected capacity change from 0 to 64 [ 102.262999][ T4931] NILFS (loop0): unrecognized mount option "÷(žÐ¨gçý;'tëÝ¿s¿4?îÒ³Oß¾C:ôîd¨}ûuîß?¡Cï! =:IÐ'a@¿! îëЭwBñâ./file0" [ 102.342786][ T4938] Trying to free block not in datazone [ 102.348669][ T4938] Trying to free block not in datazone [ 102.360785][ T4859] device hsr_slave_0 entered promiscuous mode [ 102.364406][ T4938] Trying to free block not in datazone [ 102.388134][ T4859] device hsr_slave_1 entered promiscuous mode [ 102.389241][ T4942] UBIFS error (pid: 4942): cannot open "./file2", error -22 [ 102.425554][ T4938] Trying to free block not in datazone [ 102.446820][ T4859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.469713][ T4938] Trying to free block not in datazone [ 102.476509][ T4938] minix_free_block (loop4:6): bit already cleared [ 102.492875][ T4859] Cannot create hsr debugfs directory [ 102.497967][ T4938] Trying to free block not in datazone [ 102.530036][ T4938] Trying to free block not in datazone [ 102.768378][ T4957] netlink: 'syz.4.327': attribute type 4 has an invalid length. [ 102.802557][ T4754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.879284][ T4754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.919360][ T4754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.206289][ T3581] Bluetooth: hci4: command 0x041b tx timeout [ 103.624868][ T4754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.009560][ T3544] Bluetooth: hci2: command 0x0419 tx timeout [ 104.260607][ T4754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.400331][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.408348][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.465760][ T4754] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.291503][ T3544] Bluetooth: hci4: command 0x040f tx timeout [ 105.355285][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.370270][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.394356][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.401514][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.429885][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.438625][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.456273][ T5000] loop0: detected capacity change from 0 to 512 [ 105.459101][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.469665][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.487851][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.509143][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.539292][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.558933][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.573644][ T4975] loop4: detected capacity change from 0 to 32768 [ 105.587580][ T5000] EXT4-fs (loop0): Invalid want_extra_isize 1048622 [ 105.592226][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.619246][ T4975] XFS: ikeep mount option is deprecated. [ 105.626919][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.637221][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.647345][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.704051][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.729743][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.738191][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.760587][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.788049][ T4975] XFS (loop4): Mounting V5 Filesystem [ 105.824719][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.909407][ T4975] XFS (loop4): Ending clean mount [ 105.919319][ T4975] XFS (loop4): Quotacheck needed: Please wait. [ 105.940494][ T4859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.958663][ T4859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.002563][ T4975] XFS (loop4): Quotacheck: Done. [ 106.003016][ T4859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.037635][ T4859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.109022][ T3506] XFS (loop4): Unmounting Filesystem [ 106.269872][ T5030] netlink: 'syz.2.342': attribute type 4 has an invalid length. [ 106.343615][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.360317][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.421299][ T5040] autofs4:pid:5040:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 106.471027][ T4754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.524150][ T5042] loop2: detected capacity change from 0 to 2048 [ 106.554289][ T144] device hsr_slave_0 left promiscuous mode [ 106.568574][ T144] device hsr_slave_1 left promiscuous mode [ 106.591704][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.594197][ T5042] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 106.599152][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.627677][ T5049] loop0: detected capacity change from 0 to 512 [ 106.643547][ T5042] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 106.681243][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.688690][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.714619][ T5049] EXT4-fs (loop0): Invalid want_extra_isize 1048622 [ 106.743415][ T144] device bridge_slave_1 left promiscuous mode [ 106.759752][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.805672][ T144] device bridge_slave_0 left promiscuous mode [ 106.837973][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.919111][ T144] device hsr_slave_0 left promiscuous mode [ 106.937901][ T5054] loop4: detected capacity change from 0 to 8192 [ 106.944732][ T144] device hsr_slave_1 left promiscuous mode [ 106.957982][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.968632][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.987463][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.005551][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.018965][ T144] device bridge_slave_1 left promiscuous mode [ 107.032948][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.048190][ T144] device bridge_slave_0 left promiscuous mode [ 107.094437][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.138156][ T144] device veth1_macvtap left promiscuous mode [ 107.159584][ T144] device veth0_macvtap left promiscuous mode [ 107.165639][ T144] device veth1_vlan left promiscuous mode [ 107.171862][ T144] device veth0_vlan left promiscuous mode [ 107.193415][ T144] device veth1_macvtap left promiscuous mode [ 107.199541][ T144] device veth0_macvtap left promiscuous mode [ 107.205616][ T144] device veth1_vlan left promiscuous mode [ 107.236137][ T144] device veth0_vlan left promiscuous mode [ 107.380059][ T3550] Bluetooth: hci4: command 0x0419 tx timeout [ 107.430068][ T5061] loop0: detected capacity change from 0 to 32768 [ 107.471971][ T5061] XFS: ikeep mount option is deprecated. [ 107.564767][ T5061] XFS (loop0): Mounting V5 Filesystem [ 107.657579][ T144] team0 (unregistering): Port device team_slave_1 removed [ 107.661790][ T5061] XFS (loop0): Ending clean mount [ 107.680172][ T5061] XFS (loop0): Quotacheck needed: Please wait. [ 107.682568][ T144] team0 (unregistering): Port device team_slave_0 removed [ 107.713242][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.725677][ T5061] XFS (loop0): Quotacheck: Done. [ 107.770439][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.790356][ T4483] XFS (loop0): Unmounting Filesystem [ 107.856210][ T144] bond0 (unregistering): Released all slaves [ 108.087964][ T144] team0 (unregistering): Port device team_slave_1 removed [ 108.111243][ T144] team0 (unregistering): Port device team_slave_0 removed [ 108.126355][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.150417][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.245056][ T144] bond0 (unregistering): Released all slaves [ 108.263107][ T5081] autofs4:pid:5081:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 108.341818][ T5083] loop0: detected capacity change from 0 to 164 [ 108.377170][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.397649][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.428770][ T4859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.480664][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.495957][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.532490][ T4754] device veth0_vlan entered promiscuous mode [ 108.545175][ T4859] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.599057][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.622940][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.657729][ T5096] loop4: detected capacity change from 0 to 128 [ 108.680299][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.730455][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.780406][ T4754] device veth1_vlan entered promiscuous mode [ 108.796641][ T5083] loop0: detected capacity change from 0 to 40427 [ 108.816089][ T5096] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 108.845456][ T5083] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 108.854476][ T5083] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.878514][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.897870][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.909097][ T5083] F2FS-fs (loop0): invalid crc value [ 108.922348][ T5083] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.952782][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.993473][ T5083] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.000733][ T5083] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.005135][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.015315][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.069943][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.087012][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.105871][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.113024][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.191482][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.348218][ T5108] ubi1: attaching mtd0 [ 109.352673][ T5108] ubi1 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 109.562547][ T4754] device veth0_macvtap entered promiscuous mode [ 109.573198][ T4754] device veth1_macvtap entered promiscuous mode [ 109.599814][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.619495][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.629324][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.695905][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.716650][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.747140][ T5094] loop2: detected capacity change from 0 to 32768 [ 109.757307][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.780358][ T3506] sysv_free_block: flc_count > flc_size [ 109.788982][ T3506] sysv_free_block: flc_count > flc_size [ 109.792047][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.802213][ T3506] sysv_free_block: flc_count > flc_size [ 109.810458][ T4483] attempt to access beyond end of device [ 109.810458][ T4483] loop0: rw=2049, want=45104, limit=40427 [ 109.834929][ T3506] sysv_free_block: flc_count > flc_size [ 109.868802][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.869731][ T3506] sysv_free_block: flc_count > flc_size [ 109.878062][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.905742][ T5094] read_mapping_page failed! [ 109.907637][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.921081][ T3506] sysv_free_block: flc_count > flc_size [ 109.926645][ T3506] sysv_free_block: flc_count > flc_size [ 109.937677][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.939784][ T5094] ERROR: (device loop2): txCommit: [ 109.939784][ T5094] [ 109.947764][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.973687][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.975085][ T3506] sysv_free_block: flc_count > flc_size [ 109.989290][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.996728][ T3506] sysv_free_block: flc_count > flc_size [ 110.009020][ T3506] sysv_free_block: flc_count > flc_size [ 110.010700][ T5111] read_mapping_page failed! [ 110.029673][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.038140][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.040817][ T3506] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 110.066197][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.088275][ T5111] ERROR: (device loop2): txCommit: [ 110.088275][ T5111] [ 110.113539][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.134570][ T5094] find_entry called with index = 0 [ 110.145115][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.156775][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.202071][ T5094] read_mapping_page failed! [ 110.225294][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.230083][ T5094] ERROR: (device loop2): txCommit: [ 110.230083][ T5094] [ 110.245190][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.256361][ T5117] loop4: detected capacity change from 0 to 2048 [ 110.257052][ T5111] jfs_rmdir: dtDelete returned -2 [ 110.287003][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.316155][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.343640][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.356812][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.378740][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.399186][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.422119][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.445092][ T4526] ERROR: (device loop2): diFree: numfree > numinos [ 110.445092][ T4526] [ 110.458390][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.468971][ T4526] ERROR: (device loop2): diFree: numfree > numinos [ 110.468971][ T4526] [ 110.494344][ T4859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.512353][ T5117] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 110.544800][ T5117] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 110.568480][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.604540][ T5128] autofs4:pid:5128:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 110.633124][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.642580][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.676881][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.710387][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.722646][ T4754] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.763733][ T4754] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.790072][ T4754] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.799274][ T4754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.000063][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.015054][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.025224][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.042143][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.045400][ T4859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.090481][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.182871][ T568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.191362][ T568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.208859][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.220820][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.241696][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.329419][ T4859] device veth0_vlan entered promiscuous mode [ 111.376968][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.391122][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.414910][ T5157] autofs4:pid:5157:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 111.427600][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.476744][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.521344][ T4859] device veth1_vlan entered promiscuous mode [ 111.641430][ T5163] tmpfs: Bad value for 'nr_inodes' [ 111.643154][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.675793][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.715519][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.751822][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.823608][ T4859] device veth0_macvtap entered promiscuous mode [ 111.894118][ T4859] device veth1_macvtap entered promiscuous mode [ 111.955808][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.971935][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.033061][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.084739][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.135739][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.156269][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.191661][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.227183][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.263758][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.310365][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.338556][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.397391][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.416128][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.471537][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.489230][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.525018][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.539934][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.569555][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.616267][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.653956][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.691945][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.760450][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.806768][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.825996][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.882498][ T4859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.909636][ T5178] loop3: detected capacity change from 0 to 32768 [ 112.911964][ T4859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.958178][ T3738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (3738) [ 112.999535][ T4859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.026032][ T4859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.080023][ T5178] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 113.118309][ T5178] BTRFS info (device loop3): using free space tree [ 113.132623][ T5178] BTRFS info (device loop3): has skinny extents [ 113.343355][ T3959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.359398][ T568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.410234][ T568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.486207][ T3959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.500427][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.595069][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.626137][ T5211] loop4: detected capacity change from 0 to 512 [ 113.735277][ T5178] BTRFS info (device loop3): enabling ssd optimizations [ 113.827243][ T5211] EXT4-fs (loop4): Test dummy encryption mode enabled [ 113.885308][ T5211] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.387: inline data xattr refers to an external xattr inode [ 113.904221][ T5220] loop1: detected capacity change from 0 to 4096 [ 113.936231][ T5226] loop0: detected capacity change from 0 to 512 [ 113.957123][ T5211] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.387: couldn't read orphan inode 12 (err -117) [ 114.041710][ T5228] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.046768][ T5226] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.052769][ T5211] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,inode_readahead_blks=0x0000000000200000,sb=0x0000000000000001,prjquota,usrquota,usrjquota=,nojournal_checksum,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 114.337837][ T5226] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.358923][ T5211] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 114.414890][ T5220] syz.1.307 (5220) used greatest stack depth: 18336 bytes left [ 114.419726][ T5226] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.532882][ T5226] EXT4-fs (loop0): 1 truncate cleaned up [ 114.545670][ T5226] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,bsdgroups,nombcache,noload,,errors=continue. Quota mode: none. [ 114.591532][ T5191] loop2: detected capacity change from 0 to 32768 [ 114.615828][ T4859] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 144115188075855872 [ 114.629898][ T4859] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=14) [ 114.724570][ T4859] Remounting filesystem read-only [ 114.742149][ T5191] XFS (loop2): Mounting V5 Filesystem [ 114.760998][ T4859] NILFS (loop1): error -5 truncating bmap (ino=14) [ 114.931818][ T5191] XFS (loop2): Ending clean mount [ 114.935452][ T4859] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 114.959899][ T4859] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 114.966846][ T4859] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 115.041489][ T5191] XFS (loop2): Quotacheck needed: Please wait. [ 115.120562][ T4859] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 115.164792][ T5191] XFS (loop2): Quotacheck: Done. [ 115.182227][ T4859] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 115.254704][ T4859] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 115.269740][ T4859] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 115.279124][ T4859] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 115.286870][ T4859] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 115.308935][ T4859] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 115.340710][ T4859] NILFS (loop1): discard dirty block: blocknr=13, size=4096 [ 115.391847][ T4859] NILFS (loop1): discard dirty page: offset=663552, ino=3 [ 115.433259][ T4859] NILFS (loop1): discard dirty block: blocknr=34, size=4096 [ 115.467281][ T4526] XFS (loop2): Unmounting Filesystem [ 117.164386][ T5284] loop2: detected capacity change from 0 to 164 [ 117.202639][ T5286] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 117.446415][ T5290] unsupported nlmsg_type 40 [ 117.774259][ T5284] loop2: detected capacity change from 0 to 40427 [ 117.843169][ T5276] loop1: detected capacity change from 0 to 40427 [ 117.873362][ T5284] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 117.882384][ T5284] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.902576][ T5284] F2FS-fs (loop2): invalid crc value [ 117.921576][ T5276] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 117.949904][ T5276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.950039][ T5284] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.041717][ T5284] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.049553][ T5284] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.075501][ T5276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.169851][ T5322] ubi1: attaching mtd0 [ 119.173945][ T5322] ubi1 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 119.593665][ T5276] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.628435][ T5276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.685521][ T4526] attempt to access beyond end of device [ 119.685521][ T4526] loop2: rw=2049, want=45104, limit=40427 [ 119.821653][ T5331] loop3: detected capacity change from 0 to 4096 [ 119.947163][ T5337] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.033376][ T4859] attempt to access beyond end of device [ 120.033376][ T4859] loop1: rw=2049, want=40968, limit=40427 [ 120.074402][ T4754] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 144115188075855872 [ 120.109154][ T4754] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=14) [ 120.157589][ T4754] Remounting filesystem read-only [ 120.180058][ T4754] NILFS (loop3): error -5 truncating bmap (ino=14) [ 120.236784][ T4754] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 120.271624][ T4754] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 120.278753][ T4754] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 120.297133][ T4754] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 120.319668][ T4754] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 120.326996][ T4754] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 120.369563][ T4754] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 120.376890][ T4754] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 120.407686][ T5328] loop4: detected capacity change from 0 to 32768 [ 120.419646][ T4754] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 120.427214][ T4754] NILFS (loop3): discard dirty page: offset=0, ino=12 [ 120.465677][ T4754] NILFS (loop3): discard dirty block: blocknr=13, size=4096 [ 120.483818][ T4754] NILFS (loop3): discard dirty page: offset=663552, ino=3 [ 120.506375][ T4754] NILFS (loop3): discard dirty block: blocknr=34, size=4096 [ 120.532097][ T5328] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.413 (5328) [ 120.587096][ T5328] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 120.677495][ T5328] BTRFS info (device loop4): using free space tree [ 121.191556][ T5328] BTRFS info (device loop4): has skinny extents [ 121.398332][ T5328] BTRFS info (device loop4): enabling ssd optimizations [ 121.598303][ T5343] loop0: detected capacity change from 0 to 32768 [ 121.785319][ T5343] XFS (loop0): Mounting V5 Filesystem [ 121.943670][ T5406] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 122.002322][ T5343] XFS (loop0): Ending clean mount [ 122.011944][ T5407] loop2: detected capacity change from 0 to 512 [ 122.097842][ T4483] XFS (loop0): Unmounting Filesystem [ 122.139930][ T5407] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.749685][ T1069] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.181973][ T5422] delete_channel: no stack [ 123.189641][ T1069] usb 3-1: New USB device found, idVendor=14b2, idProduct=3302, bcdDevice=1b.fe [ 123.207202][ T1069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.256855][ T1069] usb 3-1: config 0 descriptor?? [ 123.331855][ T1069] r8712u: register rtl8712_netdev_ops to netdev_ops [ 123.355241][ T1069] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 123.418000][ T5415] program syz.3.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.569608][ T1069] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 123.582704][ T1069] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 123.616595][ T1069] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 123.651455][ C1] sd 0:0:1:0: tag#5036 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 123.661376][ C1] sd 0:0:1:0: tag#5036 CDB: Read(6) 08 00 00 00 00 00 [ 123.663834][ T1069] usb 3-1: USB disconnect, device number 3 [ 124.312956][ T5433] loop0: detected capacity change from 0 to 32768 [ 124.588570][ T5433] XFS (loop0): Mounting V5 Filesystem [ 124.889727][ T5433] XFS (loop0): Ending clean mount [ 124.972644][ T4483] XFS (loop0): Unmounting Filesystem [ 125.215080][ T5507] loop1: detected capacity change from 0 to 2048 [ 125.338823][ T5507] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 125.362749][ T5507] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 125.380002][ T5507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.519906][ T25] audit: type=1800 audit(1719359312.165:13): pid=5518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.461" name="bus" dev="overlay" ino=2004 res=0 errno=0 [ 125.678471][ T5498] program syz.2.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.709001][ T5526] loop3: detected capacity change from 0 to 256 [ 125.834196][ T5526] FAT-fs (loop3): Directory bread(block 64) failed [ 125.863802][ T5526] FAT-fs (loop3): Directory bread(block 65) failed [ 125.886067][ T5526] FAT-fs (loop3): Directory bread(block 66) failed [ 125.920234][ C1] sd 0:0:1:0: tag#5029 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 125.922140][ T5526] FAT-fs (loop3): Directory bread(block 67) failed [ 125.930290][ C1] sd 0:0:1:0: tag#5029 CDB: Read(6) 08 00 00 00 00 00 [ 125.978369][ T5526] FAT-fs (loop3): Directory bread(block 68) failed [ 125.985254][ T5526] FAT-fs (loop3): Directory bread(block 69) failed [ 125.997603][ T5526] FAT-fs (loop3): Directory bread(block 70) failed [ 126.004731][ T5526] FAT-fs (loop3): Directory bread(block 71) failed [ 126.015308][ T5526] FAT-fs (loop3): Directory bread(block 72) failed [ 126.023974][ T5526] FAT-fs (loop3): Directory bread(block 73) failed [ 126.307167][ T5542] loop1: detected capacity change from 0 to 1024 [ 126.557795][ T3959] hfsplus: b-tree write err: -5, ino 4 [ 126.641116][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 126.654063][ T5560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.480'. [ 126.665068][ T5560] tc_dump_action: action bad kind [ 126.808929][ T5566] loop0: detected capacity change from 0 to 256 [ 126.933123][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 127.028087][ T5566] FAT-fs (loop0): Directory bread(block 64) failed [ 127.047770][ T5566] FAT-fs (loop0): Directory bread(block 65) failed [ 127.095065][ T5566] FAT-fs (loop0): Directory bread(block 66) failed [ 127.103181][ T5577] netlink: 'syz.3.487': attribute type 298 has an invalid length. [ 127.143519][ T5566] FAT-fs (loop0): Directory bread(block 67) failed [ 127.188792][ T5566] FAT-fs (loop0): Directory bread(block 68) failed [ 127.206206][ T3959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.208207][ T5566] FAT-fs (loop0): Directory bread(block 69) failed [ 127.224291][ T5566] FAT-fs (loop0): Directory bread(block 70) failed [ 127.233866][ T5566] FAT-fs (loop0): Directory bread(block 71) failed [ 127.244170][ T5566] FAT-fs (loop0): Directory bread(block 72) failed [ 127.287504][ T5583] loop3: detected capacity change from 0 to 8 [ 127.290133][ T5566] FAT-fs (loop0): Directory bread(block 73) failed [ 127.295980][ T3959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.353067][ T3959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.389661][ T5437] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.402923][ T5583] squashfs image failed sanity check [ 127.451782][ T3959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.484479][ T5570] chnl_net:caif_netlink_parms(): no params data found [ 127.690000][ T5596] loop0: detected capacity change from 0 to 8 [ 127.796766][ T5600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.490'. [ 127.940716][ T5437] usb 5-1: New USB device found, idVendor=14b2, idProduct=3302, bcdDevice=1b.fe [ 127.968004][ T5437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.057338][ T5437] usb 5-1: config 0 descriptor?? [ 128.340863][ T5596] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 128.411682][ T5437] r8712u: register rtl8712_netdev_ops to netdev_ops [ 128.428601][ T5437] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 128.864624][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 128.878511][ T5602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.495'. [ 128.889561][ T5602] tc_dump_action: action bad kind [ 128.889736][ T5437] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 128.894868][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.908603][ T5437] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 128.917283][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.918668][ T5437] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 128.934947][ T5437] usb 5-1: USB disconnect, device number 4 [ 128.948582][ T5570] device bridge_slave_0 entered promiscuous mode [ 128.969609][ T5297] Bluetooth: hci4: command 0x0409 tx timeout [ 129.034367][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.042203][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.071258][ T5570] device bridge_slave_1 entered promiscuous mode [ 129.095722][ T5610] netlink: 'syz.2.498': attribute type 298 has an invalid length. [ 129.196994][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.222360][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.490968][ T5570] team0: Port device team_slave_0 added [ 129.498885][ T5570] team0: Port device team_slave_1 added [ 129.597367][ T5629] loop3: detected capacity change from 0 to 2048 [ 129.606873][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.633032][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.718202][ T5629] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 129.748079][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.762225][ T5629] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 129.774991][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 129.789689][ T5631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.507'. [ 129.798925][ T5631] tc_dump_action: action bad kind [ 129.836057][ T5629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.905501][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.927332][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.982751][ T5635] loop2: detected capacity change from 0 to 256 [ 130.029492][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.135195][ T5635] FAT-fs (loop2): Directory bread(block 64) failed [ 130.169052][ T5635] FAT-fs (loop2): Directory bread(block 65) failed [ 130.191061][ T5570] device hsr_slave_0 entered promiscuous mode [ 130.194674][ T5635] FAT-fs (loop2): Directory bread(block 66) failed [ 130.241944][ T5570] device hsr_slave_1 entered promiscuous mode [ 130.248076][ T5635] FAT-fs (loop2): Directory bread(block 67) failed [ 130.256373][ T5570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.264354][ T5635] FAT-fs (loop2): Directory bread(block 68) failed [ 130.279799][ T5570] Cannot create hsr debugfs directory [ 130.283049][ T5635] FAT-fs (loop2): Directory bread(block 69) failed [ 130.306230][ T5644] netlink: 'syz.3.510': attribute type 298 has an invalid length. [ 130.337906][ T5635] FAT-fs (loop2): Directory bread(block 70) failed [ 130.400283][ T5635] FAT-fs (loop2): Directory bread(block 71) failed [ 130.443281][ T5635] FAT-fs (loop2): Directory bread(block 72) failed [ 130.471804][ T5635] FAT-fs (loop2): Directory bread(block 73) failed [ 130.718536][ T5658] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.732329][ T5624] loop4: detected capacity change from 0 to 32768 [ 130.757427][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 130.766467][ T5666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.517'. [ 130.775586][ T5666] tc_dump_action: action bad kind [ 130.821187][ T5624] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.849056][ T5624] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.873091][ T5624] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 130.895817][ T3544] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 130.919122][ T5668] loop2: detected capacity change from 0 to 1764 [ 130.920307][ T3544] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 130.974100][ T5674] loop0: detected capacity change from 0 to 512 [ 131.049569][ T5441] Bluetooth: hci4: command 0x041b tx timeout [ 131.066172][ T3544] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 145ms [ 131.073462][ T5674] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.075536][ T3544] gfs2: fsid=syz:syz.0: jid=0: Done [ 131.126935][ T5624] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 131.154865][ T5674] EXT4-fs (loop0): 1 truncate cleaned up [ 131.163005][ T5674] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 131.619668][ T3959] device hsr_slave_0 left promiscuous mode [ 131.640327][ T3959] device hsr_slave_1 left promiscuous mode [ 131.679705][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.687986][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.719132][ T5706] loop0: detected capacity change from 0 to 256 [ 131.728918][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.754714][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.783090][ T3959] device bridge_slave_1 left promiscuous mode [ 131.789340][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.798738][ T5706] FAT-fs (loop0): Directory bread(block 64) failed [ 131.840527][ T5706] FAT-fs (loop0): Directory bread(block 65) failed [ 131.847645][ T3959] device bridge_slave_0 left promiscuous mode [ 131.872151][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.880387][ T5706] FAT-fs (loop0): Directory bread(block 66) failed [ 131.887035][ T5706] FAT-fs (loop0): Directory bread(block 67) failed [ 131.901907][ T5706] FAT-fs (loop0): Directory bread(block 68) failed [ 131.909681][ T5706] FAT-fs (loop0): Directory bread(block 69) failed [ 131.916434][ T5706] FAT-fs (loop0): Directory bread(block 70) failed [ 131.934821][ T3959] device veth1_macvtap left promiscuous mode [ 131.945595][ T5706] FAT-fs (loop0): Directory bread(block 71) failed [ 131.953404][ T3959] device veth0_macvtap left promiscuous mode [ 131.965115][ T5706] FAT-fs (loop0): Directory bread(block 72) failed [ 131.974582][ T3959] device veth1_vlan left promiscuous mode [ 131.986623][ T3959] device veth0_vlan left promiscuous mode [ 131.993804][ T5706] FAT-fs (loop0): Directory bread(block 73) failed [ 132.611114][ T25] audit: type=1800 audit(1719359319.025:14): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.529" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 132.650785][ T1370] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.658434][ T1370] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.133784][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 133.285981][ T5728] loop0: detected capacity change from 0 to 64 [ 133.532937][ T3959] team0 (unregistering): Port device team_slave_1 removed [ 133.572501][ T3959] team0 (unregistering): Port device team_slave_0 removed [ 133.614195][ T3959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.650467][ T3959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.738741][ T3959] bond0 (unregistering): Released all slaves [ 133.802091][ T5708] __nla_validate_parse: 2 callbacks suppressed [ 133.802109][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 133.839731][ T5708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.528'. [ 133.853204][ T5708] tc_dump_action: action bad kind [ 133.885359][ T3544] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.013235][ T5570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.069075][ T5570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.084103][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 134.103305][ T5570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.137260][ T5570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.290605][ T3544] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.307388][ T3544] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 134.326313][ T3544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.419968][ T3544] usb 1-1: config 0 descriptor?? [ 134.432300][ T5730] chnl_net:caif_netlink_parms(): no params data found [ 135.054326][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.069997][ T25] audit: type=1800 audit(1719359321.425:15): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.543" name="bus" dev="sda1" ino=1997 res=0 errno=0 [ 135.209973][ T1066] Bluetooth: hci4: command 0x0419 tx timeout [ 135.419545][ T3544] usb 1-1: USB disconnect, device number 2 [ 135.547981][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.585934][ T5765] loop2: detected capacity change from 0 to 4096 [ 135.602069][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.609605][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 135.624781][ T5730] device bridge_slave_0 entered promiscuous mode [ 135.636960][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.647780][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.663721][ T5730] device bridge_slave_1 entered promiscuous mode [ 135.678073][ T5765] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 135.800018][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.808103][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.826896][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.848754][ T5570] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.873023][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.942490][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.963661][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.978445][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.985561][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.030269][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.045244][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.089818][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.098373][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.105494][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.218098][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.610413][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.657685][ T5792] loop3: detected capacity change from 0 to 4096 [ 136.693212][ T5730] team0: Port device team_slave_0 added [ 136.709676][ T5792] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 136.756949][ T5730] team0: Port device team_slave_1 added [ 136.791411][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.815297][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.834550][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.851246][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.861100][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.878380][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.888104][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.906123][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.965810][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.040307][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.063918][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.101952][ T5792] loop3: detected capacity change from 0 to 64 [ 137.145334][ T5792] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 137.156450][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.190166][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.213025][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.220495][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.331028][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.347317][ T5824] kvm: emulating exchange as write [ 137.532163][ T5730] device hsr_slave_0 entered promiscuous mode [ 137.550493][ T5730] device hsr_slave_1 entered promiscuous mode [ 137.562549][ T5730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.578165][ T5730] Cannot create hsr debugfs directory [ 137.693287][ T5441] Bluetooth: hci1: command 0x041b tx timeout [ 137.706097][ T5570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.733424][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.741969][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.880128][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.890853][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.933872][ T5730] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.963380][ T5570] device veth0_vlan entered promiscuous mode [ 137.991441][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.012169][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.034635][ T5570] device veth1_vlan entered promiscuous mode [ 138.055207][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.066710][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.075622][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.100935][ T5730] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.139577][ T5851] loop3: detected capacity change from 0 to 512 [ 138.147553][ T5853] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.197678][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.219139][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.249922][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.260472][ T5851] EXT4-fs (loop3): Mount option "commit=0x0000000000000001" incompatible with ext2 [ 138.289395][ T5730] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.306469][ T5570] device veth0_macvtap entered promiscuous mode [ 138.320340][ T5570] device veth1_macvtap entered promiscuous mode [ 138.390396][ T5730] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.448739][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.492843][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.508790][ T5858] loop0: detected capacity change from 0 to 4096 [ 138.510961][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.558893][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.571244][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.582776][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.594006][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.606668][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.612975][ T5870] loop3: detected capacity change from 0 to 1024 [ 138.618566][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.638811][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.657498][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.666968][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.676101][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.703464][ T5858] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 138.725480][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.752843][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.783629][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.802785][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.814072][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.832461][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.843731][ T5877] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 138.862871][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.874093][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.885688][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.982401][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.991804][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.006048][ T5570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.023862][ T5570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.033976][ T5570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.037317][ T5858] loop0: detected capacity change from 0 to 64 [ 139.048084][ T5570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.114103][ T5858] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 139.273886][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 139.282007][ T3799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.292626][ T3799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.317372][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.380815][ T5730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.403758][ T5730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.411405][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.444635][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.477679][ T5437] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 139.486671][ T5730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.526597][ T5437] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.586186][ T5730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.627357][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.769961][ T1066] Bluetooth: hci1: command 0x040f tx timeout [ 139.791182][ T3544] kernel write not supported for file /vbi7 (pid: 3544 comm: kworker/0:3) [ 139.899346][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.976251][ T5913] loop0: detected capacity change from 0 to 8 [ 140.005802][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.015826][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.029366][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.041744][ T5913] SQUASHFS error: Failed to read block 0x62: -5 [ 140.061999][ T5913] squashfs image failed sanity check [ 140.073133][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.094234][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.121144][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.128264][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.132788][ T3544] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.179882][ T3544] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.226038][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.243826][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.286257][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.290265][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.290303][ T5440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.290790][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.293755][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.309263][ T5730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.317823][ T5922] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 140.317823][ T5922] cct.usage_percpu_sys' [ 140.342355][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.385097][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.400521][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.409293][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.423146][ T5925] loop2: detected capacity change from 0 to 128 [ 140.440567][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.451765][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.482452][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.499059][ T5925] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 140.528734][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.548283][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.573703][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.604237][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.635236][ T4526] sysv_free_block: trying to free block not in datazone [ 140.677378][ T4526] sysv_free_block: getblk() failed [ 140.684866][ T4526] sysv_free_block: getblk() failed [ 140.692924][ T5931] Zero length message leads to an empty skb [ 140.696366][ T4526] sysv_free_block: getblk() failed [ 140.740115][ T4526] sysv_free_block: getblk() failed [ 140.759623][ T4526] sysv_free_block: getblk() failed [ 140.764955][ T4526] sysv_free_block: getblk() failed [ 140.772680][ T4526] sysv_free_block: getblk() failed [ 140.778470][ T4526] sysv_free_block: getblk() failed [ 140.797231][ T4526] sysv_free_block: getblk() failed [ 140.829900][ T4526] sysv_free_block: getblk() failed [ 140.842454][ T4526] sysv_free_block: getblk() failed [ 140.847616][ T4526] sysv_free_block: getblk() failed [ 140.856266][ T3959] device hsr_slave_0 left promiscuous mode [ 140.869182][ T4526] sysv_free_block: getblk() failed [ 140.871034][ T5918] loop3: detected capacity change from 0 to 32768 [ 140.881470][ T3959] device hsr_slave_1 left promiscuous mode [ 140.884150][ T4526] sysv_free_block: getblk() failed [ 140.892819][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.895529][ T4526] sysv_free_block: getblk() failed [ 140.910533][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.923468][ T4526] sysv_free_block: getblk() failed [ 140.928950][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.935772][ T4526] sysv_free_block: getblk() failed [ 140.981310][ T4526] sysv_free_block: getblk() failed [ 140.986561][ T4526] sysv_free_block: getblk() failed [ 140.997676][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.003942][ T4526] sysv_free_block: getblk() failed [ 141.031618][ T3959] device bridge_slave_1 left promiscuous mode [ 141.037863][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.047525][ T4526] sysv_free_block: getblk() failed [ 141.058452][ T4526] sysv_free_block: getblk() failed [ 141.065164][ T3959] device bridge_slave_0 left promiscuous mode [ 141.072506][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.073484][ T4526] sysv_free_block: getblk() failed [ 141.089365][ T4526] sysv_free_block: getblk() failed [ 141.095648][ T3959] device veth1_macvtap left promiscuous mode [ 141.104013][ T3959] device veth0_macvtap left promiscuous mode [ 141.110984][ T3959] device veth1_vlan left promiscuous mode [ 141.116924][ T3959] device veth0_vlan left promiscuous mode [ 141.128142][ T4526] sysv_free_block: getblk() failed [ 141.134747][ T4526] sysv_free_block: getblk() failed [ 141.140965][ T4526] sysv_free_block: getblk() failed [ 141.146116][ T4526] sysv_free_block: getblk() failed [ 141.153445][ T4526] sysv_free_block: getblk() failed [ 141.161719][ T4526] sysv_free_block: getblk() failed [ 141.166938][ T4526] sysv_free_block: getblk() failed [ 141.174946][ T4526] sysv_free_block: getblk() failed [ 141.180505][ T4526] sysv_free_block: getblk() failed [ 141.186734][ T4526] sysv_free_block: getblk() failed [ 141.198507][ T4526] sysv_free_block: getblk() failed [ 141.204202][ T4526] sysv_free_block: getblk() failed [ 141.216860][ T4526] sysv_free_block: getblk() failed [ 141.222669][ T4526] sysv_free_block: getblk() failed [ 141.227952][ T4526] sysv_free_block: getblk() failed [ 141.240095][ T4526] sysv_free_block: getblk() failed [ 141.245387][ T4526] sysv_free_block: getblk() failed [ 141.256295][ T4526] sysv_free_block: getblk() failed [ 141.263816][ T4526] sysv_free_block: trying to free block not in datazone [ 141.284930][ T4526] sysv_free_block: trying to free block not in datazone [ 141.301599][ T4526] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 141.517401][ T3959] team0 (unregistering): Port device team_slave_1 removed [ 141.538649][ T3959] team0 (unregistering): Port device team_slave_0 removed [ 141.575776][ T3959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.605518][ T3959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.609396][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.646584][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.725311][ T5953] loop2: detected capacity change from 0 to 512 [ 141.762890][ T3959] bond0 (unregistering): Released all slaves [ 141.790736][ T5953] EXT4-fs (loop2): Mount option "commit=0x0000000000000001" incompatible with ext2 [ 141.815801][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.827598][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.835610][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.849850][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 141.937486][ T5958] loop0: detected capacity change from 0 to 512 [ 141.995527][ T5959] loop1: detected capacity change from 0 to 128 [ 142.080169][ T5958] EXT4-fs (loop0): filesystem is read-only [ 142.080753][ T5959] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 142.136168][ T5570] sysv_free_block: trying to free block not in datazone [ 142.140001][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.148583][ T5570] sysv_free_block: getblk() failed [ 142.152606][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.162911][ T5570] sysv_free_block: getblk() failed [ 142.178540][ T5570] sysv_free_block: getblk() failed [ 142.180750][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.184623][ T5570] sysv_free_block: getblk() failed [ 142.192915][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.197063][ T5570] sysv_free_block: getblk() failed [ 142.232630][ T5730] device veth0_vlan entered promiscuous mode [ 142.246597][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.252291][ T5570] sysv_free_block: getblk() failed [ 142.255446][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.263977][ T5570] sysv_free_block: getblk() failed [ 142.285578][ T5730] device veth1_vlan entered promiscuous mode [ 142.306589][ T5570] sysv_free_block: getblk() failed [ 142.313984][ T5570] sysv_free_block: getblk() failed [ 142.319767][ T5570] sysv_free_block: getblk() failed [ 142.325380][ T5570] sysv_free_block: getblk() failed [ 142.331862][ T5570] sysv_free_block: getblk() failed [ 142.337184][ T5570] sysv_free_block: getblk() failed [ 142.343386][ T5570] sysv_free_block: getblk() failed [ 142.346246][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.349807][ T5570] sysv_free_block: getblk() failed [ 142.361835][ T5570] sysv_free_block: getblk() failed [ 142.364705][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.367073][ T5570] sysv_free_block: getblk() failed [ 142.377346][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.380234][ T5570] sysv_free_block: getblk() failed [ 142.393938][ T5570] sysv_free_block: getblk() failed [ 142.395836][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.399692][ T5570] sysv_free_block: getblk() failed [ 142.413296][ T5570] sysv_free_block: getblk() failed [ 142.423512][ T5730] device veth0_macvtap entered promiscuous mode [ 142.441918][ T5730] device veth1_macvtap entered promiscuous mode [ 142.448585][ T5570] sysv_free_block: getblk() failed [ 142.459261][ T5570] sysv_free_block: getblk() failed [ 142.464736][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.465841][ T5570] sysv_free_block: getblk() failed [ 142.479928][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.491639][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.502469][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.503347][ T5570] sysv_free_block: getblk() failed [ 142.512354][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.512372][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.512388][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.512400][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.513723][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.539218][ T5570] sysv_free_block: getblk() failed [ 142.565266][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.581358][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.590606][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.609872][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.626332][ T5570] sysv_free_block: getblk() failed [ 142.631604][ T5570] sysv_free_block: getblk() failed [ 142.636756][ T5570] sysv_free_block: getblk() failed [ 142.657350][ T5570] sysv_free_block: getblk() failed [ 142.662695][ T5570] sysv_free_block: getblk() failed [ 142.672725][ T5570] sysv_free_block: getblk() failed [ 142.677116][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.677965][ T5570] sysv_free_block: getblk() failed [ 142.699079][ T5570] sysv_free_block: getblk() failed [ 142.704727][ T5570] sysv_free_block: getblk() failed [ 142.710286][ T5570] sysv_free_block: getblk() failed [ 142.715727][ T5570] sysv_free_block: getblk() failed [ 142.721769][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.742104][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.745363][ T5570] sysv_free_block: getblk() failed [ 142.767523][ T5976] loop0: detected capacity change from 0 to 1024 [ 142.770687][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.774149][ T5570] sysv_free_block: getblk() failed [ 142.792632][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.803221][ T5570] sysv_free_block: getblk() failed [ 142.808472][ T5570] sysv_free_block: getblk() failed [ 142.816394][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.821841][ T5570] sysv_free_block: getblk() failed [ 142.838582][ T5570] sysv_free_block: trying to free block not in datazone [ 142.838840][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.846050][ T5570] sysv_free_block: trying to free block not in datazone [ 142.870648][ T5570] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 142.874600][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.906531][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.917300][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.937209][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.020419][ T5730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.029934][ T5976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 143.055875][ T5730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.075096][ T5730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.119341][ T5730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.137003][ T3544] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.154596][ T3544] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.422289][ T3853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.462006][ T3853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.501390][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.536770][ T3853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.584086][ T3853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.628703][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.693615][ T5999] loop1: detected capacity change from 0 to 2048 [ 143.860329][ T21] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 143.893094][ T21] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.924015][ T5999] EXT4-fs (loop1): Unrecognized mount option "measure" or missing value [ 144.162680][ T6019] loop3: detected capacity change from 0 to 1024 [ 145.149593][ T6033] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 145.214578][ T6039] loop2: detected capacity change from 0 to 47 [ 145.435950][ T3854] attempt to access beyond end of device [ 145.435950][ T3854] loop2: rw=1, want=50, limit=47 [ 145.473170][ T6051] loop4: detected capacity change from 0 to 128 [ 145.502774][ T3854] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 145.544813][ T3854] attempt to access beyond end of device [ 145.544813][ T3854] loop2: rw=1, want=52, limit=47 [ 145.562010][ T3854] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 145.722512][ T6052] loop0: detected capacity change from 0 to 8192 [ 145.941944][ T6052] Dev loop0: RDB in block 1 has bad checksum [ 146.707905][ T6078] loop4: detected capacity change from 0 to 256 [ 146.801825][ T6078] exfat: Deprecated parameter 'namecase' [ 146.881316][ T6078] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 146.947735][ T6078] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 0) [ 146.999826][ T6078] exFAT-fs (loop4): failed to load alloc-bitmap [ 147.006365][ T6078] exFAT-fs (loop4): failed to recognize exfat type [ 147.074410][ T6083] loop0: detected capacity change from 0 to 4096 [ 147.130881][ T6083] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 147.182855][ T6097] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 147.190799][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 147.210339][ T6097] device gretap0 entered promiscuous mode [ 147.281192][ T6083] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 147.307428][ T6097] device gretap0 left promiscuous mode [ 147.322900][ T6106] sctp: [Deprecated]: syz.1.659 (pid 6106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.322900][ T6106] Use struct sctp_sack_info instead [ 147.350925][ T6083] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 147.419405][ T6083] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 147.443616][ T6102] netlink: 228 bytes leftover after parsing attributes in process `syz.1.659'. [ 147.492424][ T6083] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.513582][ T6102] netlink: 169 bytes leftover after parsing attributes in process `syz.1.659'. [ 147.637652][ T6083] ntfs: volume version 3.1. [ 147.679889][ T6083] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 147.755995][ T6083] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 147.791212][ T6083] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 147.889416][ T6129] loop4: detected capacity change from 0 to 256 [ 147.960539][ T6129] exfat: Deprecated parameter 'namecase' [ 148.007520][ T6129] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 148.015843][ T6125] loop2: detected capacity change from 0 to 8192 [ 148.070343][ T6129] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 0) [ 148.088483][ T6129] exFAT-fs (loop4): failed to load alloc-bitmap [ 148.114661][ T6125] Dev loop2: RDB in block 1 has bad checksum [ 148.140206][ T6129] exFAT-fs (loop4): failed to recognize exfat type [ 148.144155][ T6141] loop1: detected capacity change from 0 to 2048 [ 148.257711][ T6141] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 148.452287][ T6155] loop2: detected capacity change from 0 to 4096 [ 148.502788][ T6155] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 148.535473][ T3545] kernel write not supported for file /vcs (pid: 3545 comm: kworker/0:4) [ 148.552423][ T6155] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 148.578417][ T6155] ntfs: volume version 3.1. [ 148.959640][ T6177] loop2: detected capacity change from 0 to 8192 [ 149.079787][ T6143] loop3: detected capacity change from 0 to 32768 [ 149.723714][ T6177] Dev loop2: RDB in block 1 has bad checksum [ 149.732495][ T6143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.679 (6143) [ 149.766272][ T6184] loop4: detected capacity change from 0 to 2048 [ 149.824978][ T6184] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 149.826828][ T6143] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 149.849920][ T6143] BTRFS info (device loop3): using free space tree [ 149.866998][ T6143] BTRFS info (device loop3): has skinny extents [ 150.039690][ T6220] loop0: detected capacity change from 0 to 256 [ 150.050061][ T6143] BTRFS info (device loop3): enabling ssd optimizations [ 150.105474][ T6220] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 150.276030][ T6237] loop1: detected capacity change from 0 to 2048 [ 150.335264][ T6237] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 151.899572][ T6265] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.757826][ T6290] loop3: detected capacity change from 0 to 4096 [ 152.801143][ T6290] __ntfs_warning: 9 callbacks suppressed [ 152.801158][ T6290] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 152.839949][ T6290] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 152.858098][ T6290] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 152.868753][ T6290] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 152.887393][ T6290] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 152.936318][ T6290] ntfs: volume version 3.1. [ 152.948654][ T6290] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 152.982797][ T6290] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 152.999788][ T6290] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 153.079760][ T6265] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.089353][ T6265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.099061][ T6265] usb 2-1: config 0 descriptor?? [ 153.156761][ T6292] loop3: detected capacity change from 0 to 2048 [ 153.164633][ T6265] cp210x 2-1:0.0: cp210x converter detected [ 153.213612][ T6292] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 153.493826][ T6302] syz.3.736: vmalloc error: size 12884901888, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 153.511601][ T6302] CPU: 0 PID: 6302 Comm: syz.3.736 Not tainted 5.15.161-syzkaller #0 [ 153.519864][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 153.530118][ T6302] Call Trace: [ 153.533401][ T6302] [ 153.536328][ T6302] dump_stack_lvl+0x1e3/0x2d0 [ 153.541041][ T6302] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 153.546682][ T6302] ? panic+0x860/0x860 [ 153.550774][ T6302] warn_alloc+0x278/0x3f0 [ 153.555108][ T6302] ? __vmalloc_node_range+0x91/0x8c0 [ 153.560400][ T6302] ? zone_watermark_ok_safe+0x280/0x280 [ 153.565993][ T6302] ? mark_lock+0x98/0x340 [ 153.570333][ T6302] __vmalloc_node_range+0x2b9/0x8c0 [ 153.575547][ T6302] ? print_irqtrace_events+0x210/0x210 [ 153.581026][ T6302] ? memslot_rmap_alloc+0x5e/0x290 [ 153.586241][ T6302] __vmalloc+0x75/0x80 [ 153.590319][ T6302] ? memslot_rmap_alloc+0x5e/0x290 [ 153.595435][ T6302] memslot_rmap_alloc+0x5e/0x290 [ 153.600394][ T6302] kvm_arch_prepare_memory_region+0xbd/0xba0 [ 153.606387][ T6302] ? kvm_set_memslot+0x629/0x1af0 [ 153.611431][ T6302] kvm_set_memslot+0x63e/0x1af0 [ 153.616310][ T6302] ? __kvm_memslots+0x1a0/0x1a0 [ 153.621191][ T6302] __kvm_set_memory_region+0xcda/0x1060 [ 153.626760][ T6302] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 153.632268][ T6302] ? kvm_vm_ioctl_set_memory_region+0x62/0xa0 [ 153.638435][ T6302] ? __might_fault+0xb8/0x110 [ 153.643123][ T6302] ? mutex_lock_io_nested+0x60/0x60 [ 153.648342][ T6302] ? __might_fault+0xb4/0x110 [ 153.653030][ T6302] kvm_vm_ioctl_set_memory_region+0x6d/0xa0 [ 153.658932][ T6302] kvm_vm_ioctl+0x922/0xb60 [ 153.663436][ T6302] ? tomoyo_path_number_perm+0x648/0x810 [ 153.669082][ T6302] ? kvm_device_release+0x1f0/0x1f0 [ 153.674301][ T6302] ? tomoyo_path_number_perm+0x6ab/0x810 [ 153.679998][ T6302] ? __fget_files+0x413/0x480 [ 153.684700][ T6302] ? bpf_lsm_file_ioctl+0x5/0x10 [ 153.689645][ T6302] ? security_file_ioctl+0x7d/0xa0 [ 153.694762][ T6302] ? kvm_device_release+0x1f0/0x1f0 [ 153.699969][ T6302] __se_sys_ioctl+0xf1/0x160 [ 153.704571][ T6302] do_syscall_64+0x3b/0xb0 [ 153.709076][ T6302] ? clear_bhb_loop+0x15/0x70 [ 153.713756][ T6302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.719663][ T6302] RIP: 0033:0x7f5adc2d1ae9 [ 153.724088][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.743782][ T6302] RSP: 002b:00007f5adad52048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.752205][ T6302] RAX: ffffffffffffffda RBX: 00007f5adc45ffa0 RCX: 00007f5adc2d1ae9 [ 153.760269][ T6302] RDX: 0000000020003340 RSI: 000000004020ae46 RDI: 0000000000000004 [ 153.768243][ T6302] RBP: 00007f5adc352746 R08: 0000000000000000 R09: 0000000000000000 [ 153.776215][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.784191][ T6302] R13: 000000000000000b R14: 00007f5adc45ffa0 R15: 00007fff246b8228 [ 153.792184][ T6302] [ 153.799539][ T6302] Mem-Info: [ 153.802985][ T6302] active_anon:277 inactive_anon:6080 isolated_anon:0 [ 153.802985][ T6302] active_file:4195 inactive_file:36062 isolated_file:0 [ 153.802985][ T6302] unevictable:768 dirty:211 writeback:0 [ 153.802985][ T6302] slab_reclaimable:20145 slab_unreclaimable:92591 [ 153.802985][ T6302] mapped:17581 shmem:4389 pagetables:466 bounce:0 [ 153.802985][ T6302] kernel_misc_reclaimable:0 [ 153.802985][ T6302] free:1451995 free_pcp:7594 free_cma:0 [ 153.845300][ T6302] Node 0 active_anon:1100kB inactive_anon:23804kB active_file:16712kB inactive_file:144248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:70324kB dirty:844kB writeback:0kB shmem:15496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10060kB pagetables:1864kB all_unreclaimable? no [ 153.884866][ T6302] Node 1 active_anon:8kB inactive_anon:516kB active_file:68kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 153.915837][ T6302] Node 0 DMA free:15360kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.942733][ T6302] lowmem_reserve[]: 0 2629 2630 2630 2630 [ 153.948620][ T6302] Node 0 DMA32 free:1847316kB min:35532kB low:44412kB high:53292kB reserved_highatomic:0KB active_anon:1100kB inactive_anon:23804kB active_file:16712kB inactive_file:144248kB unevictable:1536kB writepending:844kB present:3129332kB managed:2699548kB mlocked:0kB bounce:0kB free_pcp:26720kB local_pcp:21980kB free_cma:0kB [ 153.979113][ T6302] lowmem_reserve[]: 0 0 0 0 0 [ 153.984049][ T6302] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.010551][ T6302] lowmem_reserve[]: 0 0 0 0 0 [ 154.015417][ T6302] Node 1 Normal free:3945304kB min:54364kB low:67952kB high:81540kB reserved_highatomic:0KB active_anon:8kB inactive_anon:516kB active_file:68kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2800kB local_pcp:996kB free_cma:0kB [ 154.045008][ T6302] lowmem_reserve[]: 0 0 0 0 0 [ 154.054210][ T6302] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.067227][ T6265] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 154.074843][ T6265] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 154.081452][ T6302] Node 0 DMA32: 159*4kB (UM) 203*8kB (UME) 412*16kB (UME) 533*32kB (UME) 232*64kB (UME) 92*128kB (UME) 38*256kB (UM) 5*512kB (UM) 1*1024kB (M) 4*2048kB (UM) 433*4096kB (ME) = 1847604kB [ 154.107949][ T6265] usb 2-1: cp210x converter now attached to ttyUSB0 [ 154.119602][ T6265] usb 2-1: USB disconnect, device number 3 [ 154.125633][ T6302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 154.144909][ T6265] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.152988][ T6302] Node 1 Normal: 98*4kB (UME) 24*8kB (UME) 27*16kB (UE) 177*32kB (UME) 75*64kB (UME) 19*128kB (UE) 11*256kB (U) 7*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 957*4096kB (M) = 3945304kB [ 154.179991][ T6265] cp210x 2-1:0.0: device disconnected [ 154.193455][ T6302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.206539][ T6302] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.218317][ T6302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.235214][ T6302] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.246536][ T6302] 44612 total pagecache pages [ 154.257359][ T6302] 0 pages in swap cache [ 154.262728][ T6302] Swap cache stats: add 80, delete 80, find 0/4 [ 154.269044][ T6302] Free swap = 124472kB [ 154.277881][ T6302] Total swap = 124996kB [ 154.283350][ T6302] 2097051 pages RAM [ 154.287247][ T6302] 0 pages HighMem/MovableOnly [ 154.298192][ T6302] 388241 pages reserved [ 154.303592][ T6302] 0 pages cma reserved [ 155.290618][ T6319] overlayfs: missing 'lowerdir' [ 155.485558][ T6319] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 155.557889][ T6325] loop3: detected capacity change from 0 to 2048 [ 155.614773][ T6325] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 162.969658][ T3544] Bluetooth: hci6: command 0x0409 tx timeout [ 162.982097][ T3544] Bluetooth: hci7: command 0x0409 tx timeout [ 162.989046][ T3544] Bluetooth: hci5: command 0x0409 tx timeout [ 165.049636][ T6266] Bluetooth: hci5: command 0x041b tx timeout [ 165.062060][ T6266] Bluetooth: hci7: command 0x041b tx timeout [ 165.068762][ T6266] Bluetooth: hci6: command 0x041b tx timeout [ 167.129571][ T3544] Bluetooth: hci6: command 0x040f tx timeout [ 167.136500][ T3544] Bluetooth: hci7: command 0x040f tx timeout [ 167.143491][ T3544] Bluetooth: hci5: command 0x040f tx timeout [ 167.369686][ T3544] Bluetooth: hci8: command 0x0409 tx timeout [ 168.339671][ T1066] Bluetooth: hci9: command 0x0409 tx timeout [ 169.209684][ T6266] Bluetooth: hci5: command 0x0419 tx timeout [ 169.215864][ T6266] Bluetooth: hci7: command 0x0419 tx timeout [ 169.227436][ T6266] Bluetooth: hci6: command 0x0419 tx timeout [ 169.449667][ T6266] Bluetooth: hci8: command 0x041b tx timeout [ 170.419816][ T6266] Bluetooth: hci9: command 0x041b tx timeout [ 171.529571][ T6266] Bluetooth: hci8: command 0x040f tx timeout [ 172.489538][ T3544] Bluetooth: hci9: command 0x040f tx timeout [ 173.610506][ T3544] Bluetooth: hci8: command 0x0419 tx timeout [ 174.569548][ T1066] Bluetooth: hci9: command 0x0419 tx timeout [ 194.091217][ T1370] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.097532][ T1370] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.409626][ T3544] Bluetooth: hci0: command 0x0406 tx timeout [ 211.539668][ T3544] Bluetooth: hci3: command 0x0406 tx timeout [ 221.769648][ T6266] Bluetooth: hci2: command 0x0406 tx timeout [ 223.529564][ T6266] Bluetooth: hci10: command 0x0409 tx timeout [ 223.529579][ T5440] Bluetooth: hci11: command 0x0409 tx timeout [ 223.550532][ T6266] Bluetooth: hci12: command 0x0409 tx timeout [ 225.619671][ T6266] Bluetooth: hci12: command 0x041b tx timeout [ 225.626694][ T6266] Bluetooth: hci10: command 0x041b tx timeout [ 225.632913][ T6266] Bluetooth: hci11: command 0x041b tx timeout [ 227.369541][ T6266] Bluetooth: hci13: command 0x0409 tx timeout [ 227.689776][ T6266] Bluetooth: hci11: command 0x040f tx timeout [ 227.696828][ T6266] Bluetooth: hci10: command 0x040f tx timeout [ 227.709505][ T6266] Bluetooth: hci12: command 0x040f tx timeout [ 228.889574][ T5440] Bluetooth: hci14: command 0x0409 tx timeout [ 229.449520][ T6266] Bluetooth: hci13: command 0x041b tx timeout [ 229.769671][ T6266] Bluetooth: hci12: command 0x0419 tx timeout [ 229.775822][ T6266] Bluetooth: hci10: command 0x0419 tx timeout [ 229.787377][ T6266] Bluetooth: hci11: command 0x0419 tx timeout [ 230.979748][ T6266] Bluetooth: hci14: command 0x041b tx timeout [ 231.529628][ T6266] Bluetooth: hci13: command 0x040f tx timeout [ 233.049748][ T3544] Bluetooth: hci14: command 0x040f tx timeout [ 233.619546][ T6266] Bluetooth: hci13: command 0x0419 tx timeout [ 235.129745][ T6266] Bluetooth: hci14: command 0x0419 tx timeout [ 252.499512][ T3544] Bluetooth: hci4: command 0x0406 tx timeout [ 255.533949][ T1370] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.540474][ T1370] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.609543][ T5297] Bluetooth: hci1: command 0x0406 tx timeout [ 283.209570][ T1066] Bluetooth: hci5: command 0x0406 tx timeout [ 283.216348][ T1066] Bluetooth: hci7: command 0x0406 tx timeout [ 283.222409][ T1066] Bluetooth: hci6: command 0x0406 tx timeout [ 283.529578][ T7] Bluetooth: hci16: command 0x0409 tx timeout [ 283.529623][ T1066] Bluetooth: hci15: command 0x0409 tx timeout [ 283.929580][ T1066] Bluetooth: hci17: command 0x0409 tx timeout [ 285.609643][ T1066] Bluetooth: hci15: command 0x041b tx timeout [ 285.616487][ T1066] Bluetooth: hci16: command 0x041b tx timeout [ 286.009622][ T1066] Bluetooth: hci17: command 0x041b tx timeout [ 287.449646][ T5297] Bluetooth: hci18: command 0x0409 tx timeout [ 287.689575][ T1066] Bluetooth: hci16: command 0x040f tx timeout [ 287.697510][ T1066] Bluetooth: hci15: command 0x040f tx timeout [ 288.089611][ T1066] Bluetooth: hci17: command 0x040f tx timeout [ 288.329676][ T1066] Bluetooth: hci8: command 0x0406 tx timeout [ 288.969531][ T7] Bluetooth: hci19: command 0x0409 tx timeout [ 289.536445][ T1066] Bluetooth: hci18: command 0x041b tx timeout [ 289.769558][ T5297] Bluetooth: hci15: command 0x0419 tx timeout [ 289.775678][ T5297] Bluetooth: hci16: command 0x0419 tx timeout [ 290.169676][ T5297] Bluetooth: hci17: command 0x0419 tx timeout [ 291.059543][ T3544] Bluetooth: hci19: command 0x041b tx timeout [ 291.609651][ T3544] Bluetooth: hci18: command 0x040f tx timeout [ 293.129548][ T7] Bluetooth: hci19: command 0x040f tx timeout [ 293.459550][ T7] Bluetooth: hci9: command 0x0406 tx timeout [ 293.689812][ T7] Bluetooth: hci18: command 0x0419 tx timeout [ 295.209584][ T3544] Bluetooth: hci19: command 0x0419 tx timeout [ 306.089677][ T27] INFO: task syz.4.722:6267 blocked for more than 143 seconds. [ 306.097280][ T27] Not tainted 5.15.161-syzkaller #0 [ 306.110902][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.123019][ T27] task:syz.4.722 state:D stack:27520 pid: 6267 ppid: 5730 flags:0x00004004 [ 306.135124][ T27] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 306.138400][ T27] [ 306.144707][ T27] __schedule+0x12c4/0x45b0 [ 306.149260][ T27] ? release_firmware_map_entry+0x190/0x190 [ 306.158642][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 306.167448][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 306.184078][ T27] schedule+0x11b/0x1f0 [ 306.188256][ T27] schedule_preempt_disabled+0xf/0x20 [ 306.199352][ T27] __mutex_lock_common+0xe34/0x25a0 [ 306.204612][ T27] ? __tun_chr_ioctl+0x460/0x2270 [ 306.215217][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 306.220461][ T27] mutex_lock_nested+0x17/0x20 [ 306.225223][ T27] __tun_chr_ioctl+0x460/0x2270 [ 306.235787][ T27] ? tun_flow_create+0x310/0x310