last executing test programs: 3.674731045s ago: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0xfffffffffffffd49, &(0x7f0000000340)=""/68}, {0x0, 0x8, &(0x7f0000000240)}]}) 3.463354808s ago: executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x10) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000007c0)) read$dsp(r0, &(0x7f00000000c0)=""/171, 0xab) 3.174146213s ago: executing program 0: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000040)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 2.639209837s ago: executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000400)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000840)=ANY=[]) 2.536964793s ago: executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x80284504, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 2.475045203s ago: executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0xfffffffffffffd49, &(0x7f0000000340)=""/68}, {0x0, 0x8, &(0x7f0000000240)}]}) 2.327220206s ago: executing program 1: syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800080, &(0x7f0000000900)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x400403) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 1.982567639s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x60000000, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r2 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r2, &(0x7f0000000000)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000380), 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2, 0x17, 0x8, 0x9, 0x10, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@remote, 0x27, 0xc, 0x10}, @sadb_x_policy={0x8, 0x12, 0x0, 0x7753c38f7dc1ba41, 0x0, 0x0, 0x7, {0x6, 0x3c, 0x9, 0x20, 0x0, 0x9, 0x0, @in6=@loopback, @in=@private=0xa010101}}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}]}, 0x80}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.873073977s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10, &(0x7f0000000c80), 0xff, 0x249, &(0x7f0000000880)="$eJzs3T9oM2UcB/DvXRJr3jfIqy6C+AdERAvldRNcXifhBSlFRFChIuKitEJtcWudXBx0VunkUsTN6ihdiosiOFXtUBdBi4PFQYdIcqnUNuKf1Jz0Ph+43F1yz/2e4+77JBkuCdBYV5JcS9JKMpukk6Q4ucHd1XRltLrZ3V1M+v3HfyyG21XrleN2l5NsJHkoyU5Z5MV2srb99MHPe4/e98Zq5973tp/qTvUgRw4P9h87enf+9Q+vP7j2+Zffzxe5lt4fjuv8FWOeaxfJLf9Fsf+Jol13D/g7Fl794KtB7m9Ncs8w/52UqU7emys37HTywDt/1vatH764fZp9Bc5fv98ZvAdu9IHGKZP0UpRzSarlspybqz7Df926VL60vPLK7AvLq0vP1z1SAedl+L3345mPLp/K/3etKv/AxdVL9p9Y2PpmsHzUqrs3wFTcUc0G+Z99dv3+yD80jvxDc8k/NJf8Q3PJPzTSTOQfGk3+obnkH5pL/qG55B+a62T+AYBm6c+cuSW4GP4sAHDh1T3+AAAAAAAAAAAAAAAAAAAAZ212dxePp2nV/PTt5PCRJO1x9VvD/yNObhw+XvqpGGz2u6JqNpFn7ppwBxN6v+a7r2/6tqbC3Wr22Z011R9ZX0o2Xktytd0+e/0Vo+vv37v5L17vPDdhgX+oOLX+8JPTrX/ar1v11r++l3wyGH+ujht/ytw2nI8ff3qD8zdh/Zd/mXAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATM1vAQAA//8mi2g4") openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000180)='mnt/encrypted_dir\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./bus\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 1.823226755s ago: executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000400)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000840)=ANY=[]) 1.639873974s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 1.363112097s ago: executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x38, r0, 0x801, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x38}}, 0x0) 1.34145s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1c00010, &(0x7f0000000a40)={[{@nodelalloc}, {@grpjquota}, {@acl}, {@noblock_validity}, {@noload}, {@norecovery}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x2}, 0x32}]}, 0x1b, 0x4e4, &(0x7f0000000540)="$eJzs3V1rW+cdAPD/Obby6swO20UWWBaWDDtskex4ScwusmyM7SqwLbte5tmyMZYtY8lJbMLmsA8wGGMbDAa96k2hH6BQ8hFKIdDel7a0lDZpL3LRRkVveXEkvxDZCtbvB8fnec6L/89fQkd6znk4J4CedToizkTE40qlci4iBhvL08Z0tVpZr2/38MGdqeqURKVy/fMkIqkvq24y8sz/PFrfJQ5FxB9+G/GX5MW4pdW1+clCIb/cqOfKC0u50ura+bmFydn8bH5xfHzs0sTliYsTox3JcyAirvz643//4/XfXHn7p7c+uPHpyF+TxvKIp3l0Wj31TO21aOqPiOXdCNYFfY18Mt1uCAAA29L8nf+jiDgXg9FX+zUHAAAA7CeVXwzE10lEBQAAANi30toY2CTNNsYBDESaZrP1MbzfiyNpoVgq/2SmuLI4XR8rOxSZdGaukB9tjBUeikxSrY/Vyk/rFzbUxyPieET8a/BwrZ6dKhamu33yAwAAAHrE0Q39/68G6/1/AAAAYJ8Z6nYDAAAAgF2n/w8AAAD7n/4/AAAA7Gu/u3atOlWaz7+evrm6Ml+8eX46X5rPLqxMZaeKy0vZ2WJxtnbPvoWt/l+hWFz6WSyu3M6V86VyrrS6dmOhuLJYvjH33COwAQAAgD10/If33k8iYv3nh2tT1YFuNwrYE/072fij3WsHsPf6ut0AoGt29P0P7CuZbjcA6LokIv6/yfq2g3fe2Z32AAAAnTf8/dbX/5Mtzw2sp3vURGCXOP8Hvcv1f+hdrv9D78pEX+jIQ29Ltlj/8tf/K5UdNQgAAOi4gdqUpNmI2nmAgUjTbDbiWO2xAJlkZq6QH42I70TEe4OZg9X6WG3PZMs+AwAAAAAAAAAAAAAAAAAAAAAAAABQV6kkUQEAAAD2tYj0k6Tx/K/hwbMDG88PHEgeDdbmEXHrf9f/c3uyXF4eqy7/4sny8n8byy904wwGAAAAsFGzn97sxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJz18cGeqOe1l3M9+GRFDreL3x6Ha/FBkIuLIl0n0P7NfEhF9HYi/fjcifvWnFvGTarNiqNGKVvEPdyr+iVb5bx4/jYijHYgPvexe9fhztdXnL43TtfnGz9/BJ/v2dyB+++Nf+uT419fm+HNsmzFO3n8z1zb+3YiT/a2PP834SZv4Z7YZ/89/XFtrt67yWsRwy++f5LlYufLCUq60unZ+bmFyNj+bXxwfH7s0cXni4sRobmaukG/8bRnjnz946/Fm+R9pE39oi/zPbjP/b+7ffvDdejHTKv7Imdbv/4k28dPGd9+PG+Xq+uFmeb1eftapN949tVn+023y3+r9H9lm/ud+//cPt7kpALAHSqtr85OFQn65pwsv9WpUfxa9Elko7LTwt1ejGa9kofmZeNS1YxMAANBZL/aBAQAAAAAAAAAAAAAAAAAAgL3WmXuGNe+Jvfnd9ZrW67MX7oUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBN3wYAAP//DIvS1w==") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.254861764s ago: executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x80284504, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.190615874s ago: executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xff02, 0x0, 0x0, 0x8007, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) 1.115157976s ago: executing program 2: syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800080, &(0x7f0000000900)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x400403) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 735.467005ms ago: executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x10) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000007c0)) read$dsp(r0, &(0x7f00000000c0)=""/171, 0xab) 693.337102ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000088a800008100000008004500002800000000ff06"], 0x0) 457.443999ms ago: executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5428, 0x0) 408.086926ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 382.42909ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) 295.014154ms ago: executing program 1: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@fmask}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fmask={'fmask', 0x3d, 0x3}}, {}, {@utf8}, {@umask={'umask', 0x3d, 0x401}}, {@fmask={'fmask', 0x3d, 0x8}}]}, 0x9, 0x1505, &(0x7f0000000180)="$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") mount$tmpfs(0x0, &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 243.542152ms ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x14, r1, 0x1}, 0x14}}, 0x0) 198.7888ms ago: executing program 4: unshare(0x20000400) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4}) 187.635021ms ago: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x38, r0, 0x801, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x38}}, 0x0) 145.210468ms ago: executing program 0: socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/247, 0xf7) 128.16701ms ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}}], 0x1, 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/172, 0xac}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) close(r1) fcntl$dupfd(r2, 0x0, r2) 82.469668ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 24.580447ms ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x3}) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001eeffffffff0000000800000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2024/06/05 17:39:35 fuzzer started 2024/06/05 17:39:35 dialing manager at 10.128.0.163:30016 [ 44.290747][ T3506] cgroup: Unknown subsys name 'net' [ 44.461632][ T3506] cgroup: Unknown subsys name 'rlimit' 2024/06/05 17:39:36 starting 5 executor processes [ 45.406669][ T3509] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 46.586165][ T3532] chnl_net:caif_netlink_parms(): no params data found [ 46.598922][ T3533] chnl_net:caif_netlink_parms(): no params data found [ 46.609571][ T3529] chnl_net:caif_netlink_parms(): no params data found [ 46.627064][ T3524] chnl_net:caif_netlink_parms(): no params data found [ 46.673282][ T3523] chnl_net:caif_netlink_parms(): no params data found [ 46.786330][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.794921][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.803623][ T3533] device bridge_slave_0 entered promiscuous mode [ 46.827065][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.834465][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.842800][ T3529] device bridge_slave_0 entered promiscuous mode [ 46.849904][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.857042][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.865360][ T3533] device bridge_slave_1 entered promiscuous mode [ 46.887797][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.895098][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.903099][ T3529] device bridge_slave_1 entered promiscuous mode [ 46.918696][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.925837][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.934469][ T3532] device bridge_slave_0 entered promiscuous mode [ 46.970848][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.978024][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.986389][ T3532] device bridge_slave_1 entered promiscuous mode [ 47.000960][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.008254][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.016131][ T3524] device bridge_slave_0 entered promiscuous mode [ 47.032161][ T3533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.042869][ T3529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.061639][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.068846][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.077440][ T3523] device bridge_slave_0 entered promiscuous mode [ 47.085184][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.092566][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.100438][ T3524] device bridge_slave_1 entered promiscuous mode [ 47.109486][ T3529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.120402][ T3533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.136379][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.143588][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.151727][ T3523] device bridge_slave_1 entered promiscuous mode [ 47.182389][ T3532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.220632][ T3532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.240432][ T3533] team0: Port device team_slave_0 added [ 47.257014][ T3524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.268416][ T3529] team0: Port device team_slave_0 added [ 47.282561][ T3533] team0: Port device team_slave_1 added [ 47.290604][ T3532] team0: Port device team_slave_0 added [ 47.298515][ T3523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.309271][ T3524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.319338][ T3529] team0: Port device team_slave_1 added [ 47.326760][ T3532] team0: Port device team_slave_1 added [ 47.341309][ T3523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.407027][ T3533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.414293][ T3533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.440556][ T3533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.462882][ T3524] team0: Port device team_slave_0 added [ 47.470497][ T3523] team0: Port device team_slave_0 added [ 47.479156][ T3529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.486184][ T3529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.512723][ T3529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.524460][ T3532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.531838][ T3532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.557859][ T3532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.569487][ T3533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.576826][ T3533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.603226][ T3533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.616217][ T3523] team0: Port device team_slave_1 added [ 47.624025][ T3524] team0: Port device team_slave_1 added [ 47.641575][ T3529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.649003][ T3529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.675391][ T3529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.686841][ T3532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.693945][ T3532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.720040][ T3532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.766706][ T3523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.773943][ T3523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.802897][ T3523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.815802][ T3523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.823230][ T3523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.849967][ T3523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.891206][ T3533] device hsr_slave_0 entered promiscuous mode [ 47.898148][ T3533] device hsr_slave_1 entered promiscuous mode [ 47.915867][ T3524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.922892][ T3524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.949080][ T3524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.992228][ T3524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.999889][ T3524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.026032][ T3524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.064387][ T3532] device hsr_slave_0 entered promiscuous mode [ 48.070978][ T3532] device hsr_slave_1 entered promiscuous mode [ 48.077639][ T3532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.085485][ T3532] Cannot create hsr debugfs directory [ 48.102372][ T3529] device hsr_slave_0 entered promiscuous mode [ 48.109233][ T3529] device hsr_slave_1 entered promiscuous mode [ 48.116066][ T3529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.123985][ T3529] Cannot create hsr debugfs directory [ 48.135164][ T3523] device hsr_slave_0 entered promiscuous mode [ 48.141840][ T3523] device hsr_slave_1 entered promiscuous mode [ 48.148610][ T3523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.156486][ T3523] Cannot create hsr debugfs directory [ 48.202983][ T3247] Bluetooth: hci1: command 0x0409 tx timeout [ 48.205061][ T3524] device hsr_slave_0 entered promiscuous mode [ 48.209955][ T3247] Bluetooth: hci0: command 0x0409 tx timeout [ 48.215566][ T3535] Bluetooth: hci4: command 0x0409 tx timeout [ 48.228655][ T3524] device hsr_slave_1 entered promiscuous mode [ 48.235312][ T3524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.245241][ T3524] Cannot create hsr debugfs directory [ 48.282276][ T3247] Bluetooth: hci3: command 0x0409 tx timeout [ 48.288478][ T3247] Bluetooth: hci2: command 0x0409 tx timeout [ 48.519798][ T3533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.531784][ T3533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.540896][ T3533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.553711][ T3533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.587344][ T3532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.596787][ T3532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.606386][ T3532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.616356][ T3532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.728865][ T3533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.736224][ T3523] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.756401][ T3523] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.780217][ T3533] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.789759][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.799079][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.807183][ T3523] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.819154][ T3529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.844840][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.854999][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.863889][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.871053][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.879299][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.888569][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.897106][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.904196][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.926280][ T3523] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.942526][ T3529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.952891][ T3529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.962426][ T3529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.973705][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.981646][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.997633][ T3532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.025940][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.035142][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.046892][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.055551][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.067247][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.079823][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.101015][ T3532] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.120487][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.128956][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.136875][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.145715][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.154994][ T3524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.168863][ T3524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.193544][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.201892][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.214516][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.224282][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.234983][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.242097][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.251561][ T3524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.265246][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.278269][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.286381][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.297950][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.307163][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.314293][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.334513][ T3524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.373925][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.383373][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.392927][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.401721][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.410730][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.419675][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.428013][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.436491][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.444674][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.453140][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.484735][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.507449][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.540047][ T3529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.581231][ T3523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.599319][ T3529] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.608268][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.615963][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.623611][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.631201][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.652245][ T3533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.670685][ T3524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.685314][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.699084][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.710226][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.717507][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.729708][ T3523] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.745745][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.754721][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.762527][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.770190][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.779133][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.787937][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.795033][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.802986][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.811578][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.820310][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.827377][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.836727][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.866428][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.874541][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.886446][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.895532][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.906843][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.913923][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.921649][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.932947][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.941538][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.950385][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.959369][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.968944][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.980025][ T3524] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.010140][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.018439][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.027455][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.037135][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.046063][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.054613][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.064054][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.073156][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.081458][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.089770][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.098246][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.106541][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.115120][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.128046][ T3523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.145886][ T3532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.161334][ T3529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.172039][ T3529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.192829][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.200666][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.210735][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.220127][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.227252][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.235407][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.243699][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.251103][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.259480][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.267789][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.276316][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.284689][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.292290][ T3567] Bluetooth: hci4: command 0x041b tx timeout [ 50.292332][ T3567] Bluetooth: hci0: command 0x041b tx timeout [ 50.292356][ T3567] Bluetooth: hci1: command 0x041b tx timeout [ 50.310914][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.352740][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.360718][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.369824][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.372180][ T3567] Bluetooth: hci2: command 0x041b tx timeout [ 50.378062][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.390986][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.400583][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.409912][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.411790][ T3567] Bluetooth: hci3: command 0x041b tx timeout [ 50.417015][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.436646][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.447224][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.458583][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.477181][ T3533] device veth0_vlan entered promiscuous mode [ 50.491446][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.513690][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.531379][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.540822][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.555449][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.567104][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.596199][ T3532] device veth0_vlan entered promiscuous mode [ 50.606868][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.615962][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.624794][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.633956][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.645696][ T3524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.656870][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.672972][ T3533] device veth1_vlan entered promiscuous mode [ 50.689905][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.699988][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.714070][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.725327][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.733764][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.742244][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.749685][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.760456][ T3529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.776935][ T3532] device veth1_vlan entered promiscuous mode [ 50.817925][ T3523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.826308][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.837067][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.878682][ T3533] device veth0_macvtap entered promiscuous mode [ 50.892640][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.900153][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.908373][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.918918][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.932534][ T3524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.952865][ T3532] device veth0_macvtap entered promiscuous mode [ 50.961261][ T3533] device veth1_macvtap entered promiscuous mode [ 50.973783][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.984959][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.994058][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.005496][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.015230][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.027538][ T3532] device veth1_macvtap entered promiscuous mode [ 51.052237][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.061050][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.070732][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.092233][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.100858][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.120973][ T3533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.132724][ T3533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.146593][ T3533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.156264][ T3533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.165736][ T3533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.174716][ T3533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.185754][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.194711][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.203622][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.212457][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.238385][ T3523] device veth0_vlan entered promiscuous mode [ 51.250247][ T3532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.263464][ T3532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.275843][ T3532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.284547][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.293597][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.301821][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.310332][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.318584][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.327397][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.337671][ T3524] device veth0_vlan entered promiscuous mode [ 51.355463][ T3532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.366527][ T3532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.377885][ T3532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.388370][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.396392][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.404473][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.412222][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.419846][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.428615][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.437299][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.446127][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.458387][ T3523] device veth1_vlan entered promiscuous mode [ 51.474936][ T3532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.485028][ T3532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.494159][ T3532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.503931][ T3532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.523462][ T3524] device veth1_vlan entered promiscuous mode [ 51.565140][ T3529] device veth0_vlan entered promiscuous mode [ 51.601480][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.613447][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.621802][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.630786][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.638986][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.648210][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.657476][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.666109][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.677775][ T3523] device veth0_macvtap entered promiscuous mode [ 51.690168][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.700436][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.708248][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.720943][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.729432][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.737988][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.745971][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.755078][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.766682][ T3529] device veth1_vlan entered promiscuous mode [ 51.778028][ T3523] device veth1_macvtap entered promiscuous mode [ 51.819318][ T3524] device veth0_macvtap entered promiscuous mode [ 51.830876][ T3524] device veth1_macvtap entered promiscuous mode [ 51.861112][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.874216][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.908075][ T3529] device veth0_macvtap entered promiscuous mode [ 51.917219][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.926129][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.935298][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.944296][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.959878][ T3529] device veth1_macvtap entered promiscuous mode [ 51.966661][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.971128][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.990044][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.994156][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.009135][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.019923][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.033485][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.045306][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.063655][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.077709][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.093486][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.103997][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.115085][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.128295][ T3523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.144103][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.154966][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.163270][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.171817][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.180981][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.189817][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.200416][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.212743][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.222880][ T3524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.235982][ T3524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.247366][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.263623][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.274336][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.286518][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.298140][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.308951][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.319707][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.348547][ T3523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.362809][ T26] Bluetooth: hci1: command 0x040f tx timeout [ 52.372289][ T26] Bluetooth: hci0: command 0x040f tx timeout [ 52.378516][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.391812][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.413237][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.422728][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.434148][ T3524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.443576][ T3567] Bluetooth: hci4: command 0x040f tx timeout [ 52.450047][ T3524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.459260][ T3524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.460139][ T26] Bluetooth: hci3: command 0x040f tx timeout [ 52.469833][ T3524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.474541][ T26] Bluetooth: hci2: command 0x040f tx timeout [ 52.506684][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.526354][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.555022][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.576278][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.594768][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.611871][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.627606][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.638376][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.656132][ T3529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.670188][ T3523] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.692540][ T3523] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.701274][ T3523] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.716025][ T3523] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.729529][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.752392][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.763458][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.772367][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.787790][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.798246][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.816219][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.830656][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.842243][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.853667][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.869729][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.880196][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.896530][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.901288][ T3606] loop2: detected capacity change from 0 to 32768 [ 52.908389][ T3529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.953854][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.963103][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.974053][ T3606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (3606) [ 53.023809][ T3529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.037047][ T3529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.053510][ T3606] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 53.066051][ T3606] BTRFS info (device loop2): metadata ratio 4 [ 53.074812][ T3529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.088228][ T3606] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 53.100145][ T3529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.114330][ T3606] BTRFS info (device loop2): force lzo compression, level 0 [ 53.121818][ T3606] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 53.226852][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.230291][ T3606] BTRFS info (device loop2): trying to use backup root at mount time [ 53.267111][ T3606] BTRFS info (device loop2): doing ref verification [ 53.267709][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.276532][ T3606] BTRFS info (device loop2): disabling tree log [ 53.288861][ T3606] BTRFS info (device loop2): using free space tree [ 53.299272][ T3609] loop3: detected capacity change from 0 to 1024 [ 53.332565][ T3606] BTRFS info (device loop2): has skinny extents [ 53.349696][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.373827][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.387857][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.420259][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.425823][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.456184][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.464892][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.479629][ T3610] hfsplus: b-tree write err: -5, ino 4 [ 53.485320][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.490332][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.500829][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.515279][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.529602][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.540700][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.590765][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.616536][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.634209][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.699535][ T3629] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 53.711112][ T3628] loop4: detected capacity change from 0 to 256 [ 53.727358][ T3629] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 53.798578][ T154] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 53.857344][ T3606] BTRFS warning (device loop2): couldn't read tree root [ 53.868143][ T3617] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0 [ 53.881665][ T3606] BTRFS warning (device loop2): couldn't read tree root [ 53.901005][ T3606] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 53.922531][ T3606] BTRFS warning (device loop2): couldn't read tree root [ 53.961599][ T3606] BTRFS info (device loop2): enabling ssd optimizations [ 53.980179][ T3606] BTRFS info (device loop2): clearing free space tree [ 53.989214][ T3647] loop1: detected capacity change from 0 to 2048 [ 53.992732][ T3649] loop0: detected capacity change from 0 to 512 [ 53.996320][ T3606] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 54.013253][ T3606] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 54.078200][ T3649] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 54.100493][ T3606] BTRFS info (device loop2): creating free space tree [ 54.109133][ T3649] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 54.147813][ T3606] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 54.159257][ T3649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 54.177665][ T3658] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.184336][ T3649] System zones: 1-12 [ 54.215216][ T3649] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 54.228333][ T3606] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 54.256152][ T3649] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 54.282909][ T3649] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000600,grpquota,,errors=continue. Quota mode: writeback. [ 54.419058][ T3663] loop4: detected capacity change from 0 to 1024 [ 54.443807][ T3535] Bluetooth: hci0: command 0x0419 tx timeout [ 54.444717][ T3566] Bluetooth: hci1: command 0x0419 tx timeout [ 54.507037][ T3663] EXT4-fs (loop4): barriers disabled [ 54.521684][ T3663] JBD2: no valid journal superblock found [ 54.523905][ T3535] Bluetooth: hci4: command 0x0419 tx timeout [ 54.530012][ T3663] EXT4-fs (loop4): error loading journal [ 54.697240][ T3679] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 54.707039][ T3679] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 54.713671][ T3681] Bluetooth: hci2: command 0x0419 tx timeout [ 54.721222][ T3681] Bluetooth: hci3: command 0x0419 tx timeout [ 54.812542][ T3685] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 54.991531][ T3692] loop2: detected capacity change from 0 to 256 [ 55.146742][ T3701] loop0: detected capacity change from 0 to 1024 [ 55.150843][ T3705] syz-executor.4 sent an empty control message without MSG_MORE. [ 55.197839][ T3707] loop2: detected capacity change from 0 to 512 [ 55.318810][ T3707] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 55.414294][ T3707] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.437831][ T3707] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz-executor.2: Block bitmap for bg 0 marked uninitialized [ 55.483860][ T3709] loop3: detected capacity change from 0 to 32768 [ 55.514684][ T3707] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 55.520846][ T3712] loop1: detected capacity change from 0 to 2048 [ 55.537217][ T3714] loop0: detected capacity change from 0 to 1024 [ 55.537416][ T3707] EXT4-fs (loop2): 1 orphan inode deleted [ 55.550327][ T3707] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.576104][ T3709] XFS (loop3): Mounting V5 Filesystem [ 55.633215][ T3724] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.732593][ T154] hfsplus: b-tree write err: -5, ino 4 [ 55.783571][ T3709] XFS (loop3): Ending clean mount [ 55.844305][ T3709] XFS (loop3): Quotacheck needed: Please wait. [ 55.910860][ T3709] XFS (loop3): Quotacheck: Done. [ 56.070995][ T3532] XFS (loop3): Unmounting Filesystem [ 56.076780][ T3734] loop0: detected capacity change from 0 to 512 [ 56.088892][ T3732] loop1: detected capacity change from 0 to 1024 [ 56.180182][ T3732] EXT4-fs (loop1): barriers disabled [ 56.211308][ T3732] JBD2: no valid journal superblock found [ 56.217570][ T3734] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 56.219298][ T3732] EXT4-fs (loop1): error loading journal [ 56.277552][ T3738] loop2: detected capacity change from 0 to 256 [ 56.286951][ T3734] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 56.332242][ T3734] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 56.353149][ T3734] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 56.361286][ T3734] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e119, mo2=0000] [ 56.445475][ T3734] EXT4-fs (loop0): failed to initialize system zone (-117) [ 56.468640][ T3734] EXT4-fs (loop0): mount failed [ 56.489756][ T3741] loop1: detected capacity change from 0 to 512 [ 56.524961][ T3741] ======================================================= [ 56.524961][ T3741] WARNING: The mand mount option has been deprecated and [ 56.524961][ T3741] and is ignored by this kernel. Remove the mand [ 56.524961][ T3741] option from the mount to silence this warning. [ 56.524961][ T3741] ======================================================= [ 56.756515][ T3746] loop2: detected capacity change from 0 to 1024 [ 56.759869][ T3741] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 56.793396][ T3741] Quota error (device loop1): write_blk: dquota write failed [ 56.802323][ T3741] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 56.842769][ T3741] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor.1: Failed to acquire dquot type 1 [ 56.915304][ T3746] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 56.983533][ T3741] EXT4-fs (loop1): 1 truncate cleaned up [ 57.024325][ T3741] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,nojournal_checksum,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 57.182132][ T3741] ext4 filesystem being mounted at /root/syzkaller-testdir4208772101/syzkaller.g1DmVo/7/bus supports timestamps until 2038 (0x7fffffff) [ 57.346946][ T3764] loop3: detected capacity change from 0 to 32768 [ 57.382234][ T3741] EXT4-fs error (device loop1): ext4_remount:5854: comm syz-executor.1: Abort forced by user [ 57.426002][ T3736] loop4: detected capacity change from 0 to 40427 [ 57.441779][ T3769] loop2: detected capacity change from 0 to 1024 [ 57.452365][ T3741] EXT4-fs (loop1): Remounting filesystem read-only [ 57.480120][ T3764] XFS (loop3): Mounting V5 Filesystem [ 57.527460][ T3736] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 57.547068][ T3736] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 57.608525][ T1195] hfsplus: b-tree write err: -5, ino 4 [ 57.644580][ T3736] F2FS-fs (loop4): Found nat_bits in checkpoint [ 57.672343][ T3783] loop1: detected capacity change from 0 to 256 [ 57.690112][ T3764] XFS (loop3): Ending clean mount [ 57.697405][ T3764] XFS (loop3): Quotacheck needed: Please wait. [ 57.725312][ T3785] loop2: detected capacity change from 0 to 512 [ 57.757576][ T3736] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 57.768231][ T3764] XFS (loop3): Quotacheck: Done. [ 57.787079][ T3736] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 57.827630][ T3785] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 57.863879][ T3532] XFS (loop3): Unmounting Filesystem [ 57.895118][ T3785] ext4 filesystem being mounted at /root/syzkaller-testdir4065847856/syzkaller.OJSH2h/10/file0 supports timestamps until 2038 (0x7fffffff) [ 58.126081][ T3791] device syzkaller0 entered promiscuous mode [ 58.152365][ T3794] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 58.161067][ T3796] loop0: detected capacity change from 0 to 256 [ 58.198538][ T3794] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 58.325739][ T3796] FAT-fs (loop0): Directory bread(block 64) failed [ 58.356980][ T3796] FAT-fs (loop0): Directory bread(block 65) failed [ 58.379727][ T3796] FAT-fs (loop0): Directory bread(block 66) failed [ 58.402542][ T3796] FAT-fs (loop0): Directory bread(block 67) failed [ 58.409861][ T3798] loop2: detected capacity change from 0 to 2048 [ 58.421562][ T3796] FAT-fs (loop0): Directory bread(block 68) failed [ 58.428785][ T3796] FAT-fs (loop0): Directory bread(block 69) failed [ 58.438706][ T3796] FAT-fs (loop0): Directory bread(block 70) failed [ 58.447643][ T3796] FAT-fs (loop0): Directory bread(block 71) failed [ 58.471503][ T3796] FAT-fs (loop0): Directory bread(block 72) failed [ 58.482935][ T3796] FAT-fs (loop0): Directory bread(block 73) failed [ 58.537718][ T3804] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.557084][ T3802] loop3: detected capacity change from 0 to 512 [ 58.565957][ T3805] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 58.595477][ T3805] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 58.611146][ T3802] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 58.671053][ T3802] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 58.702178][ T3802] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 58.729502][ T3807] loop1: detected capacity change from 0 to 512 [ 58.738701][ T3802] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.762486][ T3802] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e119, mo2=0000] [ 58.770449][ T3802] EXT4-fs (loop3): failed to initialize system zone (-117) [ 58.792023][ T3802] EXT4-fs (loop3): mount failed [ 58.837171][ T3810] loop2: detected capacity change from 0 to 1024 [ 58.878586][ T3807] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,inode_readahead_blks=0x0000000000000800,grpquota,,errors=continue. Quota mode: writeback. [ 58.926453][ T3813] loop0: detected capacity change from 0 to 1024 [ 58.999062][ T3810] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 59.035412][ T3807] ext4 filesystem being mounted at /root/syzkaller-testdir4208772101/syzkaller.g1DmVo/12/bus supports timestamps until 2038 (0x7fffffff) [ 59.054477][ T3820] loop3: detected capacity change from 0 to 64 [ 59.116112][ T1195] hfsplus: b-tree write err: -5, ino 4 [ 59.399689][ T3824] loop4: detected capacity change from 0 to 32768 [ 59.411501][ T3820] attempt to access beyond end of device [ 59.411501][ T3820] loop3: rw=0, want=65, limit=64 [ 59.424102][ T3820] Buffer I/O error on dev loop3, logical block 64, async page read [ 59.432173][ T3820] attempt to access beyond end of device [ 59.432173][ T3820] loop3: rw=0, want=66, limit=64 [ 59.442694][ T3820] Buffer I/O error on dev loop3, logical block 65, async page read [ 59.470069][ T25] audit: type=1800 audit(1717609190.793:2): pid=3832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 59.550821][ T3824] XFS (loop4): Mounting V5 Filesystem [ 59.585230][ T3835] device syzkaller0 entered promiscuous mode [ 59.641434][ T3824] XFS (loop4): Ending clean mount [ 59.649110][ T3824] XFS (loop4): Quotacheck needed: Please wait. [ 59.714236][ T3824] XFS (loop4): Quotacheck: Done. [ 59.747225][ T3846] ALSA: mixer_oss: invalid OSS volume 'MIÚ2ĉ›q½œ™á&<,sóã ”cñãC' [ 59.747683][ T3845] loop1: detected capacity change from 0 to 2048 [ 59.815647][ T3529] XFS (loop4): Unmounting Filesystem [ 59.839831][ T3848] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 59.851911][ T3848] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 59.892408][ T3849] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.020824][ T3851] input: syz1 as /devices/virtual/input/input5 [ 60.039206][ T3851] input: failed to attach handler leds to device input5, error: -6 [ 60.114317][ T3856] loop1: detected capacity change from 0 to 256 [ 60.179691][ T3858] loop3: detected capacity change from 0 to 1024 [ 60.218102][ T3860] loop2: detected capacity change from 0 to 512 [ 60.289833][ T3860] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,inode_readahead_blks=0x0000000000000800,grpquota,,errors=continue. Quota mode: writeback. [ 60.329432][ T3860] ext4 filesystem being mounted at /root/syzkaller-testdir4065847856/syzkaller.OJSH2h/15/bus supports timestamps until 2038 (0x7fffffff) [ 60.353720][ T154] hfsplus: b-tree write err: -5, ino 4 [ 60.553854][ T3881] loop0: detected capacity change from 0 to 1024 [ 60.610024][ T3874] device syzkaller0 entered promiscuous mode [ 60.793163][ T3882] loop2: detected capacity change from 0 to 32768 [ 60.793675][ T3617] hfsplus: b-tree write err: -5, ino 4 [ 60.943182][ T3892] input: syz1 as /devices/virtual/input/input6 [ 60.956246][ T3892] input: failed to attach handler leds to device input6, error: -6 [ 60.988610][ T3882] XFS (loop2): Mounting V5 Filesystem [ 61.144109][ T3882] XFS (loop2): Ending clean mount [ 61.156513][ T3882] XFS (loop2): Quotacheck needed: Please wait. [ 61.178588][ T3901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 61.193149][ T3901] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 61.211109][ T3901] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.221070][ T3901] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.230227][ T3901] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.239092][ T3901] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.250995][ T3901] device vxlan0 entered promiscuous mode [ 61.274109][ T3882] XFS (loop2): Quotacheck: Done. [ 61.346398][ T3533] XFS (loop2): Unmounting Filesystem [ 61.617654][ T3918] loop0: detected capacity change from 0 to 64 [ 61.707653][ T3916] device syzkaller0 entered promiscuous mode [ 61.744285][ T3918] attempt to access beyond end of device [ 61.744285][ T3918] loop0: rw=0, want=65, limit=64 [ 61.784873][ T3918] Buffer I/O error on dev loop0, logical block 64, async page read [ 61.794466][ T3918] attempt to access beyond end of device [ 61.794466][ T3918] loop0: rw=0, want=66, limit=64 [ 61.820825][ T3918] Buffer I/O error on dev loop0, logical block 65, async page read [ 61.968802][ T3925] loop2: detected capacity change from 0 to 1024 [ 62.038196][ T3925] EXT4-fs (loop2): barriers disabled [ 62.044501][ T3925] JBD2: no valid journal superblock found [ 62.050496][ T3925] EXT4-fs (loop2): error loading journal [ 62.111137][ T3930] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (160 ns). Using initial count to start timer. [ 62.240517][ T3941] kvm: vcpu 0: requested 160 ns lapic timer period limited to 200000 ns [ 62.287766][ T3941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 62.402596][ T3954] loop4: detected capacity change from 0 to 512 [ 62.460419][ T3953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.530352][ T3953] team0: Port device batadv0 added [ 62.636647][ T3954] EXT4-fs (loop4): Test dummy encryption mode enabled [ 62.651247][ T3954] EXT4-fs (loop4): Test dummy encryption mode enabled [ 62.682457][ T3954] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 62.706335][ T3967] device syzkaller0 entered promiscuous mode [ 62.716750][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.729848][ T3968] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 62.738206][ T3954] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 62.757345][ T3954] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000004,auto_da_alloc,nodelalloc,grpid,prjquota,usrjquota=,usrjquota=,errors=continue,test_dummy_encryption,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 62.786809][ T3968] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.795692][ T3968] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.804506][ T3968] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.813284][ T3968] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.823484][ T3968] device vxlan0 entered promiscuous mode [ 62.857025][ T3945] loop1: detected capacity change from 0 to 32768 [ 62.908536][ T3945] Dev loop1 Sun disklabel: Csum bad, label corrupted [ 63.007768][ T2962] Dev loop1 Sun disklabel: Csum bad, label corrupted [ 63.202206][ T25] audit: type=1326 audit(1717609194.523:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51c9af4f69 code=0x0 [ 63.248733][ T3990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (160 ns). Using initial count to start timer. [ 63.283188][ T3990] kvm: vcpu 0: requested 160 ns lapic timer period limited to 200000 ns [ 63.319415][ T3990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 63.533108][ T4000] tmpfs: Bad value for 'mpol' [ 64.090084][ T3998] loop0: detected capacity change from 0 to 32768 [ 64.136852][ T3998] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (3998) [ 64.213021][ T3998] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 64.224446][ T3998] BTRFS info (device loop0): using free space tree [ 64.248958][ T3998] BTRFS info (device loop0): has skinny extents [ 64.497102][ T3998] BTRFS info (device loop0): enabling ssd optimizations [ 65.189527][ T4072] loop4: detected capacity change from 0 to 512 [ 65.278837][ T4072] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.297767][ T4072] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.362671][ T4072] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 65.400607][ T4072] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 65.416603][ T4072] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000004,auto_da_alloc,nodelalloc,grpid,prjquota,usrjquota=,usrjquota=,errors=continue,test_dummy_encryption,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 65.528403][ T4044] loop3: detected capacity change from 0 to 32768 [ 65.598658][ T4044] Dev loop3 Sun disklabel: Csum bad, label corrupted [ 65.690482][ T2962] Dev loop3 Sun disklabel: Csum bad, label corrupted [ 65.826167][ T4094] loop4: detected capacity change from 0 to 8192 [ 65.956267][ T4107] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.983944][ T25] audit: type=1800 audit(1717609197.313:4): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 66.028571][ T25] audit: type=1804 audit(1717609197.333:5): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3882229239/syzkaller.FWsSmx/29/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 66.100551][ T25] audit: type=1804 audit(1717609197.423:6): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3882229239/syzkaller.FWsSmx/29/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 66.179698][ T4109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (160 ns). Using initial count to start timer. [ 66.262436][ T4112] kvm: vcpu 0: requested 160 ns lapic timer period limited to 200000 ns [ 66.284260][ T4112] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 66.821129][ T4106] loop0: detected capacity change from 0 to 32768 [ 66.822231][ T4132] loop3: detected capacity change from 0 to 256 [ 66.940958][ T4134] loop2: detected capacity change from 0 to 512 [ 67.017045][ T4132] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 67.025638][ T4134] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 67.066504][ T4115] loop4: detected capacity change from 0 to 32768 [ 67.115788][ T4134] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 67.135492][ T4134] EXT4-fs (loop2): 1 orphan inode deleted [ 67.141390][ T4134] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_dev=0x0000000000000401,nombcache,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000008,lazytime,,errors=continue. Quota mode: writeback. [ 67.758210][ T4165] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.846144][ T4169] loop1: detected capacity change from 0 to 512 [ 67.974931][ T4169] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor.1: inode #1: comm syz-executor.1: iget: illegal inode # [ 68.075594][ T4169] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 1 err=-117 [ 68.101083][ T4182] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.146491][ T4169] EXT4-fs (loop1): 1 orphan inode deleted [ 68.178865][ T4156] loop3: detected capacity change from 0 to 32768 [ 68.185707][ T4169] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_dev=0x0000000000000401,nombcache,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000008,lazytime,,errors=continue. Quota mode: writeback. [ 68.259880][ T4186] befs: (nbd4): No write support. Marking filesystem read-only [ 68.273036][ T263] block nbd4: Attempted send on invalid socket [ 68.281772][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.307540][ T4156] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4156) [ 68.405951][ T4156] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 68.427423][ T4196] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 68.441058][ T4156] BTRFS info (device loop3): force zlib compression, level 3 [ 68.476882][ T4156] BTRFS info (device loop3): force clearing of disk cache [ 68.499346][ T4156] BTRFS info (device loop3): setting nodatasum [ 68.510996][ T4200] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.534819][ T4156] BTRFS info (device loop3): allowing degraded mounts [ 68.554466][ T4156] BTRFS info (device loop3): enabling auto defrag [ 68.568988][ T4156] BTRFS info (device loop3): using free space tree [ 68.578120][ T4156] BTRFS info (device loop3): has skinny extents [ 68.686634][ T4214] loop0: detected capacity change from 0 to 1764 [ 68.767257][ T4222] loop2: detected capacity change from 0 to 512 [ 68.829563][ T4156] BTRFS info (device loop3): clearing free space tree [ 68.839442][ T4156] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.866071][ T4156] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 68.918123][ T4222] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 68.939866][ T4236] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.948617][ T4236] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.955348][ T4156] BTRFS info (device loop3): creating free space tree [ 68.971441][ T4156] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.983541][ T4236] device bridge_slave_1 left promiscuous mode [ 68.990811][ T4236] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.010408][ T4222] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 69.027028][ T4156] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.058040][ T4222] EXT4-fs (loop2): 1 orphan inode deleted [ 69.070382][ T4236] device bridge_slave_0 left promiscuous mode [ 69.079629][ T4239] befs: (nbd0): No write support. Marking filesystem read-only [ 69.086795][ T4222] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_dev=0x0000000000000401,nombcache,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000008,lazytime,,errors=continue. Quota mode: writeback. [ 69.111861][ T263] block nbd0: Attempted send on invalid socket [ 69.112083][ T4156] BTRFS error (device loop3): balance: invalid convert data profile single [ 69.118186][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.139286][ T4236] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.361738][ T4245] loop1: detected capacity change from 0 to 64 [ 69.431062][ T4250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.482174][ T4250] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 69.694655][ T4258] loop1: detected capacity change from 0 to 256 [ 69.709296][ T4262] tmpfs: Bad value for 'mpol' [ 69.807117][ T4254] loop2: detected capacity change from 0 to 8192 [ 69.836751][ T4266] befs: (nbd4): No write support. Marking filesystem read-only [ 69.846077][ T263] block nbd4: Attempted send on invalid socket [ 69.852981][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.881824][ T4258] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 69.968022][ T4271] loop0: detected capacity change from 0 to 512 [ 69.972388][ T4272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.007911][ T4273] loop4: detected capacity change from 0 to 512 [ 70.035563][ T25] audit: type=1800 audit(1717609201.363:7): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 70.050716][ T4271] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 70.057828][ T25] audit: type=1804 audit(1717609201.373:8): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4065847856/syzkaller.OJSH2h/40/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 70.097621][ T4271] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 70.102133][ T25] audit: type=1804 audit(1717609201.423:9): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4065847856/syzkaller.OJSH2h/40/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 70.112882][ T4271] EXT4-fs (loop0): 1 orphan inode deleted [ 70.143247][ T4271] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_dev=0x0000000000000401,nombcache,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000008,lazytime,,errors=continue. Quota mode: writeback. [ 70.233305][ T4273] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.294795][ T4273] ext4 filesystem being mounted at /root/syzkaller-testdir3882229239/syzkaller.FWsSmx/47/bus supports timestamps until 2038 (0x7fffffff) [ 70.574693][ T4283] kvm: emulating exchange as write [ 70.627558][ T4296] loop1: detected capacity change from 0 to 256 [ 70.724367][ T4301] befs: (nbd2): No write support. Marking filesystem read-only [ 70.747873][ T150] block nbd2: Attempted send on invalid socket [ 70.754132][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.885399][ T4306] loop2: detected capacity change from 0 to 1024 [ 70.966519][ T4306] EXT4-fs (loop2): Test dummy encryption mode enabled [ 70.977536][ T4308] mkiss: ax0: crc mode is auto. [ 70.990060][ T4306] EXT4-fs (loop2): Ignoring removed orlov option [ 71.071110][ T4306] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 71.218661][ T4308] mkiss: ax0: crc mode is auto. [ 71.332835][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.339453][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.398479][ T4306] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 71.506310][ T4319] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 72.413629][ T4351] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.515327][ T4317] loop4: detected capacity change from 0 to 32768 [ 72.735134][ T4332] loop1: detected capacity change from 0 to 32768 [ 72.774374][ T4317] XFS (loop4): Mounting V5 Filesystem [ 72.812679][ T4332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4332) [ 72.826386][ T4337] loop3: detected capacity change from 0 to 32768 [ 72.898996][ T4371] loop2: detected capacity change from 0 to 512 [ 72.913924][ T4370] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 72.961068][ T4370] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.004304][ T4332] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 73.037210][ T4317] XFS (loop4): Ending clean mount [ 73.051702][ T4317] XFS (loop4): Quotacheck needed: Please wait. [ 73.066379][ T4332] BTRFS info (device loop1): use zlib compression, level 3 [ 73.100668][ T4332] BTRFS info (device loop1): using free space tree [ 73.113034][ T4317] XFS (loop4): Quotacheck: Done. [ 73.142580][ T4332] BTRFS info (device loop1): has skinny extents [ 73.170601][ T3529] XFS (loop4): Unmounting Filesystem [ 73.184006][ T4371] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.266496][ T4371] ext4 filesystem being mounted at /root/syzkaller-testdir4065847856/syzkaller.OJSH2h/53/bus supports timestamps until 2038 (0x7fffffff) [ 73.368323][ T4391] loop0: detected capacity change from 0 to 256 [ 73.420999][ T4332] BTRFS info (device loop1): enabling ssd optimizations [ 73.497183][ T25] audit: type=1800 audit(1717609204.823:10): pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 74.309356][ T4434] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 74.398806][ T4436] loop3: detected capacity change from 0 to 512 [ 74.496409][ T4436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.496525][ T4436] ext4 filesystem being mounted at /root/syzkaller-testdir310813220/syzkaller.w4icKs/52/bus supports timestamps until 2038 (0x7fffffff) [ 74.580561][ T4444] loop0: detected capacity change from 0 to 256 [ 74.920043][ T4456] loop3: detected capacity change from 0 to 1024 [ 74.986263][ T4456] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 74.997255][ T4462] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.094383][ T4456] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,nombcache,auto_da_alloc=0x0000000000000002,nombcache,noinit_itable,nomblk_io_submit,init_itable=0x0000000000000009,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 75.342143][ T25] audit: type=1800 audit(1717609206.663:11): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 75.540736][ T4491] loop3: detected capacity change from 0 to 256 [ 75.579780][ T4495] UHID_CREATE from different security context by process 164 (syz-executor.0), this is not allowed. [ 75.625493][ T25] audit: type=1800 audit(1717609206.953:12): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 75.722116][ T1066] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.767616][ T4499] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.788148][ T4495] loop0: detected capacity change from 0 to 4096 [ 75.926149][ T4495] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 75.966668][ T4495] ntfs3: loop0: Failed to load $Extend. [ 75.982484][ T4506] loop3: detected capacity change from 0 to 256 [ 76.083169][ T1066] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice= 6.3a [ 76.102523][ T1066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.154928][ T1066] usb 2-1: config 0 descriptor?? [ 76.268144][ T4517] device pim6reg1 entered promiscuous mode [ 76.453753][ T1280] cfg80211: failed to load regulatory.db [ 76.573976][ T3526] usb 2-1: USB disconnect, device number 2 [ 76.785711][ T4510] loop4: detected capacity change from 0 to 32768 [ 76.896298][ T4510] XFS (loop4): Mounting V5 Filesystem [ 76.986644][ T4510] XFS (loop4): Ending clean mount [ 77.045770][ T21] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 77.046091][ T3529] XFS (loop4): Unmounting Filesystem [ 77.063068][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.068215][ T21] XFS (loop4): Unmount and run xfs_repair [ 77.086684][ T21] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 77.095821][ T21] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 77.105830][ T21] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 77.115535][ T21] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 77.124902][ T21] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 77.134269][ T21] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 77.143706][ T21] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 77.153174][ T21] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 77.172326][ T21] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 77.182661][ T3671] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 77.214752][ T3671] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 77.245670][ T3671] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 77.302114][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 77.307019][ T4548] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 77.319046][ T4548] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.361118][ T4551] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 77.385430][ T4525] loop2: detected capacity change from 0 to 32768 [ 77.427641][ T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.437669][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.454842][ T4548] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 77.462162][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.468140][ T4548] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 77.479775][ T13] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.495663][ T4548] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 77.512269][ T4525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4525) [ 77.526217][ T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.546891][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.572923][ T4525] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 77.589466][ T4525] BTRFS info (device loop2): use zlib compression, level 3 [ 77.617084][ T4525] BTRFS info (device loop2): using free space tree [ 77.630852][ T4525] BTRFS info (device loop2): has skinny extents [ 77.648352][ T4558] loop4: detected capacity change from 0 to 512 [ 77.715294][ T4558] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.758348][ T4525] BTRFS info (device loop2): enabling ssd optimizations [ 77.771717][ T4558] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3880: comm syz-executor.4: Allocating blocks 41-42 which overlap fs metadata [ 77.797291][ T4558] Quota error (device loop4): write_blk: dquota write failed [ 77.821497][ T4558] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 77.833558][ T13] usb 4-1: GET_CAPABILITIES returned 0 [ 77.837145][ T4558] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz-executor.4: Failed to acquire dquot type 0 [ 77.839361][ T13] usbtmc 4-1:16.0: can't read capabilities [ 77.866838][ T4558] EXT4-fs (loop4): 1 truncate cleaned up [ 77.875637][ T4558] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpjquota=,acl,noblock_validity,noload,norecovery,noinit_itable,inode_readahead_blks=0x0000000000000001,init_itable=0x00000000000000022,errors=continue. Quota mode: writeback. [ 77.899307][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.927677][ T4558] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3880: comm syz-executor.4: Allocating blocks 41-42 which overlap fs metadata [ 77.945374][ T4558] Quota error (device loop4): write_blk: dquota write failed [ 77.953291][ T4558] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 77.964720][ T4558] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz-executor.4: Failed to acquire dquot type 0 [ 78.009520][ T3529] EXT4-fs (loop4): pa ffff88801bb2aa80: logic 1, phys. 41, len 23 [ 78.021764][ T3529] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4897: group 0, free 22, pa_free 23 [ 78.064422][ T13] usb 4-1: USB disconnect, device number 2 [ 78.282796][ T4585] device pim6reg1 entered promiscuous mode [ 78.375752][ T4593] loop1: detected capacity change from 0 to 256 [ 78.669808][ T4603] loop3: detected capacity change from 0 to 256 [ 78.744045][ T4603] exfat: Deprecated parameter 'utf8' [ 78.797530][ T4609] loop4: detected capacity change from 0 to 512 [ 78.833423][ T4603] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 78.892013][ T4609] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.912431][ T4609] ext4 filesystem being mounted at /root/syzkaller-testdir3882229239/syzkaller.FWsSmx/65/file0 supports timestamps until 2038 (0x7fffffff) [ 79.086057][ T4609] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents [ 79.129756][ T4609] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #2: comm syz-executor.4: mark_inode_dirty error [ 79.207958][ T4609] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents [ 79.277817][ T4609] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz-executor.4: mark_inode_dirty error [ 79.356322][ T4600] loop2: detected capacity change from 0 to 32768 [ 79.450552][ T4600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4600) [ 79.499943][ T4623] device syzkaller0 entered promiscuous mode [ 79.537608][ T4600] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 79.567756][ T4600] BTRFS error (device loop2): superblock checksum mismatch [ 79.611762][ T4600] BTRFS error (device loop2): open_ctree failed [ 79.638364][ T4633] loop1: detected capacity change from 0 to 512 [ 79.722359][ T4633] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.772519][ T4633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.783514][ T4636] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 79.809265][ T4607] loop0: detected capacity change from 0 to 32768 [ 79.828757][ T4636] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.844323][ T4633] EXT4-fs (loop1): 1 truncate cleaned up [ 79.850684][ T4633] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 79.938466][ T4607] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4607) [ 80.026013][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 80.041598][ T4607] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 80.100420][ T4607] BTRFS info (device loop0): enabling auto defrag [ 80.109407][ T4607] BTRFS info (device loop0): doing ref verification [ 80.139339][ T4607] BTRFS info (device loop0): max_inline at 0 [ 80.164537][ T4607] BTRFS info (device loop0): force clearing of disk cache [ 80.176336][ T4651] loop1: detected capacity change from 0 to 128 [ 80.215918][ T4607] BTRFS info (device loop0): turning on sync discard [ 80.260384][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.291103][ T4607] BTRFS info (device loop0): disabling free space tree [ 80.307933][ T4651] ext4 filesystem being mounted at /root/syzkaller-testdir4208772101/syzkaller.g1DmVo/56/mnt supports timestamps until 2038 (0x7fffffff) [ 80.322286][ T4642] loop4: detected capacity change from 0 to 4096 [ 80.331492][ T4607] BTRFS info (device loop0): has skinny extents [ 80.365648][ T4651] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 80.416171][ T4651] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 80.444911][ T4664] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 80.462466][ T4642] ntfs3: loop4: Failed to load $MFT. [ 80.489740][ T4664] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 80.505124][ T4651] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 80.556381][ T4651] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 80.582164][ T4674] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 80.619434][ T4674] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 80.637666][ T4681] loop3: detected capacity change from 0 to 512 [ 80.660605][ T4651] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 80.698706][ T4651] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 80.730203][ T4681] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.757902][ T4607] BTRFS info (device loop0): enabling ssd optimizations [ 80.771302][ T4688] device syzkaller0 entered promiscuous mode [ 80.778892][ T4607] BTRFS info (device loop0): clearing free space tree [ 80.804581][ T4681] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3880: comm syz-executor.3: Allocating blocks 41-42 which overlap fs metadata [ 80.809947][ T4664] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 80.819596][ T4681] Quota error (device loop3): write_blk: dquota write failed [ 80.853323][ T4607] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.867509][ T4696] loop2: detected capacity change from 0 to 512 [ 80.868220][ T4607] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.881088][ T4681] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 80.889359][ T4664] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 80.911811][ T4681] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz-executor.3: Failed to acquire dquot type 0 [ 80.926519][ T4697] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 80.927812][ T4674] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 80.943395][ T4681] EXT4-fs (loop3): 1 truncate cleaned up [ 80.943421][ T4681] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpjquota=,acl,noblock_validity,noload,norecovery,noinit_itable,inode_readahead_blks=0x0000000000000001,init_itable=0x00000000000000022,errors=continue. Quota mode: writeback. [ 81.020280][ T4696] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.029463][ T4697] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 81.064323][ T4696] EXT4-fs (loop2): 1 truncate cleaned up [ 81.070012][ T4696] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 81.081880][ T4674] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 81.131199][ T4681] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3880: comm syz-executor.3: Allocating blocks 41-42 which overlap fs metadata [ 81.231806][ T4651] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 81.248618][ T4681] Quota error (device loop3): write_blk: dquota write failed [ 81.290432][ T4681] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 81.329878][ T4681] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz-executor.3: Failed to acquire dquot type 0 [ 81.354010][ T4651] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 81.404678][ T4664] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 81.473582][ T4664] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 81.487449][ T3532] EXT4-fs (loop3): pa ffff8880738ed0e0: logic 1, phys. 41, len 23 [ 81.495887][ T3532] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4897: group 0, free 22, pa_free 23 [ 81.677865][ T4717] loop1: detected capacity change from 0 to 256 [ 81.723033][ T4717] exfat: Deprecated parameter 'utf8' [ 81.786755][ T4717] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 81.922818][ T3617] ------------[ cut here ]------------ [ 81.928783][ T3617] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 81.939146][ T3617] WARNING: CPU: 0 PID: 3617 at net/mac80211/rate.c:376 __rate_control_send_low+0x653/0x890 [ 81.949202][ T3617] Modules linked in: [ 81.953179][ T3617] CPU: 0 PID: 3617 Comm: kworker/u4:6 Not tainted 5.15.160-syzkaller #0 [ 81.960675][ T4726] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 2024/06/05 17:40:13 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 81.961500][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 81.961547][ T3617] Workqueue: phy4 ieee80211_scan_work [ 81.988207][ T3617] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 81.994527][ T3617] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 e0 05 94 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 1d f9 9d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 82.014196][ T3617] RSP: 0018:ffffc90002e57408 EFLAGS: 00010246 [ 82.020373][ T3617] RAX: f81c0c92f65a0100 RBX: 0000000000000008 RCX: ffff88807b2fbb80 [ 82.028436][ T3617] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 82.030177][ T4726] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 82.036550][ T3617] RBP: ffff888012fdd2a8 R08: ffffffff8166860c R09: fffff520005cadc1 [ 82.036569][ T3617] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 82.036581][ T3617] R13: 0000000000000008 R14: 0000000000000000 R15: 00000000ffffffff [ 82.036592][ T3617] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 82.036606][ T3617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.036618][ T3617] CR2: 0000001b2fb31000 CR3: 0000000018685000 CR4: 00000000003506f0 [ 82.036632][ T3617] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 82.036642][ T3617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.036652][ T3617] Call Trace: [ 82.036659][ T3617] [ 82.036666][ T3617] ? __warn+0x15b/0x300 [ 82.036692][ T3617] ? __rate_control_send_low+0x653/0x890 [ 82.036711][ T3617] ? report_bug+0x1b7/0x2e0 [ 82.036736][ T3617] ? handle_bug+0x3d/0x70 [ 82.036753][ T3617] ? exc_invalid_op+0x16/0x40 [ 82.036771][ T3617] ? asm_exc_invalid_op+0x16/0x20 [ 82.036794][ T3617] ? __wake_up_klogd+0xcc/0x100 [ 82.036814][ T3617] ? __rate_control_send_low+0x653/0x890 [ 82.036831][ T3617] ? __rate_control_send_low+0x653/0x890 [ 82.036859][ T3617] rate_control_send_low+0x1a8/0x770 [ 82.036880][ T3617] rate_control_get_rate+0x20a/0x5d0 [ 82.036903][ T3617] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 82.036938][ T3617] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 82.036974][ T3617] invoke_tx_handlers_late+0xb2/0x17f0 [ 82.037000][ T3617] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 82.194658][ T3617] ieee80211_tx+0x2df/0x460 [ 82.199188][ T3617] ? ieee80211_skb_resize+0x640/0x640 [ 82.204653][ T3617] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 82.210146][ T3617] ? ieee80211_xmit+0x355/0x470 [ 82.215083][ T3617] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 82.221003][ T3617] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 82.227272][ T3617] ieee80211_scan_work+0x62b/0x1d00 [ 82.232550][ T3617] ? print_irqtrace_events+0x210/0x210 [ 82.238029][ T3617] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 82.244624][ T3617] ? ieee80211_can_scan+0x200/0x200 [ 82.249851][ T3617] ? do_raw_spin_unlock+0x137/0x8b0 [ 82.255189][ T3617] process_one_work+0x8a1/0x10c0 [ 82.260182][ T3617] ? worker_detach_from_pool+0x260/0x260 [ 82.265905][ T3617] ? _raw_spin_lock_irqsave+0x120/0x120 [ 82.271471][ T3617] ? kthread_data+0x4e/0xc0 [ 82.276058][ T3617] ? wq_worker_running+0x97/0x170 [ 82.281093][ T3617] worker_thread+0xaca/0x1280 [ 82.285867][ T3617] kthread+0x3f6/0x4f0 [ 82.290043][ T3617] ? rcu_lock_release+0x20/0x20 [ 82.294967][ T3617] ? kthread_blkcg+0xd0/0xd0 [ 82.299568][ T3617] ret_from_fork+0x1f/0x30 [ 82.304065][ T3617] [ 82.307100][ T3617] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.314383][ T3617] CPU: 0 PID: 3617 Comm: kworker/u4:6 Not tainted 5.15.160-syzkaller #0 [ 82.322799][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 82.332861][ T3617] Workqueue: phy4 ieee80211_scan_work [ 82.338248][ T3617] Call Trace: [ 82.341524][ T3617] [ 82.344451][ T3617] dump_stack_lvl+0x1e3/0x2d0 [ 82.349141][ T3617] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 82.354773][ T3617] ? panic+0x860/0x860 [ 82.358857][ T3617] ? __rate_control_send_low+0x560/0x890 [ 82.364496][ T3617] ? __rate_control_send_low+0x560/0x890 [ 82.370140][ T3617] panic+0x318/0x860 [ 82.3740