last executing test programs: 33.551498326s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 33.356676629s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x60b}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000009b40)=[{{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000004080)=""/243, 0xf3}, {&(0x7f00000002c0)=""/4101, 0x1005}, {&(0x7f0000005240)=""/177, 0xb1}, {&(0x7f0000005300)=""/209, 0xd1}, {&(0x7f0000005400)=""/188, 0xbc}], 0x5}}], 0x1, 0x0, 0x0) 33.116316243s ago: executing program 0: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='00000000000000062410.00000000000000000003.00000000000000028916.000/000000@'], 0x6f) 33.001704443s ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='3-2:5/'], 0x23) 32.796315848s ago: executing program 0: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5b5, &(0x7f0000002a80)="$eJzs3c9vVNUeAPDvnZkWSt977SMvT3FhGg2BRGlpAYM/FrAnBH/s3FhpIcjwI7RGiyaWBDcmxo0LElcuxP9CiW5dmbhw4caVIUFj2GiMjrkzd4ZhOtNOS4dbez+f5Lbn3HNvz7nQb8+Ze8+ZCaCwJtIvpYg9EXE5iRhrK6tEVjjROO7ur++eTrckarWXf0kiyfalRyVt541mJ/85FvHtV0nsLq+sd2Hp6vnZanX+SpafWrxweWph6eqBcxdmz86fnb8488zM0SOHjxydPvhA11dqS5+4/sZbYx+cfPWzT/5Ipj//4WQSx+LnM42y5nVspomYiN9qtfc696f/rkc3u7KclFu/J/cknTvYsipZjAxHxCMxFuW2/82xeP/FXBsHDFQtiagBBZWIfyio5jig+dq+v9fBpQGPSoCH4c7x9OtQl/ivNO4NxngMRcTejvO63NLbkLSOb74+eT3dYkD34YDulq/tyFKd8Z/UY3M8dtZzu+6W7rvPm44ATmXf0/0vbbD+iY68+IeHZ/laRDzabfy/dvy/1hb/r2+wfvEPAAAAAAAAm+fW8Yh4utvzv1L2bG5nPFF//pc0nv99d2+F4LFNqH/t53+l2x2HJJtQLZDN/3uh6/zf1hzf8XKW+3djNmBy5lx1/mBE/Cci9sfQjjQ/vUodBz7cfaNXWfv8v3RL62/OBczacbuy4/5z5mYXZx/kmoGGO9ciHqv0nv+T9v9Je/+fSf8eXO6zjt17b57qVbZ2/AODUvs0Yl/X/v/eMDtZ/f05purjganmqGClx9/56Ite9Yt/yE/a/+9aPf7Hk/b361lY388fjohDS5Var/KNjv+Hk1fKzZ+fent2cfHKdMRwcmLl/pn1tRm2q2Y8NOMljf/9T65+/681/m+Lw5GIWO6zzv//NfpjrzL9P+Qnjf+5dfX/60/M3Bz/slf9/fX/h+t9+v5sj/t/sLp+AzTvdgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP1EpIv4VSWmylS6VJicjRiPif7GrVL20sPjUmUtvXpxLy+qf/19qftLvWCOfND//f7wtP9ORPxQR/42Ij8sj9fzk6UvVubwvHgAAAAAAAAAAAAAAAAAAALaI0R7r/1M/lfNuHTBwley7eIfiqeTdACA34h+KS/xDcYl/KC7xD8W1wfj3uAC2Af0/FNVQf4ftHHQ7gDzo/wEAAAAAYFu59fyzN5KIWH5upL6lhrOy1oPBkbxaBwxSKe8GALkxhxeKy9QfKK4+J/8C21jSSv1e61bee/Z/MpgGAQAAAAAAAAAAAAAr7Ntz6/s11/9H1KwThO3H+n8oLv06FJf1/1Bc1v8Da63it/4fAAAAAAAAAAAAAPK3sHT1/Gy1On9FQmKrJYYiYgs0I4fEcP7hmfMfJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOXvAAAA//9JxiYA") syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 5.401569938s ago: executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x40, 0xe1}) 4.327617344s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000003800)=[{{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @mcast1, 0x38536017}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)="f3a3709219cd856bc1fa4747aeca5d52e1f550b5610171a2f73fdd9a3430f221b94aff72ebed0bc63121445fff75bc613d62f3dffd01c8d199cd252c41dee0e132cf46a1586c5a3dd8e498a668985408b8e3fc509396a24c54441e13b1a19dfdb666489ee9a256b812db943375c261a364776ae389621c7c1492989b733a020aebd0ccf1c8", 0x85}, {&(0x7f0000000540)="a4499d4ff21e30edde6a6774c05be626939cdc721c7505b7775b6e1b6d2cb6ac2a32d5093caab37fc26e56b895b6bf41fc47b6299407a378185ac7af72c272a5fe292706fc5cd81d7ea8962e43ec5af8fdb4c3bf5ad4a9687cfc5f1ca37f4b489665444f273a6b74ad9779614fda0b5bfd3c60fd1adac39a1b7893ea26c82eb3a15fa3f0369d3cea212570d01fe53673b9250e61529e37deb49bd7ddbce66872f26415359c77cd5f00b3d2adb93fd0318167ff9300901bf0ee6bf07abf97557615a6c3b036b81bde5da05bb86f34a2f5d455e6b2ea76234f7dbe83d545c5413717e2348a12a9814e71567d810a64d29ce3340cb814c986b2f6", 0xf9}], 0x2, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x87}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0xef6a}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xf0}}, {{&(0x7f0000000780)=@llc={0x1a, 0x101, 0x40, 0x4, 0xaf, 0x6}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)="600d0b748aa16bbc90209027b5c9f47714b78f94609d5d8fc7af2f5d2c923c75e200e6f747fb2342aa6f53735019b98603aa53c8343bdc3ab7037446b5923b48e895e027e7b8efb7bf2e87dcb83fffb54c00b727acdf9e362e3ed3a21e914c305fe2f476c6d1b28cf2083e2f4995a34a2a5321f3f592ab40ae933e0e82cd327486f49f64f01c9c957c48c80445cd74e5d7b7683877f47d69ba04ca3a9971c9686e162b04be27940c2ed12ac315eab3c347dfe7e74fe7717e2d8a39d8adbb0cecb335a0b40caa93d12e2b9b5a87f5f752c51ef19adeec2e13d2c18ea84b81e85a9b", 0xe1}, {&(0x7f0000000900)="e40e6a9e23bcff30bf3aaa15e697bf52d6c7af8a1721c27f4b4a67a4f672e8feca32a690760216bfe5593a6e3d46339e116713873195d8088224e461a4cb63b9c735a69a397a2ff2cb824ad12ca141e33efd24b84a4ee76cce18c82b49755051f15b42d8979021f3ef4cc07f34438ededcab774a8b689603d8185ca23597484d8cf02fc67099b2813997f29c0a6b3ef1b326cecd66b5a259a8", 0x99}, {&(0x7f00000009c0)="135807c3529983e1ddea7d5f34f29d525abc68598aff7def33b3277da01caa30cb40295a9c8c2919e08863cbed6b1e83a73f47ac6cbeba949c4ac2182f0664725a9c55fc8d1397a8374869967808747c20552b750af35c7e47517b18190bcb3d170656087c127640bc5310ffffc902f2be6ebe1fcdf1c77e67a96ff5048580c02b3318819613165ae2bdff38ebdf914308d29afaeb32c77d2319a70f66a488b61382e000b973973718237a1051f31db0e52bd4def0f09601f606c300b95707c5156ae571f756da4371de", 0xca}], 0x3}}, {{&(0x7f0000001b00)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x9, 0x59, "48258c93b3f5b3fe8fd8f38b78939a9f4daea357006c84bddade90eb7a0ab833fc17d9c858e89ef547da7d7825b72e00cfa05de379c7c381241c7f66bf97a1", 0x23}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001b80)="9f5856023f9f72ff61ef28c1ba3762c1fcc1502fef065de532714a49c8393d001d264d8c9ad2e815e83162a22e0c411ce97949be7877effec4cd8e3455f2cd20bdb2d295f10ebc70dfe4d70b744cd7d39ea0", 0x52}, {&(0x7f0000001c00)="792ee76b91b7f7a7dace77a090bcc2da0bd5f77448f20c62429957a022e7625c98c135c62833490240fcbd96d3b62fdaafa9d2aeb2a8790a534d1c6171648ab6282e0bd7fcb0f8b977e3cb6290bde08edaa9266ffc70fbcbaa3fa30a498f46f1b810bc8f196956bdebccf00cbf2582a212f980ba72934bb5730189fc008ddf212e0f7e6ea94aa3a19de01d0946", 0x8d}, {&(0x7f0000001cc0)="1b19642b6b4bec55c583a7fa58dc0a78d36c85fa5b00823e0fffce6eacd204c4a20ec4b368ea6aec751a06e77eb6752e8c1d036f45262bb00871f26df9e68c47cc33eca2e8cbefefa06c211578f6243db01b0ebc021920d81f1cc57dca6263aa013feb03d8516a53a54e42c6b22fb04360902787c77533882268a78d1999d96e4b636ae089e33cbe9eb9e21e7fc0f0cde941b2acda4d1a86", 0x98}, {&(0x7f0000001d80)="940ad412698f98247d466d4d9379e743139a78f1c94f34fe0216bdbe94f4ef03fa984dbad33cd933dd5e1d1e1a3bad2997b3c93ca0bde1ad108ff6fefd190d4d73adfbb937ad6bb4f4ee59d2db990211bfe348156ebd29325cb3e74dd33e84f73498ccf542630c4a9d6b5f26c96809d07785a7b016714a3489430a29f5dde3a7bf4dfbd4609ba8f18fc2bb7da92dd3b0b478cb86b70cc79a57675e9e697b4d0d915f1251147c3bc05a70b2aae88ae601dde8049fbf43e30cb4fbd169e4367ae9993b3025250d5078f236cadca1fc3c9b2c3c62037124", 0xd6}, {0x0}, {&(0x7f0000001f40)="22c4178fd8e5042df2a0205be56999", 0xf}, {&(0x7f0000001f80)="4d64189dac336c603466358bbf98ba31fa3ed5d33480eef14f94ed8c7157370bf9187868761ee070dafa6d99b18d820deab213126a054a0e1f3f337f24fba96aa513", 0x42}], 0x7}}, {{&(0x7f0000002080)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002100)="45a8f891934bd3f2b908eca1cbaa47fe4126a57fe86bd272421b44040ce06c5191e4fb6cb8d0373cdb3a37dbdd525f4f6a905513b8d37ea61ac24ce21cb550fe90490bdec5bc2cfd2f569b438da272b241734ec94391354377cd688fa35f57259672cb8fad47db590dab53731356a63e669c26976c05", 0x76}], 0x1, &(0x7f00000021c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xa4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xf9}}], 0x60}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002240)="4a76cad5fa1b6a325d67dc72f91692efa2c2c2e68f24567eb753f6bff7a44c42636c7e544ad5cb1f2a7006f26c6ca84927f93ceee181f39bec09cc9af8264c2564cbf4126a87ddc3b8ef682bc3e4e935f4378552976239e2da1482978b6e9815c9cbdcbc529a1f74ef3a440e050e31538229dd04130f9ec3", 0x78}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="692bcb908446cbea330466bb363247cb3f9ea44d175a4de3f37c00510c0027cce793985f28d67cd0d49727e14ae5989cb57a40cd1555656eba022887e08ecf3c198eaf0d74f2f0fcd473b93d588d2fc472e655f5d3f7c1b8d637c3dc7b2f10bd33071de32fad2caa2f01cc5d3269ba6c62fad1a84fd86fe0c20f38499ca39ac7f31c212a4849d568bea98a4434e505403534515683462d80abfcaa4318528300adb615435e409ae27733d813ddef171276a471c5dbd4d543e508793b4be074542f248538566bc9bed6e0366c58a842ffb3b162eae0faa29819a1e9b9640313a7007ed5f7ccbccf", 0xe7}, {&(0x7f00000033c0)="f515c5098af1293744d13434cc6e19957fe569e4288e542b02ce132ae47151cafa95b62511e18adf5b", 0x29}, {&(0x7f0000003400)="9455681c053ad7dd76b928ecffd8a8e5b7d593ee1d8b2e3cbe75949ea08b72443c3c7715c8cf618f814ef13ee43a4c38affe6844a2480711e36edacc576171f48dacbc534f0c9aa977d36d47493dc14214fffa71abd08e47d165f0af3a7dc618dc88925916b937e1cf0a28c4abb7eeb969c271f5f0b92efd61cf121be55de943493d54925a15472d73850d77a5e102a15b48f68758987c5b7a2b6bc6f5638cad222c9fbe54b2e41e096a8deafaab70710911", 0xb2}, {&(0x7f00000034c0)="4e2bb97c4c6f242d8042b1cdedc72821acaa43035b832a5af52f5b5a1a0a681039276146f42ce6c60f12cfede9f9ab405bf2bfa96deffaa2f06d8631400da003e5c63b9cb7e9230e72cc5208900896f3d5aeb372c93c9db61d5e20f6be6393b4287ef896c3974d8c23b365d45bb0eb03190a1fac1b64a2d3497899f1a40604e9bc0f7729fb6f8272", 0x88}, {&(0x7f0000003580)="46d6ae8f10e64235f94d99a65cdca83cdec0b1230f863fe175b67111946098", 0x1f}, {&(0x7f00000035c0)="7bfbc3b8d0b513", 0x7}, {&(0x7f0000003600)="0e625342e8b120b93b619fd07e84856992c00d542824c5997dd048fe397b5ec228594fda401eb10ed0b3a276f2e66b626d79d9c459317fba64d4c78c18ad3289a92510b957522d6b1c871c9f8b6b645e924a84e051cc202bde24f1c6806f68904f75c917198c97516c5592af84388fd481dd3b5ddb0516", 0x77}], 0x9, &(0x7f0000003780)=[@txtime={{0x18, 0x1, 0x3d, 0xe2e3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x97}}], 0x78}}], 0x5, 0x40040d0) ppoll(&(0x7f0000000280)=[{r4, 0x9004}], 0x10, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) r5 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003940)='/sys/module/configfs', 0x200, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003980)={{{@in=@local, @in6=@mcast2}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000003a80)=0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="6401010000000a010100ac141413e0000002ac1414b7ac1414bbffff52ffff7f000001e000000200"/52], 0x34) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0xffffff9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x0, 0x148, 0x0, 0x148, 0x178, 0x240, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 4.124283459s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000003800)=[{{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @mcast1, 0x38536017}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)="f3a3709219cd856bc1fa4747aeca5d52e1f550b5610171a2f73fdd9a3430f221b94aff72ebed0bc63121445fff75bc613d62f3dffd01c8d199cd252c41dee0e132cf46a1586c5a3dd8e498a668985408b8e3fc509396a24c54441e13b1a19dfdb666489ee9a256b812db943375c261a364776ae389621c7c1492989b733a020aebd0ccf1c8", 0x85}, {&(0x7f0000000540)="a4499d4ff21e30edde6a6774c05be626939cdc721c7505b7775b6e1b6d2cb6ac2a32d5093caab37fc26e56b895b6bf41fc47b6299407a378185ac7af72c272a5fe292706fc5cd81d7ea8962e43ec5af8fdb4c3bf5ad4a9687cfc5f1ca37f4b489665444f273a6b74ad9779614fda0b5bfd3c60fd1adac39a1b7893ea26c82eb3a15fa3f0369d3cea212570d01fe53673b9250e61529e37deb49bd7ddbce66872f26415359c77cd5f00b3d2adb93fd0318167ff9300901bf0ee6bf07abf97557615a6c3b036b81bde5da05bb86f34a2f5d455e6b2ea76234f7dbe83d545c5413717e2348a12a9814e71567d810a64d29ce3340cb814c986b2f6", 0xf9}], 0x2, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x87}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0xef6a}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xf0}}, {{&(0x7f0000000780)=@llc={0x1a, 0x101, 0x40, 0x4, 0xaf, 0x6}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)="600d0b748aa16bbc90209027b5c9f47714b78f94609d5d8fc7af2f5d2c923c75e200e6f747fb2342aa6f53735019b98603aa53c8343bdc3ab7037446b5923b48e895e027e7b8efb7bf2e87dcb83fffb54c00b727acdf9e362e3ed3a21e914c305fe2f476c6d1b28cf2083e2f4995a34a2a5321f3f592ab40ae933e0e82cd327486f49f64f01c9c957c48c80445cd74e5d7b7683877f47d69ba04ca3a9971c9686e162b04be27940c2ed12ac315eab3c347dfe7e74fe7717e2d8a39d8adbb0cecb335a0b40caa93d12e2b9b5a87f5f752c51ef19adeec2e13d2c18ea84b81e85a9b", 0xe1}, {&(0x7f0000000900)="e40e6a9e23bcff30bf3aaa15e697bf52d6c7af8a1721c27f4b4a67a4f672e8feca32a690760216bfe5593a6e3d46339e116713873195d8088224e461a4cb63b9c735a69a397a2ff2cb824ad12ca141e33efd24b84a4ee76cce18c82b49755051f15b42d8979021f3ef4cc07f34438ededcab774a8b689603d8185ca23597484d8cf02fc67099b2813997f29c0a6b3ef1b326cecd66b5a259a8", 0x99}, {&(0x7f00000009c0)="135807c3529983e1ddea7d5f34f29d525abc68598aff7def33b3277da01caa30cb40295a9c8c2919e08863cbed6b1e83a73f47ac6cbeba949c4ac2182f0664725a9c55fc8d1397a8374869967808747c20552b750af35c7e47517b18190bcb3d170656087c127640bc5310ffffc902f2be6ebe1fcdf1c77e67a96ff5048580c02b3318819613165ae2bdff38ebdf914308d29afaeb32c77d2319a70f66a488b61382e000b973973718237a1051f31db0e52bd4def0f09601f606c300b95707c5156ae571f756da4371de", 0xca}], 0x3}}, {{&(0x7f0000001b00)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x9, 0x59, "48258c93b3f5b3fe8fd8f38b78939a9f4daea357006c84bddade90eb7a0ab833fc17d9c858e89ef547da7d7825b72e00cfa05de379c7c381241c7f66bf97a1", 0x23}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001b80)="9f5856023f9f72ff61ef28c1ba3762c1fcc1502fef065de532714a49c8393d001d264d8c9ad2e815e83162a22e0c411ce97949be7877effec4cd8e3455f2cd20bdb2d295f10ebc70dfe4d70b744cd7d39ea0", 0x52}, {&(0x7f0000001c00)="792ee76b91b7f7a7dace77a090bcc2da0bd5f77448f20c62429957a022e7625c98c135c62833490240fcbd96d3b62fdaafa9d2aeb2a8790a534d1c6171648ab6282e0bd7fcb0f8b977e3cb6290bde08edaa9266ffc70fbcbaa3fa30a498f46f1b810bc8f196956bdebccf00cbf2582a212f980ba72934bb5730189fc008ddf212e0f7e6ea94aa3a19de01d0946", 0x8d}, {&(0x7f0000001cc0)="1b19642b6b4bec55c583a7fa58dc0a78d36c85fa5b00823e0fffce6eacd204c4a20ec4b368ea6aec751a06e77eb6752e8c1d036f45262bb00871f26df9e68c47cc33eca2e8cbefefa06c211578f6243db01b0ebc021920d81f1cc57dca6263aa013feb03d8516a53a54e42c6b22fb04360902787c77533882268a78d1999d96e4b636ae089e33cbe9eb9e21e7fc0f0cde941b2acda4d1a86", 0x98}, {&(0x7f0000001d80)="940ad412698f98247d466d4d9379e743139a78f1c94f34fe0216bdbe94f4ef03fa984dbad33cd933dd5e1d1e1a3bad2997b3c93ca0bde1ad108ff6fefd190d4d73adfbb937ad6bb4f4ee59d2db990211bfe348156ebd29325cb3e74dd33e84f73498ccf542630c4a9d6b5f26c96809d07785a7b016714a3489430a29f5dde3a7bf4dfbd4609ba8f18fc2bb7da92dd3b0b478cb86b70cc79a57675e9e697b4d0d915f1251147c3bc05a70b2aae88ae601dde8049fbf43e30cb4fbd169e4367ae9993b3025250d5078f236cadca1fc3c9b2c3c62037124", 0xd6}, {0x0}, {&(0x7f0000001f40)="22c4178fd8e5042df2a0205be56999", 0xf}, {&(0x7f0000001f80)="4d64189dac336c603466358bbf98ba31fa3ed5d33480eef14f94ed8c7157370bf9187868761ee070dafa6d99b18d820deab213126a054a0e1f3f337f24fba96aa513", 0x42}], 0x7}}, {{&(0x7f0000002080)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002100)="45a8f891934bd3f2b908eca1cbaa47fe4126a57fe86bd272421b44040ce06c5191e4fb6cb8d0373cdb3a37dbdd525f4f6a905513b8d37ea61ac24ce21cb550fe90490bdec5bc2cfd2f569b438da272b241734ec94391354377cd688fa35f57259672cb8fad47db590dab53731356a63e669c26976c05", 0x76}], 0x1, &(0x7f00000021c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xa4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xf9}}], 0x60}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002240)="4a76cad5fa1b6a325d67dc72f91692efa2c2c2e68f24567eb753f6bff7a44c42636c7e544ad5cb1f2a7006f26c6ca84927f93ceee181f39bec09cc9af8264c2564cbf4126a87ddc3b8ef682bc3e4e935f4378552976239e2da1482978b6e9815c9cbdcbc529a1f74ef3a440e050e31538229dd04130f9ec3", 0x78}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="692bcb908446cbea330466bb363247cb3f9ea44d175a4de3f37c00510c0027cce793985f28d67cd0d49727e14ae5989cb57a40cd1555656eba022887e08ecf3c198eaf0d74f2f0fcd473b93d588d2fc472e655f5d3f7c1b8d637c3dc7b2f10bd33071de32fad2caa2f01cc5d3269ba6c62fad1a84fd86fe0c20f38499ca39ac7f31c212a4849d568bea98a4434e505403534515683462d80abfcaa4318528300adb615435e409ae27733d813ddef171276a471c5dbd4d543e508793b4be074542f248538566bc9bed6e0366c58a842ffb3b162eae0faa29819a1e9b9640313a7007ed5f7ccbccf", 0xe7}, {&(0x7f00000033c0)="f515c5098af1293744d13434cc6e19957fe569e4288e542b02ce132ae47151cafa95b62511e18adf5b", 0x29}, {&(0x7f0000003400)="9455681c053ad7dd76b928ecffd8a8e5b7d593ee1d8b2e3cbe75949ea08b72443c3c7715c8cf618f814ef13ee43a4c38affe6844a2480711e36edacc576171f48dacbc534f0c9aa977d36d47493dc14214fffa71abd08e47d165f0af3a7dc618dc88925916b937e1cf0a28c4abb7eeb969c271f5f0b92efd61cf121be55de943493d54925a15472d73850d77a5e102a15b48f68758987c5b7a2b6bc6f5638cad222c9fbe54b2e41e096a8deafaab70710911", 0xb2}, {&(0x7f00000034c0)="4e2bb97c4c6f242d8042b1cdedc72821acaa43035b832a5af52f5b5a1a0a681039276146f42ce6c60f12cfede9f9ab405bf2bfa96deffaa2f06d8631400da003e5c63b9cb7e9230e72cc5208900896f3d5aeb372c93c9db61d5e20f6be6393b4287ef896c3974d8c23b365d45bb0eb03190a1fac1b64a2d3497899f1a40604e9bc0f7729fb6f8272", 0x88}, {&(0x7f0000003580)="46d6ae8f10e64235f94d99a65cdca83cdec0b1230f863fe175b67111946098", 0x1f}, {&(0x7f00000035c0)="7bfbc3b8d0b513", 0x7}, {&(0x7f0000003600)="0e625342e8b120b93b619fd07e84856992c00d542824c5997dd048fe397b5ec228594fda401eb10ed0b3a276f2e66b626d79d9c459317fba64d4c78c18ad3289a92510b957522d6b1c871c9f8b6b645e924a84e051cc202bde24f1c6806f68904f75c917198c97516c5592af84388fd481dd3b5ddb0516", 0x77}], 0x9, &(0x7f0000003780)=[@txtime={{0x18, 0x1, 0x3d, 0xe2e3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x97}}], 0x78}}], 0x5, 0x40040d0) ppoll(&(0x7f0000000280)=[{r4, 0x9004}], 0x10, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) r5 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003940)='/sys/module/configfs', 0x200, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003980)={{{@in=@local, @in6=@mcast2}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000003a80)=0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="6401010000000a010100ac141413e0000002ac1414b7ac1414bbffff52ffff7f000001e000000200"/52], 0x34) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0xffffff9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x0, 0x148, 0x0, 0x148, 0x178, 0x240, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 3.09333551s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@errors_remount}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@noload}]}, 0x1, 0x444, &(0x7f0000001f80)="$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") chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 2.472786562s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = fanotify_init(0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x1021, r4, 0x0) r5 = dup(r4) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000780)={0x2020}, 0x2020) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) 1.982791475s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d8, 0x20a, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@private1, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 1.855215997s ago: executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000005240)=""/180, 0xba}, {&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f0000000c00)=""/136, 0x85}, {&(0x7f0000000cc0)=""/30}], 0x286}}], 0x1, 0x0, 0x0) 1.794352091s ago: executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x40, 0xe1}) 1.768192572s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) 1.681131641s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1.569820037s ago: executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0xfffffffa, 0x410) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket(0x26, 0x6, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x7}, 0x10}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x400, 0x1, 0xfffffffc}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x40057) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000a40)}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x3, 0x6, @random="df559fdab89a"}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r8, @ANYBLOB="010000000000000000002000000009001f007068794e99"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="17b628bd7000030000a000000000"], 0x14}}, 0x4000841) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1426bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x44045}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000500), 0x44}}, 0x10) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfecb2cc0}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x82, 0x6d560}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000000, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x80}}, 0x40046) 1.524623405s ago: executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f042}) pread64(r0, &(0x7f0000000400)=""/42, 0x2a, 0x0) 1.407485204s ago: executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5b5, &(0x7f0000002a80)="$eJzs3c9vVNUeAPDvnZkWSt977SMvT3FhGg2BRGlpAYM/FrAnBH/s3FhpIcjwI7RGiyaWBDcmxo0LElcuxP9CiW5dmbhw4caVIUFj2GiMjrkzd4ZhOtNOS4dbez+f5Lbn3HNvz7nQb8+Ze8+ZCaCwJtIvpYg9EXE5iRhrK6tEVjjROO7ur++eTrckarWXf0kiyfalRyVt541mJ/85FvHtV0nsLq+sd2Hp6vnZanX+SpafWrxweWph6eqBcxdmz86fnb8488zM0SOHjxydPvhA11dqS5+4/sZbYx+cfPWzT/5Ipj//4WQSx+LnM42y5nVspomYiN9qtfc696f/rkc3u7KclFu/J/cknTvYsipZjAxHxCMxFuW2/82xeP/FXBsHDFQtiagBBZWIfyio5jig+dq+v9fBpQGPSoCH4c7x9OtQl/ivNO4NxngMRcTejvO63NLbkLSOb74+eT3dYkD34YDulq/tyFKd8Z/UY3M8dtZzu+6W7rvPm44ATmXf0/0vbbD+iY68+IeHZ/laRDzabfy/dvy/1hb/r2+wfvEPAAAAAAAAm+fW8Yh4utvzv1L2bG5nPFF//pc0nv99d2+F4LFNqH/t53+l2x2HJJtQLZDN/3uh6/zf1hzf8XKW+3djNmBy5lx1/mBE/Cci9sfQjjQ/vUodBz7cfaNXWfv8v3RL62/OBczacbuy4/5z5mYXZx/kmoGGO9ciHqv0nv+T9v9Je/+fSf8eXO6zjt17b57qVbZ2/AODUvs0Yl/X/v/eMDtZ/f05purjganmqGClx9/56Ite9Yt/yE/a/+9aPf7Hk/b361lY388fjohDS5Var/KNjv+Hk1fKzZ+fent2cfHKdMRwcmLl/pn1tRm2q2Y8NOMljf/9T65+/681/m+Lw5GIWO6zzv//NfpjrzL9P+Qnjf+5dfX/60/M3Bz/slf9/fX/h+t9+v5sj/t/sLp+AzTvdgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP1EpIv4VSWmylS6VJicjRiPif7GrVL20sPjUmUtvXpxLy+qf/19qftLvWCOfND//f7wtP9ORPxQR/42Ij8sj9fzk6UvVubwvHgAAAAAAAAAAAAAAAAAAALaI0R7r/1M/lfNuHTBwley7eIfiqeTdACA34h+KS/xDcYl/KC7xD8W1wfj3uAC2Af0/FNVQf4ftHHQ7gDzo/wEAAAAAYFu59fyzN5KIWH5upL6lhrOy1oPBkbxaBwxSKe8GALkxhxeKy9QfKK4+J/8C21jSSv1e61bee/Z/MpgGAQAAAAAAAAAAAAAr7Ntz6/s11/9H1KwThO3H+n8oLv06FJf1/1Bc1v8Da63it/4fAAAAAAAAAAAAAPK3sHT1/Gy1On9FQmKrJYYiYgs0I4fEcP7hmfMfJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOXvAAAA//9JxiYA") syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.266625504s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000380), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rxrpc_client\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1.121595254s ago: executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) 1.076651458s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.058446309s ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = dup(r0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af21, &(0x7f00000001c0)={0x0, r1}) 958.772634ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@errors_remount}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@noload}]}, 0x1, 0x444, &(0x7f0000001f80)="$eJzs28tvG0UYAPBv101LXySU8ugDCBRExCNp0gI9cAGBxAEkJC7lGJK0KnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKBcKJ6O1d2PHsdMkdbIF/37S1jO7s535PDv27E4cQN8azv5JIvZFxG8RMdjIriww3Hi5ubQw9ffSwlQStdpbfyb1cn8tLUwVRYvz9uaZkTQi/TSJIx3qnbt85fxktTpzKc+PzV94b2zu8pVnz12YPDtzdubixKlTJ0+Mv/D8xHM9ifOerK2HP5w9eui1t6+9MXX62js/fZMU8bfF0SPDax18olbrcXXl2t+STnaU2BA2pBIRWXcN1Mf/YFSi2XmD8eonXU9Mt6mBwJap5bocXqwB/2NJlN0CoBzFF312/1ts2zf7KN+Nlxo3QFncN/MtFqO+s7jFGWi7v+2l4Yg4vfjPl9kWW/McAgBghe+y+c8zneZ/adzfUu7ufG1oKF9LORAR99Z2xcGIuC+iXvaBiHhwg/W3L5Ksnv+k1zcV2Dpl878X87Wt5flfo96iyFAlz+2vxz+QnDlXnTmevycjMbAry4+vUcf3r/z6ebdjrfO/bMvqL+aCeTuu79i18pzpyfnJ24m51Y2PIw7v6BR/srwSkETEoYg4vMk6zj319dFux24d/xp6sM5U+yriyUb/L0Zb/IVk7fXJsbuiOnN8rLgqVvv5l6tvdqv/tuLvgaz/93S8/pfjH0pa12vnNl7H1d8/63pPM7qp67+5Y2f++sHk/Pyl8YidyeuNRrfun2ieW+SL8ln8I8c6j/8D0XwnjkREdhE/FBEPR8Qjed89GhGPRcSxNeL/8eXH3+127E7o/+m2/h9aWaSt/5uJndG+p3Oicv6Hb1f+j83k+j7/TtZTI/me9Xz+raddm7uaAQAA4L8njYh9kaSjy+k0HR1t/A3/wdiTVmfn5p8+M/v+xenGbwSGYiAtnnQNtjwPHc9v64v8RFv+RP7c+IvK7np+dGq2Ol128NDn9nYZ/5k/KmW3Dthyfq8F/cv4h/5l/EP/Mv6hf3UY/7vLaAew/Tp9/39UQjuA7dc2/i37QR9x/w/9y/iH/tU6/pMS2wFsq7ndcesfyUtIrEpEekc0ozeJZItHwb6yA9x4ouxPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN74NwAA//+HM+n4") chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 654.497387ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="f6ea090003001549009ba52ca41aab", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)={[{@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_lower}, {@fat=@check_strict}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@flush}, {@rodir}, {@uni_xlate}]}, 0x1, 0x219, &(0x7f0000000440)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$eJzs3UFrY1UUAODz0jSNukgRN4qLB7pwVaZu3bTKCGJXSgR1ocXpgCRhIIWAI5iZ1fwCl/4Pf4IbN/4Dwa3gri6qV17ee01iX9PS1hT1+1an995z73nvQrrKyeevjgYPHmXx9OTn6HazaO3FXvyZxXa0ovYk2nFe0xgA8G/we0rxW7pOZrt1+9UAAOtQ/v8v3XUtAMB6fPjxJ+/vHxzc/yDPu/Fy79mkn0XE6NmkX87vP4wvYxhHcS96cRqRzpTxu+8d3I92XtiO10fTSb/IHH32Y7X//q8Rs/zd6MV2c/5uXlrIn076m/F85LH/cLMutRcvNee/2ZAf/U688dpC/TvRi5++iEcxjAdR5M7zv9nN83fStydff1ocU+RnrehvzdbNpY113gsAAAAAAAAAAAAAAAAAAAAAAP9tO3mele17Zv17iqGq/87G6Wx+J69tL/fnKfOzeqOyP1CKqkXPNMV3dX+de3mep2rhPL8dr7T9iAAAAAAAAAAAAAAAAAAAAAAUjr96PDgcDo/GtxLU3QDqr/Vfd5+9+cjWUrkNi7euftZit4Gi1pWLo92O1RuepNLlz9WqD21e89zFUzcItuaX+1GUQX0xN9o5/e2Fv/h2+ffjwWFeralf8uAwu+ysbr3P94tTnbjpS0izCk/T8p12z0pdzurc0pvvvNA49UdK6Wr7vPVLeUfVSDZrsXG10zeroPEBi6B7/i5+uHjDCz8yNq75UQMAAAAAAAAAAAAAAAAAAFyi/K7vk6PxccPk05WprX+sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYs/L3/4dH47OgGxHLI+eCaZW8ak0VdGJ8fMePCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/AXwEAAP//wZJM4A==") r3 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000500), 0xbf) sendfile(0xffffffffffffffff, r3, &(0x7f0000000240), 0x7f06) syz_usb_connect$cdc_ncm(0x0, 0x7b, 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000530404"], 0x14}}, 0x0) 605.961485ms ago: executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x3fc00}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "89a4160ed04e0df05a8528d54228c0b86fb2bdaea96e6c08e26f47ec41"}, 0x28) 479.671389ms ago: executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x40, 0xe1}) 341.851541ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 238.071662ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000021400000011000100"/98], 0x64}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x76, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r4, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a0a0000000000000000000000000000000000000000001efbc416d0210d786ec19c1ff347bf5ef74ea3e7934e1a836ae5901a194a49"], 0x0}, 0x90) syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/66, 0x42}], 0x1) 119.027315ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000021400000011000100"/98], 0x64}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x76, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r4, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a0a0000000000000000000000000000000000000000001efbc416d0210d786ec19c1ff347bf5ef74ea3e7934e1a836ae5901a194a49"], 0x0}, 0x90) syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/66, 0x42}], 0x1) 0s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001000)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x45}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x5, [@datasec={0x6, 0x3, 0x0, 0xf, 0x3, [{0x4, 0x512e, 0x9}, {0x3, 0x6, 0x80000001}, {0x2, 0xeff, 0x1f}], "06b090"}, @union={0xf, 0x1, 0x0, 0x5, 0x0, 0x80000001, [{0x4, 0x3, 0x4}]}, @var={0x9, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x2}]}, @fwd={0x5}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f0000000340)=""/154, 0x99, 0x9a, 0x0, 0x4411a8d3}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r4}, 0x38) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x9}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, 0x0, 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000980)='rpcgss_need_reencode\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r6, 0x0, 0x20000000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000e89f85000000040000001801000020756c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40001) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r6, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r6, 0x0, 0x20000000}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x8c95, 0x8}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x8, 0x93, 0xb75b, 0x0, 0xffffffffffffffff, 0xeb26, '\x00', r3, r1, 0x0, 0x5, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffff40d}, [@generic={0x3f, 0x5, 0x0, 0x1ff, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4c}, @ldst={0x2, 0x2, 0x1, 0x1, 0xb, 0x10}, @generic={0x7, 0x8, 0xf, 0xbe1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x17, &(0x7f0000000180)=""/23, 0x41100, 0x0, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x8, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r6, r9, r10, r11, r12], 0x0, 0x10, 0xffffffff}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) socketpair(0x11, 0x3, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): on: batadv_slave_0 [ 110.940790][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.004930][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.047784][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.083612][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.103207][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.136427][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.165479][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.203231][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.222101][ T6054] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.239540][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.261193][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.301206][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.328829][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.358454][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.396645][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.432056][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.483356][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.510769][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.553217][ T5106] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 111.561252][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.598617][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.634195][ T5758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.651127][ T6067] loop1: detected capacity change from 0 to 512 [ 111.663493][ T6067] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.677013][ T5758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.698918][ T5758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.708505][ T5758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.718452][ T6067] EXT4-fs (loop1): 1 truncate cleaned up [ 111.744839][ T6067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.755722][ T6016] loop2: detected capacity change from 0 to 40427 [ 111.768380][ T6016] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 111.777490][ T6016] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.811402][ T6067] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #12: comm syz-executor.1: Siphash requires key [ 111.811562][ T6016] F2FS-fs (loop2): invalid crc value [ 111.826821][ T6067] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #12: comm syz-executor.1: Siphash requires key [ 111.840293][ T6067] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #12: comm syz-executor.1: Siphash requires key [ 111.852741][ T6067] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #12: comm syz-executor.1: Siphash requires key [ 111.924526][ T6016] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.127717][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.160641][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.165248][ T6078] loop3: detected capacity change from 0 to 2048 [ 112.258142][ T6085] loop0: detected capacity change from 0 to 256 [ 112.291790][ T6085] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 112.445425][ T29] audit: type=1800 audit(1717018332.954:33): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=1048602 res=0 errno=0 [ 112.495571][ T6085] syz-executor.0: attempt to access beyond end of device [ 112.495571][ T6085] loop0: rw=0, sector=256, nr_sectors = 8 limit=256 [ 113.123811][ T5262] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 113.164679][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.201425][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.437078][ T6095] loop0: detected capacity change from 0 to 16 [ 113.482293][ T5101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.506968][ T6095] erofs: (device loop0): mounted with root inode @ nid 36. [ 113.516261][ T6099] loop3: detected capacity change from 0 to 256 [ 113.559128][ T6099] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 113.777980][ T6099] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930443) [ 113.777980][ T6099] [ 113.839133][ T6102] loop1: detected capacity change from 0 to 2048 [ 113.853227][ T6099] exFAT-fs (loop3): Filesystem has been set read-only [ 113.973295][ T6112] dccp_v6_rcv: dropped packet with invalid checksum [ 113.980267][ T6102] Alternate GPT is invalid, using primary GPT. [ 113.997495][ T6102] loop1: p1 p2 p3 [ 114.014717][ T6113] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 114.014717][ T6113] The task syz-executor.0 (6113) triggered the difference, watch for misbehavior. [ 114.231401][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.588876][ T6120] team0: Port device bridge1 added [ 114.607434][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.898330][ T6144] loop0: detected capacity change from 0 to 64 [ 114.977402][ T6144] hfs: bad catalog folder thread [ 115.251513][ T6159] loop2: detected capacity change from 0 to 256 [ 115.303769][ T6159] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 115.438258][ T6159] syz-executor.2: attempt to access beyond end of device [ 115.438258][ T6159] loop2: rw=0, sector=256, nr_sectors = 8 limit=256 [ 115.568255][ T29] audit: type=1800 audit(1717018335.944:34): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=1048610 res=0 errno=0 [ 116.223456][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.318976][ T6172] team0: Device veth1_to_batadv is up. Set it down before adding it as a team port [ 116.378535][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.526178][ T6186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.567679][ T5148] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.651146][ T6194] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.716570][ T6196] syz-executor.3 (pid 6196) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 116.794904][ T5148] usb 2-1: Using ep0 maxpacket: 8 [ 116.802603][ T5148] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 116.823220][ T5148] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 116.884766][ T5148] usb 2-1: config 0 has no interface number 0 [ 116.897245][ T5148] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.932199][ T5148] usb 2-1: config 0 interface 52 has no altsetting 0 [ 116.952560][ T5148] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 116.993366][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.010083][ T5148] usb 2-1: config 0 descriptor?? [ 118.216288][ T5151] usb 2-1: USB disconnect, device number 4 [ 118.276577][ T6221] loop4: detected capacity change from 0 to 1024 [ 118.334633][ T6221] hfsplus: request for non-existent node 3 in B*Tree [ 118.384106][ T6221] hfsplus: request for non-existent node 3 in B*Tree [ 118.832146][ T6197] loop2: detected capacity change from 0 to 32768 [ 119.913442][ T6197] workqueue: Failed to create a rescuer kthread for wq "btree_update": -EINTR [ 119.913851][ T6197] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 122.557870][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.584422][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.603622][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.625673][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.643853][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 122.655510][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.841628][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.880061][ T6278] 9pnet_fd: Insufficient options for proto=fd [ 123.107261][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.262769][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.382834][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.816321][ T51] bridge_slave_1: left allmulticast mode [ 123.850702][ T51] bridge_slave_1: left promiscuous mode [ 123.857885][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.930554][ T51] bridge_slave_0: left allmulticast mode [ 123.952529][ T51] bridge_slave_0: left promiscuous mode [ 123.974476][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.220212][ T6325] loop4: detected capacity change from 0 to 256 [ 124.756578][ T5112] Bluetooth: hci4: command tx timeout [ 124.918755][ T6323] loop1: detected capacity change from 0 to 32768 [ 125.037029][ T6323] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 125.187474][ T6323] XFS (loop1): Ending clean mount [ 125.325734][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.348266][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.372853][ T51] bond0 (unregistering): Released all slaves [ 125.390270][ T5101] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 125.855599][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 125.869846][ T45] kernel read not supported for file /rfkill (pid: 45 comm: kworker/1:1) [ 126.072143][ T6371] xt_TCPMSS: Only works on TCP SYN packets [ 126.277825][ T6342] loop0: detected capacity change from 0 to 32768 [ 126.434948][ T6342] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 126.434948][ T6342] [ 126.503208][ T51] hsr_slave_0: left promiscuous mode [ 126.583469][ T51] hsr_slave_1: left promiscuous mode [ 126.600868][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.620626][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.645901][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.682111][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.761716][ T51] veth1_macvtap: left promiscuous mode [ 126.783300][ T51] veth0_macvtap: left promiscuous mode [ 126.788959][ T51] veth1_vlan: left promiscuous mode [ 126.805835][ T51] veth0_vlan: left promiscuous mode [ 126.833557][ T5112] Bluetooth: hci4: command tx timeout [ 127.470878][ T6392] loop1: detected capacity change from 0 to 32768 [ 127.485231][ T6392] [ 127.485231][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.485231][ T6392] [ 127.522326][ T6392] jfs_create: dtInsert returned -EIO [ 127.533291][ T6392] ERROR: (device loop1): jfs_create: [ 127.533291][ T6392] [ 127.544393][ T6392] ERROR: (device loop1): remounting filesystem as read-only [ 127.787746][ T51] team0 (unregistering): Port device team_slave_1 removed [ 127.897253][ T51] team0 (unregistering): Port device team_slave_0 removed [ 128.489401][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.502470][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.511801][ T6267] bridge_slave_0: entered allmulticast mode [ 128.535319][ T6267] bridge_slave_0: entered promiscuous mode [ 128.656317][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.704534][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.711747][ T6267] bridge_slave_1: entered allmulticast mode [ 128.756578][ T6267] bridge_slave_1: entered promiscuous mode [ 128.913472][ T5112] Bluetooth: hci4: command tx timeout [ 128.929039][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.960154][ T6406] loop1: detected capacity change from 0 to 32768 [ 129.000070][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.034523][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.034554][ T6406] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6406) [ 129.141047][ T6406] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.194942][ T6406] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 129.238344][ T6406] BTRFS info (device loop1): using free-space-tree [ 129.310880][ T6267] team0: Port device team_slave_0 added [ 129.357855][ T6267] team0: Port device team_slave_1 added [ 129.603688][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.610660][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.699578][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.774189][ T5101] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.832944][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.868148][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.933298][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.060611][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.084794][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.094425][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.108764][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.122698][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.131672][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.178127][ T6267] hsr_slave_0: entered promiscuous mode [ 130.190897][ T6267] hsr_slave_1: entered promiscuous mode [ 130.235242][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.248752][ T6267] Cannot create hsr debugfs directory [ 130.560484][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.746185][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.822523][ T6480] tmpfs: Bad value for 'mpol' [ 130.839416][ T6481] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 130.852834][ T6474] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 130.872022][ T6474] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.897252][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.003804][ T5112] Bluetooth: hci4: command tx timeout [ 131.063265][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.275690][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.028248][ T6460] chnl_net:caif_netlink_parms(): no params data found [ 132.057277][ T51] bridge_slave_1: left allmulticast mode [ 132.063332][ T51] bridge_slave_1: left promiscuous mode [ 132.083446][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.104301][ T51] bridge_slave_0: left allmulticast mode [ 132.109972][ T51] bridge_slave_0: left promiscuous mode [ 132.134001][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.203762][ T5112] Bluetooth: hci0: command tx timeout [ 132.555152][ T6526] loop1: detected capacity change from 0 to 2048 [ 132.565505][ T6526] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 132.579427][ T6526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.616776][ T6526] UDF-fs: warning (device loop1): udf_rmdir: empty directory has nlink != 2 (0) [ 132.634842][ T6502] loop0: detected capacity change from 0 to 32768 [ 132.650826][ T6502] XFS: noikeep mount option is deprecated. [ 132.706745][ T6502] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 132.933722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.942475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.951132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.959805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.968715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.977331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.006067][ T6502] XFS (loop0): Ending clean mount [ 133.027358][ T6502] XFS (loop0): Quotacheck needed: Please wait. [ 133.068461][ T6518] loop2: detected capacity change from 0 to 32768 [ 133.080883][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.087885][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.139897][ T6502] XFS (loop0): Quotacheck: Done. [ 133.203445][ T6518] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.348396][ T6518] XFS (loop2): Ending clean mount [ 133.402168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.616586][ T5098] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.641281][ T5609] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 133.703919][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.749298][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.750912][ T6548] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 133.792810][ T51] bond0 (unregistering): Released all slaves [ 133.849613][ T6548] loop1: detected capacity change from 0 to 256 [ 133.936853][ T6548] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 134.008894][ T6548] exFAT-fs (loop1): invalid start cluster (22) [ 134.283492][ T5112] Bluetooth: hci0: command tx timeout [ 134.322356][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.097403][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.120549][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.135974][ T6460] bridge_slave_0: entered allmulticast mode [ 135.152150][ T6460] bridge_slave_0: entered promiscuous mode [ 135.187907][ T51] hsr_slave_0: left promiscuous mode [ 135.199655][ T51] hsr_slave_1: left promiscuous mode [ 135.219767][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.244716][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.270649][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.295655][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.395281][ T51] veth1_macvtap: left promiscuous mode [ 135.400845][ T51] veth0_macvtap: left promiscuous mode [ 135.432283][ T51] veth1_vlan: left promiscuous mode [ 135.448659][ T51] veth0_vlan: left promiscuous mode [ 135.702429][ T6561] loop1: detected capacity change from 0 to 32768 [ 135.855005][ T6561] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 135.954252][ T6561] XFS (loop1): Ending clean mount [ 135.983497][ T6561] XFS (loop1): Quotacheck needed: Please wait. [ 136.066838][ T29] audit: type=1800 audit(1717018356.624:35): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 136.103224][ T6561] XFS (loop1): Quotacheck: Done. [ 136.261154][ T5101] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 136.352286][ T6599] loop0: detected capacity change from 0 to 2048 [ 136.362651][ T6599] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 136.372746][ T5112] Bluetooth: hci0: command tx timeout [ 136.385788][ T6599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.428453][ T6599] UDF-fs: warning (device loop0): udf_rmdir: empty directory has nlink != 2 (0) [ 136.890256][ T6610] loop1: detected capacity change from 0 to 256 [ 136.907184][ T6610] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.915475][ T51] team0 (unregistering): Port device team_slave_1 removed [ 137.006913][ T51] team0 (unregistering): Port device team_slave_0 removed [ 137.176414][ T6612] loop1: detected capacity change from 0 to 1024 [ 137.251652][ T6612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.288512][ T6603] loop0: detected capacity change from 0 to 32768 [ 137.297385][ T6603] XFS: noikeep mount option is deprecated. [ 137.345407][ T6603] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 137.369994][ T6612] syz-executor.1: attempt to access beyond end of device [ 137.369994][ T6612] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 137.430851][ T6603] XFS (loop0): Ending clean mount [ 137.451826][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.482110][ T6603] XFS (loop0): Quotacheck needed: Please wait. [ 137.564985][ T6603] XFS (loop0): Quotacheck: Done. [ 137.608408][ T5101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.774829][ T5609] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 138.003494][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.025206][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.032355][ T6460] bridge_slave_1: entered allmulticast mode [ 138.044819][ T6460] bridge_slave_1: entered promiscuous mode [ 138.170831][ T6267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.197591][ T6267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 138.312594][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.346569][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.375611][ T6267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 138.396250][ T6267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 138.443274][ T5112] Bluetooth: hci0: command tx timeout [ 138.615402][ T6460] team0: Port device team_slave_0 added [ 138.638039][ T6460] team0: Port device team_slave_1 added [ 138.811646][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.833045][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.909783][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.984157][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.991119][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.063194][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.297606][ T6634] loop0: detected capacity change from 0 to 32768 [ 139.298139][ T6460] hsr_slave_0: entered promiscuous mode [ 139.332467][ T6460] hsr_slave_1: entered promiscuous mode [ 139.355779][ T6634] [ 139.355779][ T6634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.355779][ T6634] [ 139.476078][ T5609] [ 139.476078][ T5609] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.476078][ T5609] [ 139.535400][ T5609] [ 139.535400][ T5609] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.535400][ T5609] [ 139.802418][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.859189][ T6643] loop2: detected capacity change from 0 to 40427 [ 139.903176][ T6643] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 139.910993][ T6643] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.985488][ T6643] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.228561][ T6267] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.276860][ T6643] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.388540][ T6643] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.057924][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.065127][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.178012][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.185208][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.417130][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.939225][ T6460] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.004132][ T6460] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.051587][ T6460] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.087473][ T6460] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.224352][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.457635][ T6267] veth0_vlan: entered promiscuous mode [ 142.494280][ T6267] veth1_vlan: entered promiscuous mode [ 142.530268][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.612304][ T6460] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.685855][ T6267] veth0_macvtap: entered promiscuous mode [ 142.695266][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.702428][ T5109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.745428][ T6267] veth1_macvtap: entered promiscuous mode [ 142.792125][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.799365][ T5109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.907193][ T6460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.965393][ T6460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.021230][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.053487][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.084755][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.129593][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.169771][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.194279][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.216523][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.257346][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.295157][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.367672][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.400740][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.430047][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.463299][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.503177][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.533140][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.565953][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.617947][ T6267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.663661][ T6267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.672393][ T6267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.714551][ T6267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.900142][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.014473][ T6694] loop2: detected capacity change from 0 to 32768 [ 144.036542][ T6694] XFS: noikeep mount option is deprecated. [ 144.044968][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.088667][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.172949][ T6694] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 144.201363][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.256307][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.307453][ T6694] XFS (loop2): Ending clean mount [ 144.376615][ T6694] XFS (loop2): Quotacheck needed: Please wait. [ 144.503411][ T6694] XFS (loop2): Quotacheck: Done. [ 144.746437][ T29] audit: type=1804 audit(1717018365.294:36): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2603231284/syzkaller.R8sJTw/1/bus" dev="sda1" ino=1960 res=1 errno=0 [ 144.859019][ T6460] veth0_vlan: entered promiscuous mode [ 144.905503][ T6460] veth1_vlan: entered promiscuous mode [ 145.001206][ T5098] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 145.015388][ T6460] veth0_macvtap: entered promiscuous mode [ 145.052454][ T6460] veth1_macvtap: entered promiscuous mode [ 145.144995][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.213144][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.222987][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.300069][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.332849][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.383227][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.416370][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.453731][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.483176][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.507375][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.536777][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.645437][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.687797][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.723201][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.747765][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.773288][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.790537][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.827614][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.862564][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.896126][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.964466][ T6460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.994685][ T6460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.053238][ T6460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.061968][ T6460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.351002][ T5205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.403361][ T5205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.472734][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.497814][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.708587][ T6769] loop3: detected capacity change from 0 to 4096 [ 147.780320][ T6769] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 147.799759][ T6776] loop4: detected capacity change from 0 to 512 [ 147.857601][ T6776] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.883017][ T6769] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 147.914545][ T6776] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 147.961670][ T6776] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz-executor.4: inode #15: comm syz-executor.4: iget: illegal inode # [ 148.055874][ T6776] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 148.099618][ T6776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.314706][ T6460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.550452][ T3666] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 148.810545][ T6765] loop2: detected capacity change from 0 to 40427 [ 148.858608][ T6765] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 148.903267][ T6765] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.996304][ T6765] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.201538][ T6765] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 149.221943][ T6765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.237085][ T6805] Process accounting resumed [ 152.462944][ T6843] loop4: detected capacity change from 0 to 512 [ 152.519944][ T6843] EXT4-fs (loop4): #blocks per group too big: 16384 [ 155.369150][ T6854] loop4: detected capacity change from 0 to 40427 [ 155.413378][ T6854] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 155.445124][ T6854] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 155.528955][ T6854] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.733581][ T6854] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 155.765052][ T6854] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 155.904467][ T5151] libceph: connect (1)[c::]:6789 error -101 [ 155.911216][ T5151] libceph: mon0 (1)[c::]:6789 connect error [ 155.921760][ T6880] ceph: No mds server is up or the cluster is laggy [ 155.922691][ T5151] libceph: connect (1)[c::]:6789 error -101 [ 155.937357][ T5151] libceph: mon0 (1)[c::]:6789 connect error [ 156.353777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 157.383570][ T6901] loop2: detected capacity change from 0 to 256 [ 157.427499][ T6903] loop3: detected capacity change from 0 to 1024 [ 157.471171][ T6901] FAT-fs (loop2): Directory bread(block 64) failed [ 157.483944][ T6901] FAT-fs (loop2): Directory bread(block 65) failed [ 157.510020][ T6901] FAT-fs (loop2): Directory bread(block 66) failed [ 157.536291][ T6901] FAT-fs (loop2): Directory bread(block 67) failed [ 157.562803][ T6903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.584368][ T6901] FAT-fs (loop2): Directory bread(block 68) failed [ 157.599336][ T6901] FAT-fs (loop2): Directory bread(block 69) failed [ 157.626119][ T6901] FAT-fs (loop2): Directory bread(block 70) failed [ 157.667730][ T6901] FAT-fs (loop2): Directory bread(block 71) failed [ 157.696996][ T6903] syz-executor.3: attempt to access beyond end of device [ 157.696996][ T6903] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 157.744083][ T6901] FAT-fs (loop2): Directory bread(block 72) failed [ 157.763262][ T6901] FAT-fs (loop2): Directory bread(block 73) failed [ 157.802116][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.945843][ T6901] syz-executor.2: attempt to access beyond end of device [ 157.945843][ T6901] loop2: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 157.987451][ T6901] syz-executor.2: attempt to access beyond end of device [ 157.987451][ T6901] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 158.070558][ T29] audit: type=1800 audit(1717018378.624:37): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="cpu.stat" dev="loop2" ino=1048621 res=0 errno=0 [ 158.126449][ T6267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.769574][ T5112] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 158.780210][ T5112] Bluetooth: hci2: Injecting HCI hardware error event [ 158.791092][ T5106] Bluetooth: hci2: hardware error 0x00 [ 158.980805][ T6916] loop4: detected capacity change from 0 to 32768 [ 159.003762][ T6916] XFS: noikeep mount option is deprecated. [ 159.055798][ T6916] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 159.104001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 159.139974][ T6916] XFS (loop4): Ending clean mount [ 159.172603][ T6916] XFS (loop4): Quotacheck needed: Please wait. [ 159.266267][ T6916] XFS (loop4): Quotacheck: Done. [ 159.413590][ T6460] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 159.447101][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.630694][ T6944] loop3: detected capacity change from 0 to 256 [ 159.898637][ T6942] loop2: detected capacity change from 0 to 4096 [ 159.963528][ T6942] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 160.064099][ T6942] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 160.240878][ T6955] loop4: detected capacity change from 0 to 256 [ 160.276646][ T6955] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 160.914009][ T5106] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 161.083153][ T5179] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.322641][ T5179] usb 3-1: New USB device found, idVendor=13d3, idProduct=3335, bcdDevice=ff.1d [ 161.332032][ T5179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.352162][ T5179] usb 3-1: config 0 descriptor?? [ 161.396695][ T5179] r8712u: register rtl8712_netdev_ops to netdev_ops [ 161.422789][ T5179] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 161.579488][ T5179] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 161.599825][ T5179] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 161.625981][ T5179] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 161.660472][ T5179] usb 3-1: USB disconnect, device number 5 [ 161.891520][ T6979] binder: 6978:6979 ioctl c0306201 20000280 returned -14 [ 162.392950][ T6986] loop2: detected capacity change from 0 to 4096 [ 162.431886][ T6986] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 162.604762][ T6986] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 163.473348][ T6982] loop3: detected capacity change from 0 to 32768 [ 163.537613][ T6982] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 163.593253][ T6982] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 163.659743][ T6982] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 163.696932][ T5179] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 163.704851][ T5179] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 163.910046][ T5179] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 205ms [ 163.929385][ T5179] gfs2: fsid=syz:syz.0: jid=0: Done [ 163.939851][ T6982] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 164.302855][ T6993] loop2: detected capacity change from 0 to 32768 [ 164.324592][ T6993] XFS: ikeep mount option is deprecated. [ 164.331643][ T6993] XFS: ikeep mount option is deprecated. [ 164.409520][ T6993] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.602754][ T6993] XFS (loop2): Ending clean mount [ 164.618552][ T6993] XFS (loop2): Quotacheck needed: Please wait. [ 164.804630][ T6993] XFS (loop2): Quotacheck: Done. [ 164.882355][ T5112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.893245][ T5112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.904414][ T5112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.933537][ T5112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.945709][ T5112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 164.953242][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.379652][ T5098] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.472597][ T7012] chnl_net:caif_netlink_parms(): no params data found [ 165.561242][ T5151] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.764317][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.774220][ T5151] usb 5-1: New USB device found, idVendor=13d3, idProduct=3335, bcdDevice=ff.1d [ 165.776831][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.795600][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.813475][ T7012] bridge_slave_0: entered allmulticast mode [ 165.817578][ T5151] usb 5-1: config 0 descriptor?? [ 165.844624][ T7012] bridge_slave_0: entered promiscuous mode [ 165.860568][ T5151] r8712u: register rtl8712_netdev_ops to netdev_ops [ 165.876028][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.886675][ T5151] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 165.904835][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.945117][ T7012] bridge_slave_1: entered allmulticast mode [ 165.952821][ T7012] bridge_slave_1: entered promiscuous mode [ 166.030706][ T7024] loop3: detected capacity change from 0 to 32768 [ 166.042649][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.077907][ T5151] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 166.086379][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.093559][ T5151] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 166.103783][ T7024] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section quota: wrong size (got 64 should be 80) [ 166.103783][ T7024] quota (size 64): [ 166.103783][ T7024] user: flags 0 space timelimit 0 warnlimit 0 inodes timelimit 711484258 warnlimit 2036689706 [ 166.103783][ T7024] group: flags aaea1671717e5b18 space timelimit 1518851844 warnlimit 3785740842 inodes timelimit 534930915 warnlimit 47155850 [ 166.103783][ T7024] project: flags 727ed5d04b39ebee space timelimit 5 warnlimit 7 inodes timelimit 2147483647 warnlimit 0 [ 166.103783][ T7024] [ 166.167040][ T5151] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 166.199206][ T5151] usb 5-1: USB disconnect, device number 2 [ 166.360167][ T7030] loop2: detected capacity change from 0 to 8192 [ 166.397498][ T7012] team0: Port device team_slave_0 added [ 166.414575][ T7032] loop3: detected capacity change from 0 to 64 [ 166.427636][ T7030] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.463948][ T7012] team0: Port device team_slave_1 added [ 166.583535][ T7032] hfs: walked past end of dir [ 166.591290][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.653205][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.687398][ T7034] loop4: detected capacity change from 0 to 128 [ 166.730793][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.793350][ T5191] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 166.797124][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.810310][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.838094][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.854981][ T7034] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.922070][ T7034] ext4 filesystem being mounted at /root/syzkaller-testdir1959111866/syzkaller.SpkBAz/21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.969328][ T7012] hsr_slave_0: entered promiscuous mode [ 167.010021][ T7012] hsr_slave_1: entered promiscuous mode [ 167.042613][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.058460][ T7012] Cannot create hsr debugfs directory [ 167.073452][ T5106] Bluetooth: hci3: command tx timeout [ 167.215087][ T6460] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.590716][ T29] audit: type=1800 audit(1717018388.144:38): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 167.698823][ T7012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.893962][ T7012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.075004][ T7012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.178442][ T7053] loop2: detected capacity change from 0 to 128 [ 168.207769][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.235111][ T7040] loop3: detected capacity change from 0 to 32768 [ 168.248537][ T7053] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 168.278795][ T7040] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 168.312480][ T7040] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 168.386112][ T7040] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 168.401480][ T7012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.424943][ T29] audit: type=1800 audit(1717018388.964:39): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file3" dev="loop2" ino=95 res=0 errno=0 [ 168.500838][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.505554][ T7053] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 168.528480][ T45] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 168.535564][ T45] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 168.650378][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.664421][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.697863][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.708821][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.718917][ T45] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 183ms [ 168.727011][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.736392][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.744884][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.758601][ T45] gfs2: fsid=syz:syz.0: jid=0: Done [ 168.764142][ T7040] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 168.876528][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.033415][ T5205] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 169.128586][ T7012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.153477][ T5112] Bluetooth: hci3: command tx timeout [ 169.198300][ T7012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.228769][ T35] bridge_slave_1: left allmulticast mode [ 169.234684][ T35] bridge_slave_1: left promiscuous mode [ 169.235142][ T5205] usb 5-1: New USB device found, idVendor=13d3, idProduct=3335, bcdDevice=ff.1d [ 169.240616][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.266453][ T35] bridge_slave_0: left allmulticast mode [ 169.272655][ T35] bridge_slave_0: left promiscuous mode [ 169.272672][ T5205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.278837][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.297782][ T5205] usb 5-1: config 0 descriptor?? [ 169.311773][ T5205] r8712u: register rtl8712_netdev_ops to netdev_ops [ 169.324420][ T5205] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 169.533743][ T5205] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 169.540609][ T5205] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 169.573355][ T5205] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 169.592840][ T5205] usb 5-1: USB disconnect, device number 3 [ 169.772872][ T7078] evm: overlay not supported [ 169.836175][ T7078] overlayfs: failed to get inode (-116) [ 169.842497][ T7078] overlayfs: failed to get inode (-116) [ 169.985594][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.997617][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.010554][ T35] bond0 (unregistering): Released all slaves [ 170.025104][ T7012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.067057][ T7012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.511612][ T7089] loop4: detected capacity change from 0 to 4096 [ 170.554682][ T35] hsr_slave_0: left promiscuous mode [ 170.593968][ T35] hsr_slave_1: left promiscuous mode [ 170.602312][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.623219][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.631705][ T7089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.664176][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.671605][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.739190][ T35] veth1_macvtap: left promiscuous mode [ 170.761575][ T35] veth0_macvtap: left promiscuous mode [ 170.774672][ T35] veth1_vlan: left promiscuous mode [ 170.781024][ T35] veth0_vlan: left promiscuous mode [ 170.843978][ T5112] Bluetooth: hci1: command tx timeout [ 171.233384][ T5112] Bluetooth: hci3: command tx timeout [ 171.379566][ T29] audit: type=1800 audit(1717018391.934:40): pid=7089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 171.825032][ T6460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.858351][ T35] team0 (unregistering): Port device team_slave_1 removed [ 171.931711][ T35] team0 (unregistering): Port device team_slave_0 removed [ 172.607122][ T7126] loop2: detected capacity change from 0 to 64 [ 172.643811][ T7126] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 172.665841][ T7126] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2 [ 172.913708][ T5112] Bluetooth: hci1: command tx timeout [ 173.140904][ T7135] loop4: detected capacity change from 0 to 512 [ 173.167057][ T7058] chnl_net:caif_netlink_parms(): no params data found [ 173.317425][ T5112] Bluetooth: hci3: command tx timeout [ 173.373447][ T7138] IPv6: Can't replace route, no match found [ 173.429763][ T7138] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.482973][ T7135] EXT4-fs (loop4): Test dummy encryption mode enabled [ 173.524114][ T7135] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 173.584404][ T7135] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 173.662297][ T7135] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.745524][ T7058] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.794669][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.800700][ T7162] loop3: detected capacity change from 0 to 512 [ 173.801857][ T7058] bridge_slave_0: entered allmulticast mode [ 173.845786][ T7162] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 173.847735][ T7058] bridge_slave_0: entered promiscuous mode [ 173.905711][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.961021][ T7058] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.006625][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.048950][ T7058] bridge_slave_1: entered allmulticast mode [ 174.057326][ T7135] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 174.070791][ T7058] bridge_slave_1: entered promiscuous mode [ 174.178807][ T7166] fscrypt (loop4): Error allocating 'xts(aes)' transform: -4 [ 174.236072][ T7058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.266109][ T6460] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 174.277215][ T7058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.290837][ T29] audit: type=1326 audit(1717018394.844:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7174 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f176767cee9 code=0x0 [ 174.298155][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.435680][ T7058] team0: Port device team_slave_0 added [ 174.459643][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.466830][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.498376][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.505565][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.538255][ T7058] team0: Port device team_slave_1 added [ 174.712238][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.726082][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.760975][ T7058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.778790][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.794891][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.830048][ T7058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.882605][ T7012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.000063][ T5112] Bluetooth: hci1: command tx timeout [ 175.003864][ T3666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.357814][ T3666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.439542][ T7058] hsr_slave_0: entered promiscuous mode [ 175.488630][ T7058] hsr_slave_1: entered promiscuous mode [ 175.493781][ T7187] loop3: detected capacity change from 0 to 1024 [ 175.518823][ T7058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.543231][ T7058] Cannot create hsr debugfs directory [ 175.601174][ T5802] hfsplus: b-tree write err: -5, ino 4 [ 175.622999][ T3666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.861481][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.873509][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.884016][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.886842][ T3666] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.913249][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.934222][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.941571][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.018541][ T7200] loop3: detected capacity change from 0 to 128 [ 176.026549][ T7200] UBIFS error (pid: 7200): cannot open "/dev/loop3", error -22 [ 176.177996][ T7206] loop3: detected capacity change from 0 to 512 [ 176.222778][ T7206] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.256268][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.269271][ T7206] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 176.308782][ T7206] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 176.345441][ T7206] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.525356][ T7206] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 176.617977][ T6267] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 176.879712][ T3666] bridge_slave_1: left allmulticast mode [ 176.885495][ T3666] bridge_slave_1: left promiscuous mode [ 176.891239][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.918238][ T3666] bridge_slave_0: left allmulticast mode [ 176.925411][ T3666] bridge_slave_0: left promiscuous mode [ 176.931288][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.076053][ T5106] Bluetooth: hci1: command tx timeout [ 177.210532][ T7228] loop3: detected capacity change from 0 to 256 [ 177.236725][ T7228] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 177.426961][ T3666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.439711][ T7232] loop3: detected capacity change from 0 to 1024 [ 177.447029][ T3666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.477728][ T3666] bond0 (unregistering): Released all slaves [ 177.691340][ T29] audit: type=1804 audit(1717018398.244:42): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2603231284/syzkaller.R8sJTw/56/file0" dev="sda1" ino=1944 res=1 errno=0 [ 177.890792][ T7012] veth0_vlan: entered promiscuous mode [ 178.046668][ T5106] Bluetooth: hci0: command tx timeout [ 178.314160][ T7012] veth1_vlan: entered promiscuous mode [ 178.412006][ T3666] hsr_slave_0: left promiscuous mode [ 178.425945][ T3666] hsr_slave_1: left promiscuous mode [ 178.442561][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.453632][ T7257] loop3: detected capacity change from 0 to 1024 [ 178.465444][ T7257] EXT4-fs: Ignoring removed nobh option [ 178.471064][ T7257] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.478000][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.499618][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.515618][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.571968][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.607661][ T3666] veth1_macvtap: left promiscuous mode [ 178.614885][ T3666] veth0_macvtap: left promiscuous mode [ 178.620650][ T3666] veth1_vlan: left promiscuous mode [ 178.626600][ T3666] veth0_vlan: left promiscuous mode [ 178.632529][ T7237] loop2: detected capacity change from 0 to 32768 [ 178.658149][ T7237] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7237) [ 178.734694][ T7257] loop3: detected capacity change from 1024 to 64 [ 178.735239][ T7237] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 178.772670][ T7237] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 178.789847][ T7262] syz-executor.3: attempt to access beyond end of device [ 178.789847][ T7262] loop3: rw=0, sector=224, nr_sectors = 2 limit=64 [ 178.818597][ T7237] BTRFS info (device loop2): using free-space-tree [ 178.828291][ T7262] syz-executor.3: attempt to access beyond end of device [ 178.828291][ T7262] loop3: rw=2051, sector=320, nr_sectors = 32 limit=64 [ 178.854267][ T7262] EXT4-fs (loop3): discard request in group:0 block:10 count:16 failed with -5 [ 178.876337][ T7262] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 178.898543][ T7262] syz-executor.3: attempt to access beyond end of device [ 178.898543][ T7262] loop3: rw=2051, sector=256, nr_sectors = 64 limit=64 [ 178.928168][ T7262] EXT4-fs (loop3): discard request in group:0 block:8 count:32 failed with -5 [ 178.941537][ T7262] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 179.045059][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.059716][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.080782][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.096662][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.111035][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.126553][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.141153][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.161556][ T5098] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 179.184497][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.214314][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.231722][ T6267] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.3: error -12 reading directory block [ 179.486824][ T7282] loop2: detected capacity change from 0 to 256 [ 179.502331][ T7282] exfat: Unknown parameter 'NFxX]Γί%Q‘jEΠ(@…»Ζ–šΆPΘξτύθΈ*γ½O eμ7z‘ς[Εli܌ΗΫΒ]@#ktTϊv2n0άiG§ν„0S™½[IDώΈfŠ‘™ώf;ΘmpΔBΊ‚sj―*iH‰QyΎ„£ΊH˜1-Ε#]}ͺ&<ʎ£Τm£zh©Κ―ȍ•ΠU"†ΟN»jr)γρϊ©V' [ 179.790740][ T3666] team0 (unregistering): Port device team_slave_1 removed [ 179.830990][ T3666] team0 (unregistering): Port device team_slave_0 removed [ 180.117228][ T5106] Bluetooth: hci0: command tx timeout [ 180.345609][ T7194] chnl_net:caif_netlink_parms(): no params data found [ 180.371512][ T7284] fuse: Unknown parameter 'fd0x0000000000000008' [ 180.545869][ T6267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.590110][ T7012] veth0_macvtap: entered promiscuous mode [ 180.606324][ T7260] kmmpd-loop3: attempt to access beyond end of device [ 180.606324][ T7260] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 180.659713][ T7260] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 180.758215][ T7012] veth1_macvtap: entered promiscuous mode [ 180.793717][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.800842][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.824375][ T7194] bridge_slave_0: entered allmulticast mode [ 180.833283][ T7194] bridge_slave_0: entered promiscuous mode [ 180.853743][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.860865][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.884356][ T7194] bridge_slave_1: entered allmulticast mode [ 180.891586][ T7194] bridge_slave_1: entered promiscuous mode [ 180.924248][ T7058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.947537][ T7058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.029968][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.053113][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.062931][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.083880][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.102862][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.123142][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.132969][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.147005][ T7289] loop2: detected capacity change from 0 to 32768 [ 181.163271][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.190955][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.224421][ T7058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.277602][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.297790][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.327145][ T7058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.424227][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.443727][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.452729][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.453772][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.472737][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.492504][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.504851][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.515079][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.525853][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.537655][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.546397][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 181.564164][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.581268][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.616173][ T7194] team0: Port device team_slave_0 added [ 181.645120][ T7012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.658619][ T7012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.668018][ T7012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.684821][ T7012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.755502][ T7194] team0: Port device team_slave_1 added [ 181.807560][ T7302] loop2: detected capacity change from 0 to 1024 [ 181.843554][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.850547][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.902123][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.928240][ T61] hfsplus: b-tree write err: -5, ino 4 [ 181.936339][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.949870][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.979735][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.172717][ T1273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.194872][ T5106] Bluetooth: hci0: command tx timeout [ 182.308785][ T7194] hsr_slave_0: entered promiscuous mode [ 182.352328][ T7194] hsr_slave_1: entered promiscuous mode [ 182.377436][ T1273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.556899][ T7058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.579626][ T1273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.706263][ T5802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.720029][ T5802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.756682][ T1273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.798199][ T7058] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.949937][ T7294] chnl_net:caif_netlink_parms(): no params data found [ 182.975333][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.990331][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.019684][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.026861][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.049428][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.056613][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.432315][ T7325] loop2: detected capacity change from 0 to 32768 [ 183.485237][ T7335] fuse: Unknown parameter 'fd0x0000000000000008' [ 183.503706][ T1273] bridge_slave_1: left allmulticast mode [ 183.522444][ T1273] bridge_slave_1: left promiscuous mode [ 183.532696][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.569078][ T1273] bridge_slave_0: left allmulticast mode [ 183.591053][ T1273] bridge_slave_0: left promiscuous mode [ 183.606150][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.634787][ T5106] Bluetooth: hci4: command tx timeout [ 183.645695][ T1273] bridge_slave_1: left allmulticast mode [ 183.651801][ T1273] bridge_slave_1: left promiscuous mode [ 183.657729][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.674253][ T1273] bridge_slave_0: left allmulticast mode [ 183.682933][ T1273] bridge_slave_0: left promiscuous mode [ 183.691761][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.208806][ T7355] loop2: detected capacity change from 0 to 1024 [ 184.265824][ T7355] syz-executor.2: attempt to access beyond end of device [ 184.265824][ T7355] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 184.288205][ T5106] Bluetooth: hci0: command tx timeout [ 184.297184][ T7355] syz-executor.2: attempt to access beyond end of device [ 184.297184][ T7355] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 184.318394][ T7355] Buffer I/O error on dev loop2, logical block 2889, async page read [ 184.333155][ T29] audit: type=1800 audit(1717018404.894:43): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 184.362706][ T7355] syz-executor.2: attempt to access beyond end of device [ 184.362706][ T7355] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 184.378265][ T7355] syz-executor.2: attempt to access beyond end of device [ 184.378265][ T7355] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 184.395367][ T7354] syz-executor.2: attempt to access beyond end of device [ 184.395367][ T7354] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 184.445885][ T3666] hfsplus: b-tree write err: -5, ino 8 [ 184.446485][ T7349] loop1: detected capacity change from 0 to 32768 [ 184.478843][ T7349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7349) [ 184.512362][ T7349] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.551209][ T7349] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 184.580271][ T7349] BTRFS info (device loop1): using free-space-tree [ 184.855361][ T7012] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.194666][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.207311][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.225737][ T1273] bond0 (unregistering): Released all slaves [ 185.352017][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.363598][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.375160][ T1273] bond0 (unregistering): Released all slaves [ 185.479292][ T7379] batadv_slave_0: entered allmulticast mode [ 185.494201][ T7380] batadv_slave_0: left allmulticast mode [ 185.589101][ T7058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.674994][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.694920][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.713662][ T7294] bridge_slave_0: entered allmulticast mode [ 185.713923][ T5106] Bluetooth: hci4: command tx timeout [ 185.731313][ T7294] bridge_slave_0: entered promiscuous mode [ 185.930494][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.964854][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.972052][ T7294] bridge_slave_1: entered allmulticast mode [ 186.014149][ T7294] bridge_slave_1: entered promiscuous mode [ 186.330351][ T7294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.541022][ T7294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.708858][ T7294] team0: Port device team_slave_0 added [ 186.780626][ T7294] team0: Port device team_slave_1 added [ 186.809709][ T7058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.904952][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.911920][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.975415][ T7294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.002012][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.019039][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.044876][ T7420] fuse: Unknown parameter 'fd0x0000000000000008' [ 187.053855][ T7294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.230691][ T7431] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 187.243402][ T7431] netlink: 399 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.271372][ T1273] hsr_slave_0: left promiscuous mode [ 187.279878][ T1273] hsr_slave_1: left promiscuous mode [ 187.302285][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.336958][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.353947][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.361367][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.381200][ T7436] loop2: detected capacity change from 0 to 1024 [ 187.395779][ T7436] EXT4-fs: Ignoring removed nobh option [ 187.401393][ T7436] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.417917][ T1273] hsr_slave_0: left promiscuous mode [ 187.431661][ T1273] hsr_slave_1: left promiscuous mode [ 187.452677][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.453961][ T7436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.479544][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.502505][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.520423][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.553570][ T7436] loop2: detected capacity change from 1024 to 64 [ 187.576542][ T7436] syz-executor.2: attempt to access beyond end of device [ 187.576542][ T7436] loop2: rw=0, sector=224, nr_sectors = 2 limit=64 [ 187.590327][ T7436] syz-executor.2: attempt to access beyond end of device [ 187.590327][ T7436] loop2: rw=2051, sector=320, nr_sectors = 32 limit=64 [ 187.606192][ T7436] EXT4-fs (loop2): discard request in group:0 block:10 count:16 failed with -5 [ 187.615433][ T7436] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: IO failure [ 187.624269][ T7436] syz-executor.2: attempt to access beyond end of device [ 187.624269][ T7436] loop2: rw=2051, sector=256, nr_sectors = 64 limit=64 [ 187.636814][ T1273] veth1_macvtap: left promiscuous mode [ 187.641890][ T7436] EXT4-fs (loop2): discard request in group:0 block:8 count:32 failed with -5 [ 187.644060][ T1273] veth0_macvtap: left promiscuous mode [ 187.661413][ T7436] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: IO failure [ 187.667461][ T1273] veth1_vlan: left promiscuous mode [ 187.680843][ T1273] veth0_vlan: left promiscuous mode [ 187.693629][ T1273] veth1_macvtap: left promiscuous mode [ 187.699129][ T1273] veth0_macvtap: left promiscuous mode [ 187.705022][ T1273] veth1_vlan: left promiscuous mode [ 187.710340][ T1273] veth0_vlan: left promiscuous mode [ 187.722523][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.737768][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.752176][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.793520][ T5106] Bluetooth: hci4: command tx timeout [ 187.793826][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.818386][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.833812][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.848421][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.865900][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.881591][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 187.895790][ T5098] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 188.445621][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 188.485057][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 189.227103][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 189.272797][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 189.687686][ T7194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.765276][ T7194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.775980][ T7194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.788516][ T7194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.834564][ T7294] hsr_slave_0: entered promiscuous mode [ 189.851807][ T7294] hsr_slave_1: entered promiscuous mode [ 189.858796][ T7294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.866810][ T7294] Cannot create hsr debugfs directory [ 189.873376][ T5106] Bluetooth: hci4: command tx timeout [ 189.889543][ T7058] veth0_vlan: entered promiscuous mode [ 189.905320][ T7058] veth1_vlan: entered promiscuous mode [ 189.984202][ T5098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.027421][ T7438] kmmpd-loop2: attempt to access beyond end of device [ 190.027421][ T7438] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 190.072952][ T7438] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 190.279650][ T7058] veth0_macvtap: entered promiscuous mode [ 190.415674][ T7058] veth1_macvtap: entered promiscuous mode [ 190.609127][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.650790][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.677893][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.700646][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.711888][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.722878][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.752736][ T7058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.907000][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.952436][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.978702][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.000263][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.012287][ T7058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.038542][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.121320][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.128287][ T7058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.140958][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.150585][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.158758][ T7058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.168841][ T7058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.179449][ T7058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.188585][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.209239][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.228008][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.320812][ T7194] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.351705][ T7476] loop1: detected capacity change from 0 to 512 [ 191.465451][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.472614][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.498705][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.505879][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.621210][ T7476] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 191.744539][ T5179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.766141][ T5179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.894294][ T1273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.011662][ T7294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.012234][ T5109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.043679][ T7294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.045065][ T5109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.127835][ T1273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.176405][ T7294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.220565][ T7294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.366572][ T7503] fuse: Unknown parameter 'fd0x0000000000000008' [ 192.387162][ T1273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.580401][ T1273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.899993][ T7194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.022668][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 193.238716][ T7545] loop0: detected capacity change from 0 to 1024 [ 193.303299][ T7545] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.323900][ T7545] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 193.327711][ T5106] Bluetooth: hci2: command tx timeout [ 193.380028][ T7294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.422840][ T25] kernel write not supported for file bpf-prog (pid: 25 comm: kworker/1:0) [ 193.432655][ T5262] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 193.451909][ T1273] bridge_slave_1: left allmulticast mode [ 193.483235][ T1273] bridge_slave_1: left promiscuous mode [ 193.489037][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.568795][ T1273] bridge_slave_0: left allmulticast mode [ 193.583228][ T1273] bridge_slave_0: left promiscuous mode [ 193.590040][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.154934][ T1273] team0: Port device bridge1 removed [ 194.477620][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.499630][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.519797][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.528006][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.565765][ T1273] bond0 (unregistering): Released all slaves [ 194.754929][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.762075][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.789893][ T7468] bridge_slave_0: entered allmulticast mode [ 194.805436][ T7468] bridge_slave_0: entered promiscuous mode [ 194.854328][ T7294] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.891309][ T1273] Κό: left promiscuous mode [ 194.938246][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.952031][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.973031][ T7468] bridge_slave_1: entered allmulticast mode [ 194.995500][ T7468] bridge_slave_1: entered promiscuous mode [ 195.064540][ T1273] IPVS: stopping backup sync thread 6481 ... [ 195.101204][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.142729][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.149911][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.197481][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.387856][ T7468] team0: Port device team_slave_0 added [ 195.399718][ T7468] team0: Port device team_slave_1 added [ 195.403878][ T5106] Bluetooth: hci2: command tx timeout [ 195.459947][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.467207][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.595912][ T7194] veth0_vlan: entered promiscuous mode [ 195.607256][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.614497][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.642992][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.658390][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.666326][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.692390][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.740934][ T1273] hsr_slave_0: left promiscuous mode [ 195.746788][ T1273] hsr_slave_1: left promiscuous mode [ 195.752688][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.761778][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.772869][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.780663][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.803493][ T1273] veth1_macvtap: left promiscuous mode [ 195.809238][ T1273] veth0_macvtap: left promiscuous mode [ 195.815736][ T1273] veth1_vlan: left promiscuous mode [ 195.821052][ T1273] veth0_vlan: left promiscuous mode [ 196.268148][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 196.312537][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 196.661022][ T7598] loop1: detected capacity change from 0 to 1024 [ 196.685315][ T7598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.759759][ T7598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.936837][ T7012] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.937330][ T7194] veth1_vlan: entered promiscuous mode [ 197.098843][ T7468] hsr_slave_0: entered promiscuous mode [ 197.114973][ T7468] hsr_slave_1: entered promiscuous mode [ 197.122459][ T7468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.143195][ T7468] Cannot create hsr debugfs directory [ 197.279454][ T7604] loop1: detected capacity change from 0 to 4096 [ 197.340767][ T7604] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 197.455120][ T7604] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 197.477758][ T5106] Bluetooth: hci2: command tx timeout [ 197.549209][ T7194] veth0_macvtap: entered promiscuous mode [ 197.599664][ T7194] veth1_macvtap: entered promiscuous mode [ 197.781264][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.792889][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.811616][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.838586][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.848542][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.863223][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.878271][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.939699][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.953005][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.965501][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.982275][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.998700][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.014624][ T7194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.024300][ T7194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.033003][ T7194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.042783][ T7194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.105745][ T7294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.229530][ T1273] bridge_slave_1: left allmulticast mode [ 198.240628][ T1273] bridge_slave_1: left promiscuous mode [ 198.255002][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.284739][ T1273] bridge_slave_0: left allmulticast mode [ 198.303348][ T1273] bridge_slave_0: left promiscuous mode [ 198.309102][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.337057][ T7633] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 199.042118][ T7656] loop1: detected capacity change from 0 to 764 [ 199.108751][ T7656] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 199.140547][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.163570][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.189247][ T1273] bond0 (unregistering): Released all slaves [ 199.208670][ T7656] Cannot find set identified by id 0 to match [ 199.380892][ T7294] veth0_vlan: entered promiscuous mode [ 199.553217][ T5106] Bluetooth: hci2: command tx timeout [ 199.607385][ T7294] veth1_vlan: entered promiscuous mode [ 199.690040][ T7662] loop1: detected capacity change from 0 to 1024 [ 199.717116][ T7662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.736090][ T5802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.754431][ T5802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.789296][ T7662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.837207][ T1273] hsr_slave_0: left promiscuous mode [ 199.847477][ T1273] hsr_slave_1: left promiscuous mode [ 199.860901][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.880737][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.890415][ T7012] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.902126][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.912253][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.956292][ T1273] veth1_macvtap: left promiscuous mode [ 199.962984][ T1273] veth0_macvtap: left promiscuous mode [ 199.973667][ T1273] veth1_vlan: left promiscuous mode [ 199.979004][ T1273] veth0_vlan: left promiscuous mode [ 200.120617][ T7674] loop1: detected capacity change from 0 to 4096 [ 200.149527][ T7674] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 200.235543][ T7674] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 200.546821][ T7685] loop1: detected capacity change from 0 to 1024 [ 200.701597][ T61] hfsplus: b-tree write err: -5, ino 4 [ 200.810448][ T7693] loop1: detected capacity change from 0 to 8 [ 200.859754][ T7693] syz-executor.1: attempt to access beyond end of device [ 200.859754][ T7693] loop1: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 200.881737][ T7693] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 200.891363][ T7693] unable to read xattr id index table [ 200.986345][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 201.074880][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 201.672186][ T7704] tap0: tun_chr_ioctl cmd 1074025680 [ 201.703393][ T7468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.718761][ T7468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.742875][ T7468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.761255][ T7468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.772622][ T5104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.789182][ T7294] veth0_macvtap: entered promiscuous mode [ 201.795388][ T5104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.837581][ T7294] veth1_macvtap: entered promiscuous mode [ 201.899084][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.924882][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.939879][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.950683][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.966737][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.977993][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.997735][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.014795][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.030800][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.043986][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.058418][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.068742][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.079701][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.091341][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.112750][ T7294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.121668][ T7294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.130635][ T7294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.139538][ T7294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.357334][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.372824][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.393513][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.430748][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.466573][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.473761][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.488457][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.495644][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.542634][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.559410][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.790884][ T7729] loop3: detected capacity change from 0 to 1024 [ 202.802715][ T7726] loop1: detected capacity change from 0 to 764 [ 202.940685][ T7726] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 203.056023][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.266107][ T7468] veth0_vlan: entered promiscuous mode [ 203.844077][ T7468] veth1_vlan: entered promiscuous mode [ 204.186734][ T7468] veth0_macvtap: entered promiscuous mode [ 204.216490][ T7468] veth1_macvtap: entered promiscuous mode [ 204.272460][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.306141][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.321006][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.338189][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.350355][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.383312][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.403154][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.426987][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.469351][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.544715][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.598252][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.613197][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.653552][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.253227][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.310295][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.366747][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.390004][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.405956][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.417275][ T7468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.428219][ T7468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.437758][ T7468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.448289][ T7468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.692285][ T5802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.708704][ T5802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.788715][ T7755] tap0: tun_chr_ioctl cmd 1074025680 [ 205.797004][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.812582][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.223271][ T7767] loop1: detected capacity change from 0 to 4096 [ 206.231962][ T7767] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 206.291544][ T7767] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 206.316635][ T7767] ntfs3: loop1: Failed to load $Extend (-22). [ 206.322969][ T7767] ntfs3: loop1: Failed to initialize $Extend. [ 208.009514][ T7769] loop3: detected capacity change from 0 to 32768 [ 208.032283][ T7769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7769) [ 208.067344][ T7769] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.114662][ T7769] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 208.148243][ T7769] BTRFS info (device loop3): using free-space-tree [ 208.398994][ T7769] BTRFS error (device loop3): unable to set label with more than 255 bytes [ 208.541756][ T7294] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.599460][ T7819] loop2: detected capacity change from 0 to 4096 [ 208.659065][ T7819] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 208.703256][ T7819] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 208.747074][ T7819] ntfs3: loop2: Failed to load $Extend (-22). [ 208.782847][ T7819] ntfs3: loop2: Failed to initialize $Extend. [ 209.605183][ T7832] loop3: detected capacity change from 0 to 32768 [ 209.613014][ T7832] XFS: attr2 mount option is deprecated. [ 209.632668][ T7832] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 209.657501][ T7832] XFS (loop3): Quotacheck needed: Please wait. [ 209.699956][ T7832] XFS (loop3): Quotacheck: Done. [ 209.723431][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.758542][ T7294] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.924883][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.940567][ T7855] loop3: detected capacity change from 0 to 128 [ 209.948308][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.961847][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 209.997140][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.028318][ T25] usb 3-1: config 0 descriptor?? [ 210.048460][ T7855] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 547) [ 210.074640][ T7855] FAT-fs (loop3): Filesystem has been set read-only [ 210.096099][ T7855] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 547) [ 210.106686][ T7855] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 547) [ 210.536895][ T25] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 210.583220][ T25] logitech-djreceiver 0003:046D:C71B.0001: unknown main item tag 0x0 [ 210.731426][ T7876] loop1: detected capacity change from 0 to 256 [ 210.757885][ T5109] usb 3-1: USB disconnect, device number 6 [ 210.822540][ T7876] FAT-fs (loop1): Directory bread(block 64) failed [ 210.845767][ T7876] FAT-fs (loop1): Directory bread(block 65) failed [ 210.854454][ T7876] FAT-fs (loop1): Directory bread(block 66) failed [ 210.861188][ T7876] FAT-fs (loop1): Directory bread(block 67) failed [ 210.873313][ T7876] FAT-fs (loop1): Directory bread(block 68) failed [ 210.881330][ T7876] FAT-fs (loop1): Directory bread(block 69) failed [ 210.892913][ T7876] FAT-fs (loop1): Directory bread(block 70) failed [ 210.900192][ T7876] FAT-fs (loop1): Directory bread(block 71) failed [ 210.911973][ T7876] FAT-fs (loop1): Directory bread(block 72) failed [ 210.930564][ T7876] FAT-fs (loop1): Directory bread(block 73) failed [ 211.329986][ T7870] loop4: detected capacity change from 0 to 40427 [ 211.370239][ T7870] F2FS-fs (loop4): invalid crc value [ 211.401688][ T7870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.589833][ T7870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 211.629300][ T29] audit: type=1800 audit(1717018432.174:44): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 211.636477][ T7870] syz-executor.4: attempt to access beyond end of device [ 211.636477][ T7870] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.820175][ T7194] syz-executor.4: attempt to access beyond end of device [ 211.820175][ T7194] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 211.842781][ T7194] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 211.894977][ T7907] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 212.077252][ T7909] loop2: detected capacity change from 0 to 512 [ 212.144335][ T5191] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 212.324252][ T7914] loop2: detected capacity change from 0 to 256 [ 212.353569][ T7914] FAT-fs (loop2): Directory bread(block 64) failed [ 212.360337][ T7914] FAT-fs (loop2): Directory bread(block 65) failed [ 212.367058][ T7914] FAT-fs (loop2): Directory bread(block 66) failed [ 212.373707][ T7914] FAT-fs (loop2): Directory bread(block 67) failed [ 212.380314][ T7914] FAT-fs (loop2): Directory bread(block 68) failed [ 212.386897][ T7914] FAT-fs (loop2): Directory bread(block 69) failed [ 212.393553][ T7914] FAT-fs (loop2): Directory bread(block 70) failed [ 212.400096][ T7914] FAT-fs (loop2): Directory bread(block 71) failed [ 212.406896][ T7914] FAT-fs (loop2): Directory bread(block 72) failed [ 212.413497][ T7914] FAT-fs (loop2): Directory bread(block 73) failed [ 212.467091][ T7914] syz-executor.2: attempt to access beyond end of device [ 212.467091][ T7914] loop2: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 212.483914][ T7914] syz-executor.2: attempt to access beyond end of device [ 212.483914][ T7914] loop2: rw=2049, sector=1288, nr_sectors = 88 limit=256 [ 213.226736][ T7919] syz-executor.2: attempt to access beyond end of device [ 213.226736][ T7919] loop2: rw=2049, sector=1384, nr_sectors = 448 limit=256 [ 213.265926][ T7919] syz-executor.2: attempt to access beyond end of device [ 213.265926][ T7919] loop2: rw=2049, sector=1864, nr_sectors = 4000 limit=256 [ 213.732168][ T5802] kworker/u8:10: attempt to access beyond end of device [ 213.732168][ T5802] loop2: rw=1, sector=5864, nr_sectors = 4656 limit=256 [ 213.817821][ T5802] kworker/u8:10: attempt to access beyond end of device [ 213.817821][ T5802] loop2: rw=1, sector=10520, nr_sectors = 1544 limit=256 [ 213.919773][ T7911] loop3: detected capacity change from 0 to 32768 [ 213.958961][ T7911] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7911) [ 214.022287][ T7911] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 214.052485][ T7911] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 214.093738][ T7911] BTRFS info (device loop3): using free-space-tree [ 214.100390][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.244436][ T5205] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 214.288332][ T7923] loop1: detected capacity change from 0 to 2048 [ 214.327431][ T7294] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 214.346206][ T7944] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.431732][ T7944] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 214.444548][ T7944] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 214.465007][ T7944] Remounting filesystem read-only [ 214.486507][ T5205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.504664][ T7012] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 214.519503][ T7012] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 214.535025][ T5205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.545670][ T7012] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.558586][ T5205] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 214.574191][ T7012] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.584760][ T5205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.597512][ T7012] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.611548][ T7012] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 214.620213][ T5205] usb 5-1: config 0 descriptor?? [ 214.652323][ T7012] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 214.667449][ T7012] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.683781][ T7012] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.692692][ T7012] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.815192][ T7947] loop3: detected capacity change from 0 to 1024 [ 214.868762][ T1273] hfsplus: b-tree write err: -5, ino 4 [ 214.899306][ T7947] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 215.092272][ T5205] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 215.100749][ T5205] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0x0 [ 216.060302][ T5109] usb 5-1: USB disconnect, device number 4 [ 216.248131][ T7945] loop2: detected capacity change from 0 to 32768 [ 216.460147][ T7945] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names [ 216.487414][ T7945] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 216.528088][ T7945] bcachefs (loop2): alloc_read... done [ 216.534178][ T7945] bcachefs (loop2): stripes_read... done [ 216.609387][ T7975] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 216.618781][ T7975] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 216.630502][ T7975] overlayfs: missing 'lowerdir' [ 216.672819][ T7945] bcachefs (loop2): snapshots_read... done [ 216.936023][ T7945] bcachefs (loop2): journal_replay... done [ 217.020391][ T7945] bcachefs (loop2): resume_logged_ops... done [ 217.182894][ T7945] bcachefs (loop2): going read-write [ 217.358479][ T7945] bcachefs (loop2): bch2_rebalance_start(): error creating rebalance thread EINTR [ 217.368082][ T7945] bcachefs (loop2): error starting rebalance thread [ 217.378395][ T7945] bcachefs (loop2): going read-only [ 217.420885][ T7945] bcachefs (loop2): finished waiting for writes to stop [ 217.443191][ T7945] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 217.481309][ T7945] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 217.507628][ T7945] bcachefs (loop2): shutdown complete, journal seq 11 [ 217.538560][ T7945] bcachefs (loop2): marking filesystem clean [ 217.572396][ T7945] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 217.601889][ T7945] bcachefs (loop2): shutting down [ 217.602189][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.654260][ T7945] bcachefs (loop2): shutdown complete [ 217.726477][ T7989] loop3: detected capacity change from 0 to 2048 [ 217.799192][ T7990] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.923180][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 217.933547][ T7990] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 217.958501][ T7990] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 217.975032][ T7990] Remounting filesystem read-only [ 217.982024][ T7294] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 217.996859][ T7294] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 218.005613][ T7294] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.031025][ T7294] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.057334][ T7294] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.067976][ T7294] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 218.095894][ T7294] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 218.106007][ T7294] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.115130][ T7294] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.124225][ T7294] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.134479][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 218.172989][ T45] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 218.182235][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.203662][ T45] usb 2-1: Product: syz [ 218.208823][ T45] usb 2-1: Manufacturer: syz [ 218.213620][ T45] usb 2-1: SerialNumber: syz [ 218.220960][ T45] usb 2-1: config 0 descriptor?? [ 218.510785][ T45] kaweth 2-1:0.0: Firmware present in device. [ 218.708873][ T7994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.755988][ T45] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 218.793295][ T7986] loop4: detected capacity change from 0 to 32768 [ 218.896636][ T45] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 219.167677][ T45] usb 2-1: USB disconnect, device number 5 [ 219.247120][ T7986] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 219.607268][ T7986] XFS (loop4): Ending clean mount [ 219.660016][ T7986] XFS (loop4): Quotacheck needed: Please wait. [ 220.428864][ T7986] XFS (loop4): Quotacheck: Done. [ 220.536439][ T8021] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 220.546926][ T8021] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 220.558591][ T8021] overlayfs: missing 'lowerdir' [ 221.380452][ T7194] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 221.448680][ T8022] loop1: detected capacity change from 0 to 8192 [ 221.495505][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.533236][ T8022] loop1: AHDI p1 p2 p3 [ 221.545727][ T8022] loop1: p1 start 4278255615 is beyond EOD, truncated [ 221.585609][ T8022] loop1: p2 size 4164158976 extends beyond EOD, truncated [ 221.736268][ T8030] loop2: detected capacity change from 0 to 2048 [ 221.813588][ T8035] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.934256][ T5262] udevd[5262]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 221.934499][ T5191] udevd[5191]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 222.093581][ T8037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.242071][ T8035] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 222.431209][ T8035] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 222.716597][ T8035] Remounting filesystem read-only [ 222.780458][ T7468] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 222.823257][ T7468] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 222.842606][ T7468] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 222.901645][ T7468] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 222.911389][ T8043] loop3: detected capacity change from 0 to 512 [ 222.935600][ T7468] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 222.945061][ T8043] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.981902][ T7468] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 222.989384][ T7468] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 223.003480][ T7468] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.014405][ T7468] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.023596][ T7468] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.285011][ T8047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.321850][ T8043] EXT4-fs (loop3): 1 orphan inode deleted [ 223.442901][ T8043] EXT4-fs (loop3): 1 truncate cleaned up [ 223.804779][ T8043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.955238][ T8043] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 224.001397][ T8054] xt_TCPMSS: Only works on TCP SYN packets [ 224.149139][ T7294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.255575][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.421907][ T8071] loop4: detected capacity change from 0 to 2048 [ 224.506008][ T8079] loop3: detected capacity change from 0 to 1024 [ 224.508319][ T8081] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.529120][ T8079] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.533658][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.554785][ T8079] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 224.567277][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.578209][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.586459][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.604767][ T5112] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.612927][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.641574][ T5191] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 224.762588][ T8081] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 224.781151][ T8081] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 224.848564][ T8081] Remounting filesystem read-only [ 224.881603][ T7194] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 224.898496][ T7194] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 224.909765][ T7194] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.919567][ T7194] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.936982][ T7194] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.977978][ T7194] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 224.996307][ T7194] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 225.005685][ T8094] loop2: detected capacity change from 0 to 512 [ 225.008934][ T7194] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.021296][ T8094] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.039123][ T7194] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.057335][ T8094] EXT4-fs (loop2): 1 orphan inode deleted [ 225.060899][ T7194] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.068941][ T8094] EXT4-fs (loop2): 1 truncate cleaned up [ 225.095096][ T8094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.172148][ T8080] chnl_net:caif_netlink_parms(): no params data found [ 225.222014][ T7468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.367835][ T8108] loop2: detected capacity change from 0 to 256 [ 225.375971][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.383252][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.390903][ T8080] bridge_slave_0: entered allmulticast mode [ 225.404989][ T8080] bridge_slave_0: entered promiscuous mode [ 225.431284][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.469062][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.485801][ T29] audit: type=1107 audit(1717018446.044:45): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 225.486878][ T8080] bridge_slave_1: entered allmulticast mode [ 225.511351][ T8080] bridge_slave_1: entered promiscuous mode [ 225.564319][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.577748][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.604591][ T8113] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 225.675595][ T8080] team0: Port device team_slave_0 added [ 225.688609][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.698894][ T8080] team0: Port device team_slave_1 added [ 225.789738][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.790687][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.818013][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.897182][ T8122] [ 225.899540][ T8122] ====================================================== [ 225.906557][ T8122] WARNING: possible circular locking dependency detected [ 225.913560][ T8122] 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 Not tainted [ 225.920648][ T8122] ------------------------------------------------------ [ 225.927648][ T8122] syz-executor.4/8122 is trying to acquire lock: [ 225.933956][ T8122] ffff88801504e318 (&n->list_lock){-.-.}-{2:2}, at: get_partial_node+0x36/0x280 [ 225.943000][ T8122] [ 225.943000][ T8122] but task is already holding lock: [ 225.950347][ T8122] ffff8880554591f8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 225.959208][ T8122] [ 225.959208][ T8122] which lock already depends on the new lock. [ 225.959208][ T8122] [ 225.969594][ T8122] [ 225.969594][ T8122] the existing dependency chain (in reverse order) is: [ 225.978596][ T8122] [ 225.978596][ T8122] -> #1 (&trie->lock){..-.}-{2:2}: [ 225.985883][ T8122] lock_acquire+0x1ed/0x550 [ 225.990903][ T8122] _raw_spin_lock_irqsave+0xd5/0x120 [ 225.996708][ T8122] trie_delete_elem+0x96/0x6a0 [ 226.001977][ T8122] 0xffffffffa0001fda [ 226.006469][ T8122] bpf_trace_run2+0x2ec/0x540 [ 226.011657][ T8122] trace_contention_end+0x114/0x140 [ 226.017365][ T8122] __pv_queued_spin_lock_slowpath+0xb81/0xdc0 [ 226.023942][ T8122] queued_spin_lock_slowpath+0x42/0x50 [ 226.029911][ T8122] do_raw_spin_lock+0x272/0x370 [ 226.035269][ T8122] _raw_spin_lock_irqsave+0xe1/0x120 [ 226.041059][ T8122] __slab_free+0xec/0x3d0 [ 226.045910][ T8122] qlist_free_all+0x9e/0x140 [ 226.051008][ T8122] kasan_quarantine_reduce+0x14f/0x170 [ 226.056981][ T8122] __kasan_slab_alloc+0x23/0x80 [ 226.062344][ T8122] __kmalloc_noprof+0x1a3/0x400 [ 226.067705][ T8122] tomoyo_realpath_from_path+0xcf/0x5e0 [ 226.073777][ T8122] tomoyo_path_number_perm+0x23a/0x880 [ 226.079753][ T8122] security_file_ioctl+0x75/0xb0 [ 226.085207][ T8122] __se_sys_ioctl+0x47/0x170 [ 226.090314][ T8122] do_syscall_64+0xf3/0x230 [ 226.095327][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.101731][ T8122] [ 226.101731][ T8122] -> #0 (&n->list_lock){-.-.}-{2:2}: [ 226.109194][ T8122] validate_chain+0x18e0/0x5900 [ 226.114556][ T8122] __lock_acquire+0x1346/0x1fd0 [ 226.119914][ T8122] lock_acquire+0x1ed/0x550 [ 226.124925][ T8122] _raw_spin_lock_irqsave+0xd5/0x120 [ 226.130717][ T8122] get_partial_node+0x36/0x280 [ 226.136003][ T8122] ___slab_alloc+0xc17/0x14b0 [ 226.141199][ T8122] __slab_alloc+0x58/0xa0 [ 226.146038][ T8122] __kmalloc_node_noprof+0x286/0x440 [ 226.151831][ T8122] bpf_map_kmalloc_node+0xd3/0x1c0 [ 226.157452][ T8122] trie_update_elem+0x1cd/0xc00 [ 226.162813][ T8122] bpf_map_update_value+0x4d3/0x540 [ 226.168520][ T8122] generic_map_update_batch+0x60d/0x900 [ 226.174579][ T8122] bpf_map_do_batch+0x3e0/0x690 [ 226.179938][ T8122] __sys_bpf+0x377/0x810 [ 226.184698][ T8122] __x64_sys_bpf+0x7c/0x90 [ 226.189627][ T8122] do_syscall_64+0xf3/0x230 [ 226.194639][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.201043][ T8122] [ 226.201043][ T8122] other info that might help us debug this: [ 226.201043][ T8122] [ 226.211254][ T8122] Possible unsafe locking scenario: [ 226.211254][ T8122] [ 226.218686][ T8122] CPU0 CPU1 [ 226.224036][ T8122] ---- ---- [ 226.229383][ T8122] lock(&trie->lock); [ 226.233441][ T8122] lock(&n->list_lock); [ 226.240194][ T8122] lock(&trie->lock); [ 226.246771][ T8122] lock(&n->list_lock); [ 226.251001][ T8122] [ 226.251001][ T8122] *** DEADLOCK *** [ 226.251001][ T8122] [ 226.259128][ T8122] 2 locks held by syz-executor.4/8122: [ 226.264696][ T8122] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 226.274616][ T8122] #1: ffff8880554591f8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 226.283924][ T8122] [ 226.283924][ T8122] stack backtrace: [ 226.289803][ T8122] CPU: 1 PID: 8122 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 226.300199][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 226.310244][ T8122] Call Trace: [ 226.313515][ T8122] [ 226.316435][ T8122] dump_stack_lvl+0x241/0x360 [ 226.321106][ T8122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.326299][ T8122] ? print_circular_bug+0x130/0x1a0 [ 226.331486][ T8122] check_noncircular+0x36a/0x4a0 [ 226.336412][ T8122] ? unwind_get_return_address+0x91/0xc0 [ 226.342038][ T8122] ? __pfx_check_noncircular+0x10/0x10 [ 226.347487][ T8122] ? lockdep_lock+0x123/0x2b0 [ 226.352154][ T8122] ? stack_trace_save+0x118/0x1d0 [ 226.357170][ T8122] validate_chain+0x18e0/0x5900 [ 226.362011][ T8122] ? mark_lock+0x9a/0x350 [ 226.366336][ T8122] ? __pfx_validate_chain+0x10/0x10 [ 226.371528][ T8122] ? validate_chain+0x11e/0x5900 [ 226.376462][ T8122] ? validate_chain+0x11e/0x5900 [ 226.381391][ T8122] ? is_bpf_text_address+0x26/0x2a0 [ 226.386582][ T8122] ? validate_chain+0x11e/0x5900 [ 226.391509][ T8122] ? __pfx_validate_chain+0x10/0x10 [ 226.396697][ T8122] ? 0xffffffffa0000960 [ 226.400840][ T8122] ? mark_lock+0x9a/0x350 [ 226.405161][ T8122] __lock_acquire+0x1346/0x1fd0 [ 226.410005][ T8122] lock_acquire+0x1ed/0x550 [ 226.414493][ T8122] ? get_partial_node+0x36/0x280 [ 226.419424][ T8122] ? __pfx_lock_acquire+0x10/0x10 [ 226.424439][ T8122] ? ___slab_alloc+0x265/0x14b0 [ 226.429281][ T8122] _raw_spin_lock_irqsave+0xd5/0x120 [ 226.434556][ T8122] ? get_partial_node+0x36/0x280 [ 226.439487][ T8122] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 226.445457][ T8122] ? ___slab_alloc+0x265/0x14b0 [ 226.450302][ T8122] ? __pfx_lock_release+0x10/0x10 [ 226.455316][ T8122] get_partial_node+0x36/0x280 [ 226.461225][ T8122] ___slab_alloc+0xc17/0x14b0 [ 226.465902][ T8122] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 226.471177][ T8122] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 226.476450][ T8122] __slab_alloc+0x58/0xa0 [ 226.480769][ T8122] __kmalloc_node_noprof+0x286/0x440 [ 226.486047][ T8122] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 226.491323][ T8122] bpf_map_kmalloc_node+0xd3/0x1c0 [ 226.496429][ T8122] trie_update_elem+0x1cd/0xc00 [ 226.501276][ T8122] ? __pfx_lock_release+0x10/0x10 [ 226.506293][ T8122] bpf_map_update_value+0x4d3/0x540 [ 226.511485][ T8122] generic_map_update_batch+0x60d/0x900 [ 226.517027][ T8122] ? __pfx_generic_map_update_batch+0x10/0x10 [ 226.523091][ T8122] ? __pfx_generic_map_update_batch+0x10/0x10 [ 226.529155][ T8122] bpf_map_do_batch+0x3e0/0x690 [ 226.534086][ T8122] __sys_bpf+0x377/0x810 [ 226.538323][ T8122] ? __pfx___sys_bpf+0x10/0x10 [ 226.543081][ T8122] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 226.549144][ T8122] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.555111][ T8122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.561430][ T8122] ? do_syscall_64+0x100/0x230 [ 226.566181][ T8122] __x64_sys_bpf+0x7c/0x90 [ 226.570588][ T8122] do_syscall_64+0xf3/0x230 [ 226.575086][ T8122] ? clear_bhb_loop+0x35/0x90 [ 226.579753][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.585641][ T8122] RIP: 0033:0x7f2e2ec7cee9 [ 226.590043][ T8122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 226.609634][ T8122] RSP: 002b:00007f2e2f92c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.618034][ T8122] RAX: ffffffffffffffda RBX: 00007f2e2edb3fa0 RCX: 00007f2e2ec7cee9 [ 226.625990][ T8122] RDX: 0000000000000038 RSI: 0000000020000680 RDI: 000000000000001a [ 226.633943][ T8122] RBP: 00007f2e2ecc947f R08: 0000000000000000 R09: 0000000000000000 [ 226.641897][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2024/05/29 21:34:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 226.649849][ T8122] R13: 000000000000000b R14: 00007f2e2edb3fa0 R15: 00007ffd907be948 [ 226.657813][ T8122] [ 226.665962][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.698295][ T5112] Bluetooth: hci5: command tx timeout [ 226.713393][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.720341][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.747402][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active