last executing test programs: 20.429577089s ago: executing program 1 (id=1629): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x8050}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0) 20.381469353s ago: executing program 1 (id=1630): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f0000000880)="$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") 20.322459828s ago: executing program 1 (id=1631): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x20000094) 20.224220246s ago: executing program 1 (id=1632): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 20.215809277s ago: executing program 1 (id=1633): ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f000", 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 20.142338583s ago: executing program 1 (id=1634): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 10.099729474s ago: executing program 4 (id=1698): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$audio1(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) 9.892115261s ago: executing program 4 (id=1701): epoll_create1(0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0x3}, {0x8, 0xf}, {0x5, 0x6}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffedd) 9.635458652s ago: executing program 4 (id=1702): mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='inode_readahead_blks', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 8.855664656s ago: executing program 4 (id=1706): socket(0x2, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0xc00000}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x9}, 0x0, 0x6e6bb0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 7.94425333s ago: executing program 4 (id=1709): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040), 0x8) 7.840220059s ago: executing program 4 (id=1710): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 6.652169846s ago: executing program 3 (id=1716): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x1989, &(0x7f0000001440)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) close(r1) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) close(r2) 5.770249518s ago: executing program 3 (id=1718): socket(0x2, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0xc00000}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x9}, 0x0, 0x6e6bb0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 5.62685771s ago: executing program 3 (id=1721): ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f000000000000000", 0xf) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.487502032s ago: executing program 3 (id=1726): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) r1 = memfd_create(&(0x7f0000000000)='j/\x00\x84\xbes\xc0\xb0\t\xf8\xbcQ\xbav)\x82>\xb6\xee~\x81\xfbR=\xbf\x99@_\x01\xc3\xadl\x8b\xfbT\xf6\xf5D\r\x81\x89\xb0\x8aFtRg', 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x0, 0x0) sigaltstack(0x0, 0x0) 2.236225427s ago: executing program 2 (id=1746): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000003680)={0x14}, 0x14}}, 0x0) 2.19825983s ago: executing program 0 (id=1738): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc32a1e1c81a85", 0x30}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c697b4f63ff06e8ef72792bc9e4d188015c40f05384741ee", 0x35}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001140)="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", 0x21b}], 0x1}}], 0x2, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000740)={0x18c, 0x15, 0x0, 0x0, 0x0, {0x25}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "d5cf07583ff8676f50cd0930a32b6216f0dd25f1e66d40aa63a3b76b58c54b7c1bb87ef8fbb6d31083"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "2fb016ae2d2f2bd7b733f89b9ee24e9933d517f13eb9fe07ffe2ba135da1167da690e541dad06c72742c62d780e6be426aaccdf414ba131fc86c4304e1b2fe7c1307f8a9ecd189addd7b4a4738092ff617b1fe314bf72728afa34be2ea535ec0a659b149af1f8d0316a1f3c6f117f124715294d8f1335bb4624fd1771074b65792db0e3bca8f336832b2142a16583cbf96967904e41a212060cf56fa5a102ecb4ee926276aacdfbeb4344fae0daa1c0b9e2db1eca5d5f14a3097f1a34b6c5e00010f47d512e597aef2746c2a96f5"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "a9a08897c0afd91d90e34641fe08abfd3ff75d63b3"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "2f80fea4a635d3dc32e34ae94fd5f95b5202f0387eda45227ded97fa10cc80e2d609f7ecec34171fcace0fff80f426a39c75bdc69d61236196b42a5b4c286f82e18bf02977172e524426ba185fb8efe0c8"}]}, 0x18c}}, 0x4000841) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) 2.176793532s ago: executing program 2 (id=1739): socket$igmp6(0xa, 0x3, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc082, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = openat$dsp(0xffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d08, &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 1.274712746s ago: executing program 2 (id=1741): socket(0x2, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0xc00000}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x9}, 0x0, 0x6e6bb0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 1.239030929s ago: executing program 3 (id=1742): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 1.198226232s ago: executing program 0 (id=1743): epoll_create1(0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffedd) 1.142264587s ago: executing program 2 (id=1744): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc32a1e1c81a85", 0x30}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c697b4f63ff06e8ef72792bc9e4d188015c40f05384741eea7303566305add", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001140)="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", 0x469}], 0x1}}], 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) 1.038833615s ago: executing program 0 (id=1745): ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f00000000000000000", 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 997.521688ms ago: executing program 2 (id=1747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400230300000008000100000a000000", @ANYRES32, @ANYBLOB="080008000004000014000100ff"], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000000), 0x1, 0x625, &(0x7f0000001400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r6], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2f000000000000000900000000000000850000000e0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 954.519552ms ago: executing program 0 (id=1748): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc32a1e1c81a85", 0x30}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c697b4f63ff06e8ef72792bc9e4d188015c40f05384741eea7303566305add", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001140)="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", 0x3ec}], 0x1}}], 0x2, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000740)={0x160, 0x15, 0x0, 0x0, 0x0, {0x25}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "2fb016ae2d2f2bd7b733f89b9ee24e9933d517f13eb9fe07ffe2ba135da1167da690e541dad06c72742c62d780e6be426aaccdf414ba131fc86c4304e1b2fe7c1307f8a9ecd189addd7b4a4738092ff617b1fe314bf72728afa34be2ea535ec0a659b149af1f8d0316a1f3c6f117f124715294d8f1335bb4624fd1771074b65792db0e3bca8f336832b2142a16583cbf96967904e41a212060cf56fa5a102ecb4ee926276aacdfbeb4344fae0daa1c0b9e2db1eca5d5f14a3097f1a34b6c5e00010f47d512e597aef2746c2a96"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "a9a08897c0afd91d90e34641fe08abfd3ff75d63b3"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "2f80fea4a635d3dc32e34ae94fd5f95b5202f0387eda45227ded97fa10cc80e2d609f7ecec34171fcace0fff80f426a39c75bdc69d61236196b42a5b4c286f82e18bf02977172e524426ba185fb8efe0c8"}]}, 0x160}}, 0x4000841) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) 68.095314ms ago: executing program 2 (id=1749): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r1, r0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, 0x0, 0x0) 215.3µs ago: executing program 3 (id=1750): r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 0 (id=1751): socket$igmp6(0xa, 0x3, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc082, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = openat$dsp(0xffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d08, &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 1 [ 202.958565][ T4312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.961399][ T4312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.964744][ T4312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.967155][ T4312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.969405][ T4312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.727062][ T7181] Invalid architecture in ELF header: 62 [ 204.783450][ T7178] chnl_net:caif_netlink_parms(): no params data found [ 204.851456][ T27] audit: type=1326 audit(204.810:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.3.947" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa945e68 code=0x0 [ 204.988663][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.991256][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.994115][ T7178] device bridge_slave_0 entered promiscuous mode [ 204.999040][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.002311][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.008937][ T7178] device bridge_slave_1 entered promiscuous mode [ 205.140419][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.145230][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.167952][ T7178] team0: Port device team_slave_0 added [ 205.173714][ T7178] team0: Port device team_slave_1 added [ 205.203547][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.205601][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.219478][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.225180][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.227389][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.242432][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.312696][ T7178] device hsr_slave_0 entered promiscuous mode [ 205.360510][ T7178] device hsr_slave_1 entered promiscuous mode [ 205.399305][ T7178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.401680][ T7178] Cannot create hsr debugfs directory [ 205.729597][ T7178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.789820][ T4308] Bluetooth: hci2: command tx timeout [ 205.846247][ T7206] loop3: detected capacity change from 0 to 164 [ 205.934155][ T7178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.041161][ T7178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.181677][ T7178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.320554][ T27] audit: type=1326 audit(206.240:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.953" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 207.426110][ T27] audit: type=1326 audit(207.380:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.1.957" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 207.448569][ T7235] cgroup: subsys name conflicts with all [ 207.556233][ T7239] loop0: detected capacity change from 0 to 1024 [ 207.566307][ T7178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.265673][ T4308] Bluetooth: hci2: command tx timeout [ 208.273527][ T7178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.315918][ T7178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.361540][ T7178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.538103][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.574160][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.576899][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.581354][ T7178] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.585994][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.588997][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.596351][ T4684] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.598352][ T4684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.609702][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.618338][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.625703][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.632690][ T4684] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.634654][ T4684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.671166][ T27] audit: type=1326 audit(208.630:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.4.966" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 208.693957][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.697004][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.103153][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.136918][ T7265] loop1: detected capacity change from 0 to 1024 [ 209.545818][ T7265] EXT4-fs (loop1): barriers disabled [ 209.551142][ T7265] JBD2: no valid journal superblock found [ 209.552985][ T7265] EXT4-fs (loop1): error loading journal [ 209.646440][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.716414][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.741461][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.783355][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.791196][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.800502][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.810912][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.813941][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.817246][ T27] audit: type=1326 audit(209.770:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.971" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa945e68 code=0x0 [ 209.838126][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.957900][ T7278] loop0: detected capacity change from 0 to 512 [ 210.027059][ T7278] EXT4-fs (loop0): 1 truncate cleaned up [ 210.028704][ T7278] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.116127][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.121275][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.131783][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.147140][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.150530][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.199629][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.205834][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.269486][ T4312] Bluetooth: hci2: command tx timeout [ 210.289104][ T7178] device veth0_vlan entered promiscuous mode [ 210.295931][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.298384][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.316373][ T7178] device veth1_vlan entered promiscuous mode [ 210.337110][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.341334][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.344060][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.348879][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.358253][ T7178] device veth0_macvtap entered promiscuous mode [ 210.363935][ T7178] device veth1_macvtap entered promiscuous mode [ 210.383342][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.386726][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.390348][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.395105][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.398382][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.401691][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.404498][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.407442][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.410306][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.413339][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.417477][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.422252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.444328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.513240][ T7293] binder: 7293:7290 cannot find target node [ 210.515063][ T7293] binder: 7290:7293 transaction call to 0:0 failed 1/29189/-22, size 0-0 line 3054 [ 210.517652][ T7293] binder: 7290:7293 ioctl c0306201 20000380 returned -14 [ 210.522936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.563509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.695142][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.700449][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.808929][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.869529][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.934546][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.991846][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.040247][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.101995][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.147290][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.164049][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.196335][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.208094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.212562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.217255][ T7178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.219775][ T7178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.222013][ T7178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.224313][ T7178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.345568][ T4788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.347988][ T4788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.373849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.400985][ T7018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.403222][ T7018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.408485][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.412477][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 211.617533][ T27] audit: type=1326 audit(211.570:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.3.981" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa945e68 code=0x0 [ 211.955828][ T7317] loop0: detected capacity change from 0 to 1024 [ 212.027027][ T7317] EXT4-fs (loop0): barriers disabled [ 212.031069][ T7317] JBD2: no valid journal superblock found [ 212.032788][ T7317] EXT4-fs (loop0): error loading journal [ 212.349849][ T4308] Bluetooth: hci2: command tx timeout [ 212.570356][ T27] audit: type=1326 audit(212.520:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.1.986" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 212.847782][ T7331] capability: warning: `syz.2.991' uses 32-bit capabilities (legacy support in use) [ 213.393844][ T4351] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 213.629482][ T4351] usb 1-1: Using ep0 maxpacket: 32 [ 213.749599][ T4351] usb 1-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 213.752347][ T4351] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.633537][ T4351] usb 1-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19 [ 214.635975][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.638032][ T4351] usb 1-1: Product: syz [ 214.639110][ T4351] usb 1-1: Manufacturer: syz [ 214.641168][ T4351] usb 1-1: SerialNumber: syz [ 214.648579][ T4351] usb 1-1: config 0 descriptor?? [ 214.704499][ T4351] rndis_wlan 1-1:0.0: skipping garbage [ 214.706237][ T4351] usb 1-1: bad CDC descriptors [ 214.769985][ T4351] rndis_host 1-1:0.0: skipping garbage [ 214.771524][ T4351] usb 1-1: bad CDC descriptors [ 214.773826][ T4351] cdc_acm 1-1:0.0: skipping garbage [ 214.860556][ T7377] Process accounting resumed [ 215.115929][ T27] audit: type=1326 audit(215.070:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.1014" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 215.140495][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 215.149890][ T4308] Bluetooth: hci4: command 0x0406 tx timeout [ 215.158815][ T4352] usb 1-1: USB disconnect, device number 12 [ 215.304998][ T7385] loop3: detected capacity change from 0 to 40427 [ 215.331882][ T7385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 215.354981][ T7385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 215.377134][ T7382] syz.3.1013: attempt to access beyond end of device [ 215.377134][ T7382] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 215.393199][ T7385] syz.3.1013: attempt to access beyond end of device [ 215.393199][ T7385] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.431482][ T4300] syz-executor: attempt to access beyond end of device [ 215.431482][ T4300] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 215.870665][ T7408] loop4: detected capacity change from 0 to 1024 [ 215.940553][ T7408] EXT4-fs (loop4): barriers disabled [ 215.943300][ T7408] JBD2: no valid journal superblock found [ 215.944941][ T7408] EXT4-fs (loop4): error loading journal [ 217.244644][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.260142][ T7411] loop0: detected capacity change from 0 to 40427 [ 217.271644][ T7411] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 217.273890][ T7411] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 217.279535][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.287192][ T7411] F2FS-fs (loop0): invalid crc value [ 217.293500][ T7421] loop4: detected capacity change from 0 to 40427 [ 217.304499][ T7421] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 217.308781][ T7421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 217.329795][ T7421] F2FS-fs (loop4): invalid crc value [ 217.337791][ T7411] F2FS-fs (loop0): Found nat_bits in checkpoint [ 217.368780][ T7421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 217.395602][ T7421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 217.397622][ T7421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 217.397666][ T7411] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 217.405696][ T7411] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 217.428367][ T7421] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 217.909544][ T7456] loop3: detected capacity change from 0 to 1024 [ 217.942321][ T7456] EXT4-fs (loop3): barriers disabled [ 217.945240][ T7456] JBD2: no valid journal superblock found [ 217.946857][ T7456] EXT4-fs (loop3): error loading journal [ 218.430459][ T27] audit: type=1326 audit(218.390:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.1.1049" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 219.260635][ T4312] Bluetooth: hci4: command tx timeout [ 221.275195][ T7472] loop3: detected capacity change from 0 to 65536 [ 221.355974][ T7472] XFS (loop3): Mounting V5 Filesystem [ 221.382905][ T7484] loop0: detected capacity change from 0 to 40427 [ 221.425137][ T7484] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 221.427195][ T7484] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 221.481866][ T7484] F2FS-fs (loop0): invalid crc value [ 221.504833][ T7484] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.531968][ T7472] XFS (loop3): Ending clean mount [ 221.574007][ T7484] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 221.578219][ T7484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.623258][ T4300] XFS (loop3): Unmounting Filesystem [ 221.631662][ T7484] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 222.787668][ T7540] loop0: detected capacity change from 0 to 2048 [ 222.800921][ T7540] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 222.808916][ T7540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.911207][ T27] audit: type=1326 audit(222.870:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.1.1072" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 223.588185][ T7524] loop4: detected capacity change from 0 to 40427 [ 223.609400][ T7524] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 223.611503][ T7524] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 223.649914][ T7524] F2FS-fs (loop4): invalid crc value [ 223.679467][ T7524] F2FS-fs (loop4): Found nat_bits in checkpoint [ 223.687301][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.729649][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.736159][ T7524] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 223.738286][ T7524] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.213984][ T27] audit: type=1326 audit(225.170:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.2.1084" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 225.779398][ T4308] Bluetooth: hci4: command tx timeout [ 225.972921][ T7566] loop1: detected capacity change from 0 to 40427 [ 226.009715][ T7566] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 226.012045][ T7566] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 226.020785][ T7566] F2FS-fs (loop1): invalid crc value [ 226.054141][ T7566] F2FS-fs (loop1): Found nat_bits in checkpoint [ 226.095731][ T7566] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 226.097798][ T7566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 226.132606][ T7566] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 227.293834][ T7604] loop3: detected capacity change from 0 to 2048 [ 227.415743][ T7604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.530559][ T27] audit: type=1326 audit(227.450:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.1.1095" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 227.928559][ T7612] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 228.728924][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 228.734329][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 228.734329][ T9] [ 228.736876][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 228.738390][ T9] EXT4-fs (loop3): Free/Dirty block details [ 228.759389][ T9] EXT4-fs (loop3): free_blocks=2415919504 [ 228.760962][ T9] EXT4-fs (loop3): dirty_blocks=16 [ 228.762279][ T9] EXT4-fs (loop3): Block reservation details [ 228.763834][ T9] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 228.789793][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 228.873410][ T7627] loop4: detected capacity change from 0 to 2048 [ 228.895281][ T7627] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 228.897494][ T7620] loop0: detected capacity change from 0 to 40427 [ 228.908613][ T7627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.915829][ T7620] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 228.918038][ T7620] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 228.933810][ T7620] F2FS-fs (loop0): invalid crc value [ 228.955263][ T7620] F2FS-fs (loop0): Found nat_bits in checkpoint [ 228.999387][ T7620] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 229.001553][ T7620] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 229.148962][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.262499][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.209609][ T27] audit: type=1326 audit(230.160:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.1108" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 230.988892][ T7667] loop1: detected capacity change from 0 to 2048 [ 231.003539][ T7667] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 231.007738][ T7667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.169399][ T4312] Bluetooth: hci4: command tx timeout [ 231.234793][ T7673] loop0: detected capacity change from 0 to 1024 [ 231.286936][ T7673] EXT4-fs (loop0): barriers disabled [ 231.336418][ T7673] JBD2: no valid journal superblock found [ 231.338078][ T7673] EXT4-fs (loop0): error loading journal [ 232.428768][ T27] audit: type=1326 audit(232.380:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.4.1125" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 234.670916][ T7720] loop3: detected capacity change from 0 to 1024 [ 234.783645][ T4300] hfsplus: bad catalog entry type [ 234.820609][ T4300] hfsplus: bad catalog entry type [ 234.914904][ T27] audit: type=1326 audit(234.870:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.2.1139" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 235.795816][ T7701] loop1: detected capacity change from 0 to 32768 [ 235.822601][ T7701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1129 (7701) [ 235.854796][ T7701] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.864293][ T7701] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 235.867123][ T7701] BTRFS info (device loop1): using free space tree [ 235.875465][ T4372] hfsplus: b-tree write err: -5, ino 4 [ 236.138186][ T7701] BTRFS info (device loop1): enabling ssd optimizations [ 236.147824][ T7701] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.002712][ T27] audit: type=1326 audit(236.960:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1150" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 237.090801][ T4809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.271425][ T4809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.282580][ T27] audit: type=1326 audit(237.240:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.1153" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 237.460917][ T7743] loop0: detected capacity change from 0 to 40427 [ 237.462692][ T27] audit: type=1326 audit(237.420:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7770 comm="syz.1.1152" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 237.465057][ T7743] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 237.491369][ T4809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.508507][ T7743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.512311][ T4312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.516566][ T7743] F2FS-fs (loop0): invalid crc value [ 237.518374][ T4312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.521522][ T4312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.525379][ T4312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.528231][ T4312] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 237.531650][ T4312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.535315][ T7743] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.625213][ T7743] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 237.627157][ T7743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 237.643156][ T4809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.828571][ T7783] chnl_net:caif_netlink_parms(): no params data found [ 238.033255][ T7800] loop0: detected capacity change from 0 to 128 [ 238.066386][ T7800] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 238.117596][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 238.316841][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.318748][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.350035][ T7783] device bridge_slave_0 entered promiscuous mode [ 238.412793][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.414739][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.417238][ T7783] device bridge_slave_1 entered promiscuous mode [ 238.464398][ T7783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.722547][ T7815] loop0: detected capacity change from 0 to 1024 [ 238.753524][ T7815] EXT4-fs (loop0): barriers disabled [ 238.759081][ T7815] JBD2: no valid journal superblock found [ 238.760898][ T7815] EXT4-fs (loop0): error loading journal [ 238.896951][ T7783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.432690][ T7783] team0: Port device team_slave_0 added [ 239.452773][ T7783] team0: Port device team_slave_1 added [ 239.503467][ T7794] loop4: detected capacity change from 0 to 40427 [ 239.546622][ T7794] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 239.548621][ T7794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 239.580109][ T7794] F2FS-fs (loop4): invalid crc value [ 239.583919][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.585721][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.611453][ T7794] F2FS-fs (loop4): Found nat_bits in checkpoint [ 239.624222][ T7783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.629347][ T4308] Bluetooth: hci0: command tx timeout [ 239.649741][ T7794] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 239.651601][ T7794] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 239.741173][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.743236][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.769376][ T7783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.822675][ T4809] bridge0: port 3(gretap0) entered disabled state [ 239.911463][ T4809] device gretap0 left promiscuous mode [ 239.912971][ T4809] bridge0: port 3(gretap0) entered disabled state [ 240.072744][ T7783] device hsr_slave_0 entered promiscuous mode [ 240.120110][ T7783] device hsr_slave_1 entered promiscuous mode [ 240.139525][ T7783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.142703][ T7783] Cannot create hsr debugfs directory [ 240.303588][ T7858] loop0: detected capacity change from 0 to 1024 [ 240.319045][ T7858] EXT4-fs (loop0): barriers disabled [ 240.322612][ T7858] JBD2: no valid journal superblock found [ 240.324222][ T7858] EXT4-fs (loop0): error loading journal [ 241.014268][ T27] audit: type=1326 audit(240.970:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1174" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 241.709449][ T4308] Bluetooth: hci0: command tx timeout [ 242.812694][ T4809] device hsr_slave_0 left promiscuous mode [ 242.858498][ T4809] device hsr_slave_1 left promiscuous mode [ 242.919388][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.921384][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.923917][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.925930][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.942698][ T4809] device bridge_slave_1 left promiscuous mode [ 242.944364][ T4809] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.006875][ T4809] device bridge_slave_0 left promiscuous mode [ 243.008576][ T4809] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.219470][ T4809] device veth1_macvtap left promiscuous mode [ 243.221253][ T4809] device veth0_macvtap left promiscuous mode [ 243.222855][ T4809] device veth1_vlan left promiscuous mode [ 243.224385][ T4809] device veth0_vlan left promiscuous mode [ 243.434801][ T7911] loop1: detected capacity change from 0 to 32768 [ 243.551286][ T7911] XFS (loop1): Mounting V5 Filesystem [ 243.625687][ T7911] XFS (loop1): Ending clean mount [ 243.811456][ T4308] Bluetooth: hci0: command tx timeout [ 243.826824][ T7939] loop4: detected capacity change from 0 to 1024 [ 243.856494][ T7939] EXT4-fs (loop4): barriers disabled [ 243.871997][ T7939] JBD2: no valid journal superblock found [ 243.873655][ T7939] EXT4-fs (loop4): error loading journal [ 244.040609][ T4301] XFS (loop1): Unmounting Filesystem [ 244.483002][ T6879] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.900144][ T7947] loop0: detected capacity change from 0 to 40427 [ 244.903272][ T7947] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 244.905553][ T7947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 244.908790][ T7947] F2FS-fs (loop0): invalid crc value [ 244.913682][ T7947] F2FS-fs (loop0): Found nat_bits in checkpoint [ 244.934583][ T7947] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 244.936462][ T7947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 245.289174][ T27] audit: type=1326 audit(245.240:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.1205" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1145e68 code=0x0 [ 245.869434][ T4312] Bluetooth: hci0: command tx timeout [ 246.152010][ T7967] loop0: detected capacity change from 0 to 256 [ 246.166697][ T7967] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 246.174750][ T4809] team0 (unregistering): Port device team_slave_1 removed [ 246.265676][ T7969] loop0: detected capacity change from 0 to 1024 [ 246.351452][ T4809] team0 (unregistering): Port device team_slave_0 removed [ 246.530025][ T4809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.664820][ T7977] loop0: detected capacity change from 0 to 40427 [ 246.667909][ T7977] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 246.670528][ T7977] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 246.673724][ T7977] F2FS-fs (loop0): invalid crc value [ 246.686507][ T7977] F2FS-fs (loop0): Found nat_bits in checkpoint [ 246.708815][ T7977] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 246.711874][ T7977] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 246.751328][ T4809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.056045][ T27] audit: type=1326 audit(247.010:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.1215" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1145e68 code=0x0 [ 247.825368][ T7991] loop0: detected capacity change from 0 to 128 [ 247.830692][ T7991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 247.872701][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 247.909713][ T7995] loop0: detected capacity change from 0 to 256 [ 247.925862][ T7995] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 248.033858][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'. [ 248.434576][ T8010] loop0: detected capacity change from 0 to 40427 [ 248.437164][ T8010] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 248.439137][ T8010] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 248.443451][ T8010] F2FS-fs (loop0): invalid crc value [ 248.448712][ T8010] F2FS-fs (loop0): Found nat_bits in checkpoint [ 248.468421][ T8010] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 248.470599][ T8010] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 248.713184][ T27] audit: type=1326 audit(248.670:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.1225" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1145e68 code=0x0 [ 248.830231][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.833038][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.560499][ T8024] loop0: detected capacity change from 0 to 128 [ 249.568458][ T8024] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 249.617047][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 249.836917][ T8035] loop0: detected capacity change from 0 to 1024 [ 249.868205][ T4306] hfsplus: bad catalog entry type [ 249.872571][ T4306] hfsplus: bad catalog entry type [ 249.891105][ T4809] bond0 (unregistering): Released all slaves [ 249.925670][ T4462] hfsplus: b-tree write err: -5, ino 4 [ 250.418186][ T27] audit: type=1326 audit(250.370:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.2.1235" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 251.076518][ T7783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.120937][ T7783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.128225][ T8038] loop4: detected capacity change from 0 to 40427 [ 251.151183][ T7783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.156871][ T8038] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 251.159015][ T8038] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 251.185559][ T7783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.192958][ T8038] F2FS-fs (loop4): invalid crc value [ 251.254886][ T8038] F2FS-fs (loop4): Found nat_bits in checkpoint [ 251.283436][ T8041] loop1: detected capacity change from 0 to 32768 [ 251.314912][ T8041] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 251.317240][ T8041] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 251.342581][ T8038] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 251.344456][ T8038] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.387552][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.426765][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.428830][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.437043][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.463230][ T8041] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 2ms [ 251.464537][ T4312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.468894][ T4312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.471950][ T4312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.479818][ T4312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.482788][ T4312] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.489678][ T4312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.540583][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.543299][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.545775][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.547661][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.608737][ T7646] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 251.632895][ T7646] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 251.907823][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.071611][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.184426][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.186556][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.292495][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.300868][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.322281][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.368330][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.385230][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.409788][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.412651][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.422256][ T7783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.425034][ T7783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.447935][ T7646] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 815ms [ 252.458326][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.461661][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.464167][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.471431][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.471639][ T7646] gfs2: fsid=syz:syz.0: jid=0: Done [ 252.475996][ T8041] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 252.487470][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.550166][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.763625][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 253.010435][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.029356][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.031950][ T8061] device bridge_slave_0 entered promiscuous mode [ 253.080595][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.082515][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.085226][ T8061] device bridge_slave_1 entered promiscuous mode [ 253.137385][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.142798][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.147011][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.165982][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.171232][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.244476][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.247320][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.268579][ T27] audit: type=1326 audit(253.220:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.4.1248" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 253.287628][ T8061] team0: Port device team_slave_0 added [ 253.323591][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.326227][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.337402][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.360380][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.368299][ T8061] team0: Port device team_slave_1 added [ 253.390839][ T7783] device veth0_vlan entered promiscuous mode [ 253.424213][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.426090][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.449841][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.467137][ T7783] device veth1_vlan entered promiscuous mode [ 253.474838][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.476717][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.509467][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.549987][ T4312] Bluetooth: hci3: command tx timeout [ 253.572944][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.575539][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.579355][ T7783] device veth0_macvtap entered promiscuous mode [ 253.583990][ T7783] device veth1_macvtap entered promiscuous mode [ 253.691105][ T8061] device hsr_slave_0 entered promiscuous mode [ 253.739773][ T8061] device hsr_slave_1 entered promiscuous mode [ 253.789637][ T8061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.791715][ T8061] Cannot create hsr debugfs directory [ 253.797773][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.801242][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.804289][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.809601][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.812406][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.815287][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.817850][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.831566][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.834136][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.836724][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.873315][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.875369][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.877990][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.891055][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.901515][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.929529][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.932245][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.934792][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.944945][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.962332][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.974977][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.987995][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.995378][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.001439][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.006536][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.013899][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.099349][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.111595][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.159484][ T7783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.161768][ T7783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.163991][ T7783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.166189][ T7783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.333113][ T8061] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.444830][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.447200][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.573176][ T8061] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.600323][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.629417][ T4312] Bluetooth: hci3: command tx timeout [ 255.650174][ T7025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.657263][ T7025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.731744][ T8061] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.757435][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.924118][ T8061] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.086778][ T8129] loop1: detected capacity change from 0 to 40427 [ 256.113001][ T8129] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 256.129474][ T8129] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 256.145139][ T8129] F2FS-fs (loop1): invalid crc value [ 256.191362][ T8129] F2FS-fs (loop1): Found nat_bits in checkpoint [ 256.249840][ T8129] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 256.251887][ T8129] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 256.351119][ T8061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.393131][ T8061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.459355][ T8061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.517407][ T8061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.850738][ T8158] loop4: detected capacity change from 0 to 1024 [ 256.907049][ T8158] EXT4-fs (loop4): barriers disabled [ 256.911389][ T8158] JBD2: no valid journal superblock found [ 256.912971][ T8158] EXT4-fs (loop4): error loading journal [ 257.489366][ T6879] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.709643][ T4312] Bluetooth: hci3: command tx timeout [ 258.027586][ T8151] loop3: detected capacity change from 0 to 32768 [ 258.108122][ T8151] XFS (loop3): Mounting V5 Filesystem [ 258.157782][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.169880][ T8151] XFS (loop3): Ending clean mount [ 258.174896][ T8151] XFS (loop3): Quotacheck needed: Please wait. [ 258.177132][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.194733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.210262][ T7025] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xd2c, inode 0x1807 dinode [ 258.213293][ T7025] XFS (loop3): Unmount and run xfs_repair [ 258.214794][ T7025] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 258.217480][ T7025] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 258.220019][ T7025] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 258.222396][ T7025] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 258.224731][ T7025] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00 4.Xh....|....... [ 258.227657][ T7025] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01 ................ [ 258.232104][ T7025] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5 .............6.. [ 258.234521][ T7025] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06 ......Ty........ [ 258.234603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.236795][ T7025] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 258.249781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.257105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.260516][ T8151] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 258.269909][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.271864][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.274138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.280191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.286726][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.288593][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.309591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.312474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.315379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.318202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.326213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.335417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.436333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.449293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.452070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.470040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.479831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.486727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.500726][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.631705][ T27] audit: type=1326 audit(258.590:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.1268" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 258.654917][ T8170] loop4: detected capacity change from 0 to 40427 [ 258.660532][ T8170] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 258.662569][ T8170] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 258.665932][ T8170] F2FS-fs (loop4): invalid crc value [ 258.678351][ T8170] F2FS-fs (loop4): Found nat_bits in checkpoint [ 258.695579][ T8170] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 258.697504][ T8170] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 258.818789][ T7783] XFS (loop3): Unmounting Filesystem [ 259.292275][ T4809] bridge0: port 3(gretap0) entered disabled state [ 259.742404][ T4809] device gretap0 left promiscuous mode [ 259.744857][ T4809] bridge0: port 3(gretap0) entered disabled state [ 259.789347][ T4308] Bluetooth: hci3: command tx timeout [ 259.845905][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.855291][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.857544][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.978848][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.981750][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.050204][ T8216] loop3: detected capacity change from 0 to 128 [ 260.072489][ T8216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.099558][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.102197][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.107302][ T8061] device veth0_vlan entered promiscuous mode [ 260.186731][ T8061] device veth1_vlan entered promiscuous mode [ 260.220717][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.223257][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.227248][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.239673][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.286030][ T7783] EXT4-fs (loop3): unmounting filesystem. [ 260.374835][ T8230] loop4: detected capacity change from 0 to 64 [ 260.449441][ T6879] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.818729][ T8241] loop4: detected capacity change from 0 to 1024 [ 260.838409][ T8241] EXT4-fs (loop4): barriers disabled [ 260.843605][ T8241] JBD2: no valid journal superblock found [ 260.845369][ T8241] EXT4-fs (loop4): error loading journal [ 261.361755][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.365119][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.375986][ T8061] device veth0_macvtap entered promiscuous mode [ 261.443118][ T8061] device veth1_macvtap entered promiscuous mode [ 261.464434][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.474188][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.484387][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.495813][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.499820][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.503341][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.509040][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.523884][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.533150][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.535993][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.538436][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.583190][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.601328][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.927206][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 261.930133][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1290'. [ 261.937524][ T8251] device gtp0 entered promiscuous mode [ 261.944137][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.947015][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.952494][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.965202][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.967974][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.974428][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.985092][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.987726][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.012312][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.014912][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.017499][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.031435][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.034338][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.037135][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.046608][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.059914][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.114367][ T4809] device hsr_slave_0 left promiscuous mode [ 262.169575][ T4809] device hsr_slave_1 left promiscuous mode [ 262.251149][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.253167][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.255721][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.257686][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.272121][ T4809] device bridge_slave_1 left promiscuous mode [ 262.273882][ T4809] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.324070][ T4809] device bridge_slave_0 left promiscuous mode [ 262.326375][ T4809] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.520940][ T8278] loop4: detected capacity change from 0 to 1024 [ 262.580291][ T8278] EXT4-fs (loop4): barriers disabled [ 262.584529][ T8278] JBD2: no valid journal superblock found [ 262.586155][ T8278] EXT4-fs (loop4): error loading journal [ 263.069545][ T4809] device veth1_macvtap left promiscuous mode [ 263.072215][ T4809] device veth0_macvtap left promiscuous mode [ 263.073932][ T4809] device veth1_vlan left promiscuous mode [ 263.076787][ T4809] device veth0_vlan left promiscuous mode [ 263.214016][ T8266] loop1: detected capacity change from 0 to 65536 [ 263.321850][ T8266] XFS (loop1): Mounting V5 Filesystem [ 263.405699][ T8266] XFS (loop1): Ending clean mount [ 263.485412][ T8270] loop3: detected capacity change from 0 to 32768 [ 263.496056][ T8270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1297 (8270) [ 263.523037][ T4301] XFS (loop1): Unmounting Filesystem [ 263.529124][ T8270] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.549697][ T8270] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 263.552000][ T8270] BTRFS info (device loop3): using free space tree [ 263.702800][ T8270] BTRFS info (device loop3): enabling ssd optimizations [ 263.775422][ T7783] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.225313][ T27] audit: type=1326 audit(264.180:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.1.1300" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 265.466567][ T8342] xt_CONNSECMARK: invalid mode: 0 [ 266.749052][ T8342] loop3: detected capacity change from 0 to 32768 [ 266.785345][ T8342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1312 (8342) [ 266.827457][ T8342] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 266.830257][ T8342] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 266.832574][ T8342] BTRFS info (device loop3): using free space tree [ 266.947068][ T4809] team0 (unregistering): Port device team_slave_1 removed [ 266.984706][ T8342] BTRFS info (device loop3): enabling ssd optimizations [ 266.995740][ T8342] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.128932][ T4809] team0 (unregistering): Port device team_slave_0 removed [ 267.178603][ T8374] loop1: detected capacity change from 0 to 2048 [ 267.237638][ T8374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 267.286903][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 267.390126][ T4809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.399097][ T8341] loop3: detected capacity change from 0 to 32768 [ 267.455423][ T27] audit: type=1326 audit(267.410:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.1320" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 267.462284][ T8341] XFS (loop3): Mounting V5 Filesystem [ 267.500764][ T8341] XFS (loop3): Ending clean mount [ 267.506096][ T8341] XFS (loop3): Quotacheck needed: Please wait. [ 267.528087][ T8341] XFS (loop3): Quotacheck: Done. [ 267.531482][ T8341] XFS (loop3): Unmounting Filesystem [ 267.625489][ T4809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.876446][ T8341] overlayfs: './file0' not a directory [ 268.214852][ T8389] loop3: detected capacity change from 0 to 32768 [ 268.230161][ T8389] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1321 (8389) [ 268.243654][ T8389] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.246353][ T8389] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 268.248614][ T8389] BTRFS info (device loop3): using free space tree [ 268.313474][ T8389] BTRFS info (device loop3): enabling ssd optimizations [ 268.327063][ T8409] loop1: detected capacity change from 0 to 128 [ 268.375653][ T8409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 268.383636][ T7783] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.445294][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 268.786277][ T8423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.818453][ T8423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.845571][ T8415] loop1: detected capacity change from 0 to 32768 [ 268.853767][ T8415] XFS (loop1): Mounting V5 Filesystem [ 268.901894][ T8415] XFS (loop1): Ending clean mount [ 269.077463][ T4301] XFS (loop1): Unmounting Filesystem [ 269.444347][ T27] audit: type=1326 audit(269.400:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8434 comm="syz.3.1331" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x0 [ 269.744654][ T8439] loop1: detected capacity change from 0 to 40427 [ 269.747402][ T8439] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 269.750214][ T8439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 269.753494][ T8439] F2FS-fs (loop1): invalid crc value [ 269.757734][ T8439] F2FS-fs (loop1): Found nat_bits in checkpoint [ 269.778177][ T8439] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 269.780303][ T8439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 270.171692][ T4809] bond0 (unregistering): Released all slaves [ 270.353346][ T8462] loop1: detected capacity change from 0 to 128 [ 270.405645][ T8462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 270.492652][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.495423][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.496798][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 270.502886][ T8061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.505304][ T8061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.508103][ T8061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.512498][ T8061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.622670][ T8471] loop3: detected capacity change from 0 to 256 [ 270.674317][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.676596][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.728027][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.740682][ T7018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.743066][ T7018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.748576][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.781378][ T8471] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 271.207139][ T27] audit: type=1326 audit(271.160:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1350" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 271.501107][ T8470] loop4: detected capacity change from 0 to 40427 [ 271.507193][ T8474] loop1: detected capacity change from 0 to 40427 [ 271.514420][ T8470] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 271.516457][ T8470] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 271.520116][ T8470] F2FS-fs (loop4): invalid crc value [ 271.532209][ T8474] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 271.540755][ T8474] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 271.543915][ T8470] F2FS-fs (loop4): Found nat_bits in checkpoint [ 271.553896][ T8474] F2FS-fs (loop1): invalid crc value [ 271.571561][ T8470] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 271.573634][ T8470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 271.586203][ T8474] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.644857][ T8474] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 271.646819][ T8474] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 271.854050][ T8487] loop0: detected capacity change from 0 to 32768 [ 271.877979][ T8487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1351 (8487) [ 271.891137][ T8487] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.893783][ T8487] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 271.895950][ T8487] BTRFS info (device loop0): using free space tree [ 272.165919][ T8487] BTRFS info (device loop0): enabling ssd optimizations [ 273.413259][ T8529] loop1: detected capacity change from 0 to 64 [ 273.431215][ T8529] hfs: unable to change codepage [ 273.433283][ T8529] hfs: unable to parse mount options [ 273.482953][ T6879] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.551124][ T7011] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 273.608993][ T8061] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 273.965509][ T8537] loop3: detected capacity change from 0 to 1764 [ 274.154590][ T4312] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 274.157422][ T4312] CPU: 0 PID: 4312 Comm: kworker/u5:5 Not tainted 6.1.106-syzkaller #0 [ 274.159509][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 274.162213][ T4312] Workqueue: hci3 hci_rx_work [ 274.163453][ T4312] Call trace: [ 274.164288][ T4312] dump_backtrace+0x1c8/0x1f4 [ 274.165573][ T4312] show_stack+0x2c/0x3c [ 274.166710][ T4312] dump_stack_lvl+0x108/0x170 [ 274.168068][ T4312] dump_stack+0x1c/0x58 [ 274.169183][ T4312] sysfs_create_dir_ns+0x278/0x318 [ 274.170511][ T4312] kobject_add_internal+0x598/0xb14 [ 274.171859][ T4312] kobject_add+0x14c/0x21c [ 274.173030][ T4312] device_add+0x400/0xef4 [ 274.174330][ T4312] hci_conn_add_sysfs+0xc4/0x1cc [ 274.175706][ T4312] le_conn_complete_evt+0xa0c/0xfe0 [ 274.177171][ T4312] hci_le_enh_conn_complete_evt+0x114/0x414 [ 274.178978][ T4312] hci_le_meta_evt+0x2b8/0x47c [ 274.180248][ T4312] hci_event_packet+0x6f8/0x109c [ 274.181578][ T4312] hci_rx_work+0x318/0xa68 [ 274.182718][ T4312] process_one_work+0x7ac/0x1404 [ 274.184090][ T4312] worker_thread+0x8e4/0xfec [ 274.185442][ T4312] kthread+0x250/0x2d8 [ 274.186566][ T4312] ret_from_fork+0x10/0x20 [ 274.196475][ T4312] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 274.200038][ T4312] Bluetooth: hci3: failed to register connection device [ 274.254635][ T8544] loop0: detected capacity change from 0 to 512 [ 274.278447][ T8533] loop1: detected capacity change from 0 to 40427 [ 274.281386][ T8533] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 274.283434][ T8533] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 274.286638][ T8533] F2FS-fs (loop1): invalid crc value [ 274.291173][ T8544] EXT4-fs: Ignoring removed i_version option [ 274.292905][ T8544] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 274.320592][ T8533] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.391045][ T8533] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 274.393002][ T8533] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 274.484342][ T27] audit: type=1326 audit(274.440:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.3.1363" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x0 [ 275.310023][ T8574] loop4: detected capacity change from 0 to 1024 [ 275.326858][ T8574] EXT4-fs (loop4): barriers disabled [ 275.329354][ T8574] JBD2: no valid journal superblock found [ 275.330965][ T8574] EXT4-fs (loop4): error loading journal [ 276.546150][ T27] audit: type=1326 audit(276.430:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.4.1387" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 277.070800][ T8620] loop0: detected capacity change from 0 to 1024 [ 277.146551][ T8620] EXT4-fs (loop0): barriers disabled [ 277.149029][ T8620] JBD2: no valid journal superblock found [ 277.150748][ T8620] EXT4-fs (loop0): error loading journal [ 277.935346][ T8635] overlayfs: './file0' not a directory [ 277.991894][ T8602] loop3: detected capacity change from 0 to 40427 [ 278.023541][ T8602] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 278.025788][ T8602] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 278.045708][ T8602] F2FS-fs (loop3): invalid crc value [ 278.083587][ T8602] F2FS-fs (loop3): Found nat_bits in checkpoint [ 278.084821][ T8641] syz.2.1403 uses obsolete (PF_INET,SOCK_PACKET) [ 278.116396][ T8602] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 278.118412][ T8602] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 278.456231][ T8627] loop0: detected capacity change from 0 to 32768 [ 278.474920][ T27] audit: type=1326 audit(278.430:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.1.1407" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac945e68 code=0x0 [ 278.498567][ T8627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1398 (8627) [ 279.098908][ T8627] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.144355][ T8627] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 279.176149][ T8627] BTRFS info (device loop0): using free space tree [ 279.432227][ T8659] loop3: detected capacity change from 0 to 1024 [ 279.566483][ T4523] hfsplus: b-tree write err: -5, ino 4 [ 279.584606][ T8638] loop4: detected capacity change from 0 to 32768 [ 279.607005][ T8667] Process accounting resumed [ 279.694282][ T8627] BTRFS info (device loop0): enabling ssd optimizations [ 279.708435][ T27] audit: type=1326 audit(279.660:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x7ffc0000 [ 279.715455][ T27] audit: type=1326 audit(279.670:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffbad45e68 code=0x7ffc0000 [ 279.735134][ T27] audit: type=1326 audit(279.670:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x7ffc0000 [ 279.735191][ T8638] XFS (loop4): Mounting V5 Filesystem [ 279.844481][ T8061] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.848336][ T8638] XFS (loop4): Ending clean mount [ 280.069095][ T6484] XFS (loop4): Unmounting Filesystem [ 281.241742][ T4523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.258226][ T27] audit: type=1326 audit(281.210:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.1420" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 281.325627][ T4308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.330788][ T4308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.335601][ T4308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.343218][ T4308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.353988][ T4308] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.356222][ T4308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.413233][ T4523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.542623][ T4523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.685863][ T4523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.820823][ T8716] chnl_net:caif_netlink_parms(): no params data found [ 281.977470][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.979776][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.982310][ T8716] device bridge_slave_0 entered promiscuous mode [ 281.987070][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.999914][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.002445][ T8716] device bridge_slave_1 entered promiscuous mode [ 282.110752][ T8716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.134252][ T8716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.359912][ T8716] team0: Port device team_slave_0 added [ 282.366230][ T8716] team0: Port device team_slave_1 added [ 282.477696][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.479579][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.519274][ T8716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.640665][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.642597][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.670151][ T8716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.753294][ T8716] device hsr_slave_0 entered promiscuous mode [ 282.807057][ T8716] device hsr_slave_1 entered promiscuous mode [ 282.869643][ T8716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.871739][ T8716] Cannot create hsr debugfs directory [ 283.410758][ T4308] Bluetooth: hci1: command tx timeout [ 283.897801][ T27] audit: type=1326 audit(283.850:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.2.1436" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 284.015077][ T4523] bridge0: port 3(gretap0) entered disabled state [ 284.102945][ T4523] device gretap0 left promiscuous mode [ 284.104528][ T4523] bridge0: port 3(gretap0) entered disabled state [ 285.469358][ T4308] Bluetooth: hci1: command tx timeout [ 285.813833][ T8809] loop4: detected capacity change from 0 to 1024 [ 285.832386][ T8809] EXT4-fs (loop4): barriers disabled [ 285.837821][ T8809] JBD2: no valid journal superblock found [ 285.839514][ T8809] EXT4-fs (loop4): error loading journal [ 286.400063][ T6879] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 286.540223][ T4523] device hsr_slave_0 left promiscuous mode [ 286.608325][ T4523] device hsr_slave_1 left promiscuous mode [ 286.689618][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.691758][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.694913][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.696907][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.711784][ T4523] device bridge_slave_1 left promiscuous mode [ 286.713590][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.749716][ T4308] Bluetooth: hci5: command 0x0406 tx timeout [ 286.771795][ T4523] device bridge_slave_0 left promiscuous mode [ 286.773604][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.036571][ T4523] device veth1_macvtap left promiscuous mode [ 287.038367][ T4523] device veth0_macvtap left promiscuous mode [ 287.047529][ T4523] device veth1_vlan left promiscuous mode [ 287.067436][ T4523] device veth0_vlan left promiscuous mode [ 287.549372][ T4308] Bluetooth: hci1: command tx timeout [ 287.889378][ T27] audit: type=1326 audit(287.820:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.2.1452" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 289.106473][ T8845] loop3: detected capacity change from 0 to 1024 [ 289.114861][ T8845] EXT4-fs (loop3): barriers disabled [ 289.125880][ T8845] JBD2: no valid journal superblock found [ 289.127509][ T8845] EXT4-fs (loop3): error loading journal [ 289.630751][ T4308] Bluetooth: hci1: command tx timeout [ 289.764658][ T6879] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.934266][ T4523] team0 (unregistering): Port device team_slave_1 removed [ 291.120671][ T4523] team0 (unregistering): Port device team_slave_0 removed [ 291.301155][ T4523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.500709][ T4523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.921887][ T4523] bond0 (unregistering): Released all slaves [ 294.164393][ T8835] bridge0: port 3(syz_tun) entered blocking state [ 294.166254][ T8835] bridge0: port 3(syz_tun) entered disabled state [ 294.169478][ T8835] device syz_tun entered promiscuous mode [ 294.171368][ T8835] bridge0: port 3(syz_tun) entered blocking state [ 294.173098][ T8835] bridge0: port 3(syz_tun) entered forwarding state [ 294.460318][ T27] audit: type=1326 audit(294.420:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.0.1463" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b45e68 code=0x0 [ 294.466158][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.573553][ T8716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 294.600993][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.876507][ T8716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 294.958572][ T8716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.243158][ T8716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.460603][ T8895] binder: 8894:8895 tried to acquire reference to desc 0, got 1 instead [ 295.477307][ T24] binder: release 8894:8895 transaction 9 out, still active [ 295.479533][ T24] binder: undelivered TRANSACTION_COMPLETE [ 296.246089][ T24] binder: send failed reply for transaction 9, target dead [ 296.288107][ T8716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.460317][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.462886][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.508199][ T8915] loop4: detected capacity change from 0 to 256 [ 297.189749][ T8716] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.194314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.197234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.201232][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.203166][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.237423][ T8916] bridge0: port 3(syz_tun) entered blocking state [ 297.240274][ T8916] bridge0: port 3(syz_tun) entered disabled state [ 297.242887][ T8916] device syz_tun entered promiscuous mode [ 297.244657][ T8916] bridge0: port 3(syz_tun) entered blocking state [ 297.246338][ T8916] bridge0: port 3(syz_tun) entered forwarding state [ 297.259742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.312650][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.316620][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.322795][ T27] audit: type=1326 audit(297.280:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.3.1476" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x0 [ 297.329580][ T7025] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.331503][ T7025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.352283][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.372863][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.390297][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.394371][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.408630][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.424955][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.447371][ T8716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.455443][ T8716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.470501][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.473124][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.475896][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.486410][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.493133][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.515969][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.609507][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.612431][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.631174][ T8716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.658725][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.661724][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.703872][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.706547][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.709715][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.713988][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.720616][ T8716] device veth0_vlan entered promiscuous mode [ 298.738700][ T8716] device veth1_vlan entered promiscuous mode [ 298.768166][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.771448][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.774238][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.787318][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.816632][ T8716] device veth0_macvtap entered promiscuous mode [ 298.833168][ T8716] device veth1_macvtap entered promiscuous mode [ 298.861577][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.869685][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.872390][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.889345][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.898638][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.909276][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.911948][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.914742][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.917206][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.935778][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.975746][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.005167][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.013091][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.017719][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.036688][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.174402][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.226198][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.238352][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.241502][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.263574][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.266614][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.274796][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.278922][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.281676][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.288907][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.445978][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.455381][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.468052][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.623194][ T8716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.627211][ T8716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.688054][ T8716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.779352][ T8716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.923025][ T27] audit: type=1326 audit(299.880:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x7ffc0000 [ 299.928819][ T27] audit: type=1326 audit(299.880:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x7ffc0000 [ 299.949644][ T27] audit: type=1326 audit(299.880:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffffa6945e68 code=0x7ffc0000 [ 299.970694][ T4750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.974592][ T4750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.978876][ T27] audit: type=1326 audit(299.880:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x7ffc0000 [ 299.995003][ T27] audit: type=1326 audit(299.880:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x7ffc0000 [ 300.009876][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.054067][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.056294][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.084993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.578153][ T8983] loop1: detected capacity change from 0 to 512 [ 300.709511][ T8983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 300.757529][ T27] audit: type=1326 audit(300.710:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8985 comm="syz.3.1489" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x0 [ 300.865299][ T8716] EXT4-fs (loop1): unmounting filesystem. [ 301.811024][ T9002] loop3: detected capacity change from 0 to 128 [ 302.275101][ T9017] loop3: detected capacity change from 0 to 128 [ 302.458587][ T27] audit: type=1326 audit(302.410:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.1.1503" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab945e68 code=0x0 [ 304.045456][ T9033] loop1: detected capacity change from 0 to 1024 [ 304.127127][ T9033] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 304.336679][ T9044] loop3: detected capacity change from 0 to 1024 [ 304.379878][ T9044] EXT4-fs (loop3): barriers disabled [ 304.382950][ T9044] JBD2: no valid journal superblock found [ 304.384669][ T9044] EXT4-fs (loop3): error loading journal [ 304.996030][ T9047] loop4: detected capacity change from 0 to 128 [ 305.012450][ T8854] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 305.097535][ T8716] EXT4-fs (loop1): unmounting filesystem. [ 305.444433][ T27] audit: type=1326 audit(305.400:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.4.1517" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 306.217682][ T27] audit: type=1326 audit(306.170:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.1523" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 306.441516][ T4312] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.605114][ T4312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.697089][ T4312] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.757672][ T4312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.788443][ T4312] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 306.808140][ T4312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.080688][ T9085] loop1: detected capacity change from 0 to 128 [ 307.780037][ T27] audit: type=1326 audit(307.540:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.4.1533" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 308.596494][ T9128] loop3: detected capacity change from 0 to 128 [ 308.920770][ T4312] Bluetooth: hci6: command tx timeout [ 309.433247][ T4462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.602898][ T4462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.692164][ T27] audit: type=1326 audit(309.650:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.2.1547" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 309.997010][ T4462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.263261][ T9087] chnl_net:caif_netlink_parms(): no params data found [ 310.276800][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.279007][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.439097][ T4462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.583752][ T27] audit: type=1326 audit(310.540:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.1.1556" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab945e68 code=0x0 [ 310.601043][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.608750][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.617919][ T9087] device bridge_slave_0 entered promiscuous mode [ 310.625713][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.640728][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.648975][ T9087] device bridge_slave_1 entered promiscuous mode [ 310.774668][ T9175] loop4: detected capacity change from 0 to 1024 [ 310.781874][ T9175] EXT4-fs (loop4): barriers disabled [ 310.784942][ T9175] JBD2: no valid journal superblock found [ 310.786619][ T9175] EXT4-fs (loop4): error loading journal [ 310.999430][ T4312] Bluetooth: hci6: command tx timeout [ 311.485976][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.492955][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.631256][ T9087] team0: Port device team_slave_0 added [ 311.640278][ T9087] team0: Port device team_slave_1 added [ 311.789745][ T27] audit: type=1326 audit(311.730:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.4.1564" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 312.499133][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.501159][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.560154][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.577965][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.580857][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.587556][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.662613][ T9197] loop1: detected capacity change from 0 to 128 [ 313.059589][ T9087] device hsr_slave_0 entered promiscuous mode [ 313.108436][ T4312] Bluetooth: hci6: command tx timeout [ 313.221446][ T9223] loop3: detected capacity change from 0 to 1024 [ 313.266322][ T9223] EXT4-fs (loop3): barriers disabled [ 313.270229][ T9223] JBD2: no valid journal superblock found [ 313.271878][ T9223] EXT4-fs (loop3): error loading journal [ 313.392337][ T9087] device hsr_slave_1 entered promiscuous mode [ 313.822596][ T8879] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.882318][ T27] audit: type=1326 audit(313.840:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1576" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab945e68 code=0x0 [ 314.077384][ T9240] loop4: detected capacity change from 0 to 128 [ 314.405328][ T9251] loop3: detected capacity change from 0 to 128 [ 315.149589][ T4312] Bluetooth: hci6: command tx timeout [ 315.168428][ T9284] loop3: detected capacity change from 0 to 1024 [ 315.176098][ T9284] EXT4-fs (loop3): barriers disabled [ 315.179235][ T9284] JBD2: no valid journal superblock found [ 315.180977][ T9284] EXT4-fs (loop3): error loading journal [ 315.878461][ T8879] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.053605][ T9296] loop3: detected capacity change from 0 to 128 [ 316.649920][ T4462] device hsr_slave_0 left promiscuous mode [ 316.816386][ T4462] device hsr_slave_1 left promiscuous mode [ 316.867875][ T9324] loop3: detected capacity change from 0 to 1024 [ 316.889545][ T9324] EXT4-fs (loop3): barriers disabled [ 316.907669][ T9324] JBD2: no valid journal superblock found [ 316.909334][ T9324] EXT4-fs (loop3): error loading journal [ 317.200908][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.203571][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.222775][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.225184][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.237785][ T4462] device bridge_slave_1 left promiscuous mode [ 317.258887][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.443550][ T4462] device bridge_slave_0 left promiscuous mode [ 317.445367][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.554182][ T4462] device veth1_macvtap left promiscuous mode [ 317.556009][ T4462] device veth0_macvtap left promiscuous mode [ 317.557606][ T4462] device veth1_vlan left promiscuous mode [ 317.566392][ T9330] loop4: detected capacity change from 0 to 128 [ 317.568456][ T4462] device veth0_vlan left promiscuous mode [ 318.049643][ T27] audit: type=1326 audit(317.930:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.4.1613" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 318.903508][ T9356] loop1: detected capacity change from 0 to 128 [ 319.419474][ T27] audit: type=1326 audit(319.290:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9368 comm="syz.1.1625" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab945e68 code=0x0 [ 319.994982][ T4462] team0 (unregistering): Port device team_slave_1 removed [ 320.023579][ T4462] team0 (unregistering): Port device team_slave_0 removed [ 320.076539][ T4462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.137963][ T4462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.312661][ T9381] loop1: detected capacity change from 0 to 128 [ 320.597854][ T4462] bond0 (unregistering): Released all slaves [ 320.690572][ T9087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.708019][ T9087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.713471][ T9087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.717260][ T9087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.904375][ T27] audit: type=1326 audit(320.860:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.1635" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x0 [ 321.726838][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.757218][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.767754][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.773244][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.778199][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.788214][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.800265][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.802196][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.851657][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.854372][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.857009][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.867080][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.869062][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.878540][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.890127][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.898926][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.948895][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.951753][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.954639][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.964425][ T9087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.967368][ T9087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.768953][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.771489][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.773913][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.776509][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.779110][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.873248][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.965933][ T9438] capability: warning: `syz.4.1648' uses deprecated v2 capabilities in a way that may be insecure [ 323.119917][ T27] audit: type=1326 audit(323.010:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.1647" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6945e68 code=0x0 [ 323.831069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.833114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.876958][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.932433][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.935202][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.976893][ T9087] device veth0_vlan entered promiscuous mode [ 323.991664][ T9456] loop3: detected capacity change from 0 to 128 [ 323.996015][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.003130][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.019494][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.030117][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.075832][ T9087] device veth1_vlan entered promiscuous mode [ 324.149844][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.152533][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.155541][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.180550][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.193519][ T9087] device veth0_macvtap entered promiscuous mode [ 324.197661][ T9087] device veth1_macvtap entered promiscuous mode [ 324.342176][ T9467] loop4: detected capacity change from 0 to 1024 [ 324.424533][ T9467] EXT4-fs (loop4): barriers disabled [ 324.427485][ T9467] JBD2: no valid journal superblock found [ 324.429115][ T9467] EXT4-fs (loop4): error loading journal [ 324.950233][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.967696][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.030338][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.033101][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.036192][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.044574][ T8879] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.047560][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.073568][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.080645][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.087259][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.094405][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.102437][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.117127][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.132091][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.144157][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.204513][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.207062][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.235066][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.237656][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.249663][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.252184][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.254796][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.257249][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.305651][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.419733][ T27] audit: type=1326 audit(325.340:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.4.1660" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b45e68 code=0x0 [ 325.444810][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.449144][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.539131][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.659767][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.769989][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.087335][ T9087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.090067][ T9087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.094371][ T9087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.096650][ T9087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.354512][ T4524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.356727][ T4524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.366502][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.455700][ T7011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.457918][ T7011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.533187][ T9510] loop3: detected capacity change from 0 to 1024 [ 326.566667][ T9510] EXT4-fs (loop3): barriers disabled [ 326.570729][ T9510] JBD2: no valid journal superblock found [ 326.572382][ T9510] EXT4-fs (loop3): error loading journal [ 326.642811][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.314487][ T8879] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.656376][ T27] audit: type=1326 audit(327.610:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.2.1674" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 328.139536][ T4308] Bluetooth: hci2: command 0x0406 tx timeout [ 329.648378][ T27] audit: type=1326 audit(329.600:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.1690" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 330.335441][ T9571] IPVS: set_ctl: invalid protocol: 58 172.20.20.13:20000 [ 330.658379][ T9588] serio: Serial port pts0 [ 330.849363][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 330.923115][ T9603] loop3: detected capacity change from 0 to 1024 [ 330.974608][ T9603] EXT4-fs (loop3): barriers disabled [ 330.981310][ T9603] JBD2: no valid journal superblock found [ 330.982934][ T9603] EXT4-fs (loop3): error loading journal [ 331.272135][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.275795][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 331.278393][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 331.308542][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 331.377738][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 331.547079][ T4312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.553082][ T4312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.557400][ T4315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.595330][ T8874] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.595460][ T4315] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.601191][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.603553][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 331.605666][ T24] usb 1-1: SerialNumber: syz [ 331.609284][ T4315] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 331.612401][ T4315] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.682002][ T24] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 331.845711][ T9604] chnl_net:caif_netlink_parms(): no params data found [ 331.957280][ T27] audit: type=1326 audit(331.910:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.2.1703" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 332.740124][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.742031][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.768482][ T9604] device bridge_slave_0 entered promiscuous mode [ 332.803504][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.816392][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.827637][ T9604] device bridge_slave_1 entered promiscuous mode [ 332.880067][ T9637] input: syz0 as /devices/virtual/input/input9 [ 332.937466][ T9604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.955846][ T9604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.050095][ T9604] team0: Port device team_slave_0 added [ 333.068021][ T9604] team0: Port device team_slave_1 added [ 333.631893][ T4315] Bluetooth: hci3: command tx timeout [ 333.895272][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.897153][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.947339][ T4351] usb 1-1: USB disconnect, device number 13 [ 333.954418][ T9604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.075085][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.077146][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.098105][ T9604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.177465][ T27] audit: type=1326 audit(334.130:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.0.1717" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b45e68 code=0x0 [ 335.001212][ T9604] device hsr_slave_0 entered promiscuous mode [ 335.049688][ T9604] device hsr_slave_1 entered promiscuous mode [ 335.079293][ T9604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.081385][ T9604] Cannot create hsr debugfs directory [ 335.719314][ T4315] Bluetooth: hci3: command tx timeout [ 336.112800][ T9604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.181957][ T9685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.219903][ T9685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.271548][ T9604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.455960][ T9604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.544351][ T27] audit: type=1326 audit(336.500:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.2.1728" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 337.326392][ T9604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.819460][ T4315] Bluetooth: hci3: command tx timeout [ 338.433039][ T9604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.472129][ T9604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.502231][ T9604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.552035][ T9604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.699888][ T27] audit: type=1326 audit(338.610:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9720 comm="syz.2.1739" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad45e68 code=0x0 [ 339.479459][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.509855][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.521858][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.548372][ T9604] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.554362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.556981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.567459][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.569458][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.586940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.590124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.600480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.612436][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.614294][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.637827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.641537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.658603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.689386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.702520][ T9604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.705274][ T9604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.711967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.727906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.735185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.750377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.753018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.755714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.758357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.784185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.881487][ T4308] Bluetooth: hci3: command tx timeout [ 340.840497][ T27] audit: type=1326 audit(340.750:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.0.1751" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b45e68 code=0x0 [ 341.601891][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.603910][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.611387][ T9604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.629915][ T28] INFO: task syz.2.887:6925 blocked for more than 143 seconds. [ 341.631875][ T28] Not tainted 6.1.106-syzkaller #0 [ 341.633378][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.635590][ T28] task:syz.2.887 state:D stack:0 pid:6925 ppid:4313 flags:0x00000009 [ 341.637984][ T28] Call trace: [ 341.638776][ T28] __switch_to+0x320/0x754 [ 341.659324][ T28] __schedule+0xef4/0x1d44 [ 341.659387][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.662845][ T28] schedule+0xc4/0x170 [ 341.663147][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.663884][ T28] io_schedule+0x8c/0x188 [ 341.667043][ T28] folio_wait_bit_common+0x65c/0xb90 [ 341.667981][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.671325][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.673882][ T28] __folio_lock+0x2c/0x3c [ 341.675075][ T28] z_erofs_runqueue+0x784/0x1750 [ 341.676554][ T28] z_erofs_readahead+0x988/0xe04 [ 341.677876][ T28] read_pages+0x168/0x6a0 [ 341.679053][ T28] page_cache_ra_unbounded+0x46c/0x58c [ 341.690489][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.692946][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.695021][ T28] force_page_cache_ra+0x248/0x2b0 [ 341.696366][ T28] generic_fadvise+0x3f8/0x648 [ 341.697596][ T28] __arm64_sys_fadvise64_64+0x12c/0x174 [ 341.699062][ T28] invoke_syscall+0x98/0x2c0 [ 341.702615][ T9604] device veth0_vlan entered promiscuous mode [ 341.730944][ T9604] device veth1_vlan entered promiscuous mode [ 341.733169][ T28] el0_svc_common+0x138/0x258 [ 341.734398][ T28] do_el0_svc+0x64/0x218 [ 341.735476][ T28] el0_svc+0x58/0x168 [ 341.736472][ T28] el0t_64_sync_handler+0x84/0xf0 [ 341.737811][ T28] el0t_64_sync+0x18c/0x190 [ 341.744233][ T28] [ 341.744233][ T28] Showing all locks held in the system: [ 341.746352][ T28] 1 lock held by rcu_tasks_kthre/12: [ 341.747945][ T28] #0: ffff800015b950b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 341.772371][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.774496][ T28] 1 lock held by rcu_tasks_trace/13: [ 341.775146][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.775805][ T28] #0: ffff800015b958b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 341.779524][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.785456][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.789460][ T28] 1 lock held by khungtaskd/28: [ 341.790785][ T28] #0: ffff800015b94ee0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 341.793399][ T28] 2 locks held by getty/4054: [ 341.794674][ T28] #0: ffff0000d61ab098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 341.797498][ T28] #1: ffff80001bea02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 341.802291][ T9604] device veth0_macvtap entered promiscuous mode [ 341.806565][ T9604] device veth1_macvtap entered promiscuous mode [ 341.824924][ T28] 3 locks held by kworker/1:4/4353: [ 341.826429][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 341.829140][ T28] #1: ffff80001e347c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 341.835459][ T28] #2: ffff0000ce912240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x32bc [ 341.838217][ T28] 1 lock held by syz.2.887/6925: [ 341.840970][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.843870][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.846449][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.859282][ T28] #0: ffff0000e1290890 (mapping.invalidate_lock#6){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xc8/0x58c [ 341.862257][ T28] 3 locks held by kworker/0:14/7767: [ 341.863625][ T28] #0: ffff0000d6042938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 341.866353][ T28] #1: ffff800020e47c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 341.869866][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.872648][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.875601][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.878318][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.889234][ T28] #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 341.891632][ T28] 1 lock held by syz.1.1634/9389: [ 341.892940][ T28] 3 locks held by syz-executor/9604: [ 341.894270][ T28] 1 lock held by syz.4.1710/9637: [ 341.896553][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.899129][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.903104][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.909475][ T28] [ 341.910143][ T28] ============================================= [ 341.910143][ T28] [ 341.911574][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.912487][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 341.912497][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0 [ 341.912510][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 341.912517][ T28] Call trace: [ 341.912520][ T28] dump_backtrace+0x1c8/0x1f4 [ 341.912534][ T28] show_stack+0x2c/0x3c [ 341.912543][ T28] dump_stack_lvl+0x108/0x170 [ 341.912555][ T28] dump_stack+0x1c/0x58 [ 341.912564][ T28] panic+0x300/0x804 [ 341.912575][ T28] hung_task_panic+0x0/0x2c [ 341.912587][ T28] kthread+0x250/0x2d8 [ 341.912599][ T28] ret_from_fork+0x10/0x20 [ 341.912611][ T28] SMP: stopping secondary CPUs [ 341.915567][ T28] Kernel Offset: disabled [ 341.915571][ T28] CPU features: 0x080000,02070084,26017203 [ 341.915579][ T28] Memory Limit: none [ 342.503639][ T28] Rebooting in 86400 seconds..