last executing test programs: 55.605922603s ago: executing program 0 (id=1064): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unshare(0x8000000) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x9362, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000100)=0x3, 0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 55.412076569s ago: executing program 0 (id=1066): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100ff07008329ba35b2d4c5395c1b42d352a3f900000000000000000000000083ba00000000005f003501978f6de80e"], 0x0, 0x1c}, 0x20) prlimit64(0x0, 0x0, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20040004) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000004c0)="c118c93b63adfddc01c212b16cfdf5f752c52b28ac747f60824fe37b7c060ae732e2b039ba3ea18570e1e79b6c516bf52b63359b7671dee8474e7909db64aba92fb1b25b8b4254e8b8bdb8265f95449ef598b537a30e52cd11fe514b2c4f53647957850b2408a5fc70865739f7531eea11a8defc464490d84c2ff235565dd45be0eef248b80b6412b18f2bff0509c069f748", &(0x7f0000000580)=""/28}, 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4104aec6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x288, 0x254, 0x5802, 0x294, 0x0, 0x294, 0x338, 0x378, 0x378, 0x338, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @empty, [], [], 'macvtap0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) r7 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x38, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}}, 0x0) ioctl$SG_SET_COMMAND_Q(r7, 0x2276, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x0, 0x0, 0xde}}}, 0x14) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02000010000c0800060000000000000000000000000841efdcb72d78d5d9bf3cfc8b6b56570a940bbf5fdc64bc76eabb3c5260538d68f36e1c276c5bedff063e9f83690ed0054028c7a77a0b50126b48001922014eb5d22ad96defa946bd720b27404bd41057b7ac8caa7225a3bceb8086e8bc1fbf2d23bed0aaacfb"], 0x15) fcntl$getownex(r1, 0x10, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 52.95474941s ago: executing program 0 (id=1074): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) 52.324800471s ago: executing program 0 (id=1075): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0xa01c2, 0x0) r7 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x70, 0x13, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe80}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x11}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r4}, 0x8) r9 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000b00)="6455089ab9075e64c4bedb2b941533bc71ec4be38eeb5e2e6c9ecdda0c6ed7bd4706c3fb85575d0034077bb770e214219d50542e7e671050c17a8022b175ce074558fe4e94f15f588cb4a56928bae16bd7f992b843c5011456ed86b60133edc2903c9f6bdf9a3620f7577841abe2e06fef85eb3ee0091a527f0977e3ba534f7fa31caf7465d30df85587b36f219c23d089bbff7e259bffa1157b2393f0a3", 0x9e}, {&(0x7f0000000bc0)="148187735e85181ef5b798e0e0df3f67ae40874566271a94a4c5672cb6b12c53f6d38fb1e5b243e0fa875e9e3d66ab33a3f9738fb48c072d1f50e59e4dbc9e920775d2900835f91f3629cd853370b1f5ac1978d3d610b0a8332a25389244c9c5165173bf18e89b7e8be9507774d8824a1a61b29a1b8081c0ea1dd6a0d3d4e8e8a11debfa97f12b69736819fffc7f3b", 0x8f}], 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="28000000000000000100000001000000b5376e51ab324160b1445009bfc3f82936bb8364a6e2f1156c4edfa76c8fd8a62c975d37d61c58094e0f4f8a9c48d4e621360d15ca9ab3e8ffa4ab41ed51e8cda603426f09bdeed81216d158e19abc17785c9854077c81c9", @ANYRESHEX=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES16, @ANYBLOB="000000001c000000000000fa000000", @ANYRESHEX, @ANYBLOB="00000000280000000100cc8d26e9ce24e5c36be347000001000000", @ANYRESOCT=r1, @ANYRES32=r7, @ANYRES32, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r9], 0xa8, 0x40040}}], 0x1, 0x4000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x200, 0x54) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x0, [0x101, 0x4], [0x0, 0x100, 0x0, 0x80], 0x0, [0x1, 0xfffffffc]}}}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c00990004000000580000000800010057000000080001002e0000000800db00", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x11) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) ftruncate(r5, 0x2007ffb) sendfile(r4, r5, 0x0, 0x1000000211005) 50.912424146s ago: executing program 0 (id=1078): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$netrom(r0, 0x0, 0x0) 49.550218567s ago: executing program 0 (id=1081): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGE(r1, 0x40184810, 0x0) 7.555370223s ago: executing program 3 (id=1180): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf32(r0, &(0x7f0000003740)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x7, 0x8, 0x3, 0x3, 0x3e, 0x6, 0x9d, 0x38, 0x17f, 0x9, 0x2, 0x20, 0x1, 0x8, 0x6, 0x5}, [{0x60000000, 0x6, 0x3, 0x4, 0x3, 0x1ff, 0x7f, 0x6}], "84e05f229a8a4a0bad032ac01054545f38147f4af6c7ebd38ac12aff89782926f7c99952575d5a4b356e41ccb2b386695c2ffaa807168c", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x58f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000d00), 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x2, 0x100}) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) socket$can_raw(0x1d, 0x3, 0x1) 5.01865169s ago: executing program 2 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000004c0)=""/202) 5.01857438s ago: executing program 4 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) 4.836077635s ago: executing program 4 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x100000a9}}}]}}]}, 0x45c}}, 0x0) 4.629415683s ago: executing program 1 (id=1189): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, 0x0, 0x0) 3.814573479s ago: executing program 1 (id=1190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)="ce", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 3.704076378s ago: executing program 4 (id=1191): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000840)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x16, 0x80000001, 0x8, 0x9, 0x410, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250f0000002400018006000200fe0000000800050004000000060001000a00000008000500020000000c000180080009004b00000008000400050000000800060006000000240002800800060001800000080009008c0b0000080006000400000008000900050004000000080003000200000008000800ab7b3040f9a01bbfab03fac4b597f800000080060002004e2000004c0001800c000700100000000300000008000500000000000c000700010000000100000008000600776c6300060001000a0000000600010002000000081db0d9cb1b590148e541327d01e30ab9a3ddd69ba94873ea86bbaf0da9"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000900)={0x0, 0x4, 0x6, 0x9cf, 0x0, [], [0x6, 0x8001, 0x1, 0x5], [0xfff, 0x0, 0x100, 0x1000], [0x1, 0x100000001, 0x10001, 0x914]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000000c0)="1a0000e28ea0", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @local, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0x18b6, 0x10}, &(0x7f0000000880)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000600), &(0x7f0000000140)=0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x200d}}}, 0x7) 3.594937727s ago: executing program 4 (id=1192): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x90) 3.43497117s ago: executing program 4 (id=1193): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x90) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000fe00"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) 3.358071246s ago: executing program 2 (id=1194): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000380), 0x1, 0x55e, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 2.214884489s ago: executing program 1 (id=1195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140)="e0", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)="06", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000000000)=""/17, &(0x7f0000000080)=0x11) 2.134312816s ago: executing program 4 (id=1196): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}, @l2cap_cid_le_signaling}, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000f80)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21c916, &(0x7f00000009c0)={[{@lazytime}]}, 0x1b, 0x4c9, &(0x7f00000014c0)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x308004a, &(0x7f0000000840)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRESDEC=r2], 0x6, 0x2b3, &(0x7f0000000200)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2004840, &(0x7f0000000580)={[{@i_version}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4e8}}], [{@obj_type={'obj_type', 0x3d, '\x00\x00\x00\xe3^\x1b\xf4\x9a\xe6>\x8fYtK\xc0\xde\x04j\xe8\x00'}}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_eq}, {@euid_gt}]}, 0x1, 0x503, &(0x7f0000000a40)="$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") ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035"], 0x34}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) 2.064182762s ago: executing program 3 (id=1197): ftruncate(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) 1.886132326s ago: executing program 1 (id=1198): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 1.822256381s ago: executing program 3 (id=1199): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc0505510, &(0x7f0000000a80)=ANY=[@ANYBLOB="2dc0654f2f"]) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newsa={0x1c4, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x89, 0x1, {{'hmac(sha256)\x00'}, 0x208, "da2d77796787862a1e9d8c747099cf8429e8f3e215ba31ef2f07a3c8f00bd19a23932f09bac3ffa30faf08fa773840400df3de7c56337e6d5ca75cd7b3b8164b8e"}}]}, 0x1c4}}, 0x0) 1.773310185s ago: executing program 2 (id=1200): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688a20033000301000a000002a257fc5ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2", 0xb8) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0xfffe, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="100000000000000000000000070000001c"], 0x30}}], 0x1, 0x0) socket(0x11, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x600}}, 0x1c}}, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 1.733304169s ago: executing program 1 (id=1201): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000001000000000000003b810000850000007b000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.354334149s ago: executing program 2 (id=1202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000500)='y', 0x3b4}], 0x1) 1.192942682s ago: executing program 1 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @a}}) getpid() 1.174666674s ago: executing program 3 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.073781382s ago: executing program 2 (id=1205): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a1100000500420002"], 0x18}}, 0x0) 956.811682ms ago: executing program 3 (id=1206): unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x324}, 0x0) 785.310356ms ago: executing program 2 (id=1207): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe56}, 0x50) 0s ago: executing program 3 (id=1208): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000876f3db8412f2a7e62b5c1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, r1, 0x9, 0x0, @void}, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): - 0 [ 352.303449][ T7541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.315523][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.323747][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.372335][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.381354][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.451935][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.460662][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.469451][ T7587] device veth0_vlan entered promiscuous mode [ 352.502270][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.510553][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.522130][ T7587] device veth1_vlan entered promiscuous mode [ 352.536086][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.569605][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.597407][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 352.605650][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 352.614812][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.656003][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.664322][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.668177][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.674033][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.691126][ T7587] device veth0_macvtap entered promiscuous mode [ 352.723552][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.736443][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.758629][ T7587] device veth1_macvtap entered promiscuous mode [ 352.783940][ C0] eth0: bad gso: type: 1, size: 1408 [ 352.787672][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.818937][ T7716] loop0: detected capacity change from 0 to 512 [ 352.843701][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.855354][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.858130][ T7719] sctp: [Deprecated]: syz.3.867 (pid 7719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.858130][ T7719] Use struct sctp_sack_info instead [ 352.873025][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.907806][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 352.923501][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.951679][ T7716] EXT4-fs (loop0): 1 truncate cleaned up [ 352.964249][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.977078][ T7716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 353.002390][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.057287][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.121117][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.138744][ T7716] EXT4-fs error (device loop0): ext4_lookup:1860: inode #2: comm syz.0.831: deleted inode referenced: 15 [ 353.159458][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.174289][ T7725] block device autoloading is deprecated and will be removed. [ 353.187998][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.199048][ T7716] EXT4-fs error (device loop0): ext4_lookup:1860: inode #2: comm syz.0.831: deleted inode referenced: 15 [ 353.211828][ T7725] I/O error, dev loop16, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 353.307930][ T7722] loop4: detected capacity change from 0 to 32768 [ 353.328365][ T7722] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.868 (7722) [ 353.364888][ T7722] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 353.417998][ T7722] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 353.439070][ T7541] EXT4-fs (loop0): unmounting filesystem. [ 353.452637][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.472039][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.531288][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.666765][ T7722] BTRFS info (device loop4): using free space tree [ 354.279752][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.291672][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.316518][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.330418][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.342791][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.353809][ T7722] BTRFS info (device loop4): enabling ssd optimizations [ 354.369888][ T7752] loop0: detected capacity change from 0 to 256 [ 354.410868][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.431823][ T7752] FAT-fs (loop0): Unrecognized mount option "shortname=xixed" or missing value [ 354.462430][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.474657][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.486375][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.506076][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.551969][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.573486][ T7752] Option 'gâ¶Ó˜HåÎ' to dns_resolver key: bad/missing value [ 354.621427][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.639349][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.663186][ T27] audit: type=1326 audit(1723379646.635:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a3f779f9 code=0x0 [ 354.666541][ T7587] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.724920][ T7587] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.744469][ T7587] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.754907][ T7587] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.916845][ T6655] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 355.183349][ T3729] device hsr_slave_0 left promiscuous mode [ 355.202119][ T3729] device hsr_slave_1 left promiscuous mode [ 355.214852][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.236031][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.283069][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.291319][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.314708][ T3729] device bridge_slave_1 left promiscuous mode [ 355.334033][ T3729] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.371152][ T3729] device bridge_slave_0 left promiscuous mode [ 355.377750][ T3729] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.411150][ T3729] device veth1_macvtap left promiscuous mode [ 355.417459][ T3729] device veth0_macvtap left promiscuous mode [ 355.426348][ T3729] device veth1_vlan left promiscuous mode [ 355.445639][ T3729] device veth0_vlan left promiscuous mode [ 355.817463][ T7772] loop0: detected capacity change from 0 to 512 [ 355.850319][ T7772] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 356.293302][ T7772] EXT4-fs (loop0): 1 truncate cleaned up [ 356.299518][ T7772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 356.406831][ T27] audit: type=1800 audit(1723379648.375:283): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.863" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 356.475108][ T7778] loop4: detected capacity change from 0 to 8 [ 356.511383][ T7778] SQUASHFS error: lzo decompression failed, data probably corrupt [ 356.519531][ T7778] SQUASHFS error: Failed to read block 0x91: -5 [ 356.526017][ T7778] SQUASHFS error: Unable to read metadata cache entry [8f] [ 356.533987][ T7778] SQUASHFS error: Unable to read inode 0x11f [ 356.997979][ T7541] EXT4-fs (loop0): unmounting filesystem. [ 357.464473][ T3729] team0 (unregistering): Port device team_slave_1 removed [ 357.508720][ T3729] team0 (unregistering): Port device team_slave_0 removed [ 357.554216][ T3729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.594772][ T3729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.041938][ T3729] bond0 (unregistering): Released all slaves [ 358.199816][ T3762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.212513][ T3762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.273717][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 358.288328][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.297955][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.313091][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 358.576584][ T7783] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 358.583685][ T7783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 358.603471][ T7783] vhci_hcd vhci_hcd.0: Device attached [ 358.654609][ T7782] loop1: detected capacity change from 0 to 2048 [ 358.712245][ T7792] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.086707][ T4178] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 359.756903][ T4178] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 359.774696][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.786996][ T7799] loop2: detected capacity change from 0 to 1024 [ 359.816087][ T4178] usb 1-1: Product: syz [ 359.844227][ T4178] usb 1-1: Manufacturer: syz [ 359.860324][ T4178] usb 1-1: SerialNumber: syz [ 359.889553][ T4178] usb 1-1: config 0 descriptor?? [ 359.914400][ T7799] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00cc02c, mo2=0002] [ 359.932684][ T7799] System zones: 0-1, 3-36 [ 359.952017][ T4178] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 006 [ 359.969516][ T7799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 360.972513][ T4438] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 361.015033][ T7587] EXT4-fs (loop2): unmounting filesystem. [ 361.313129][ T7812] tap0: tun_chr_ioctl cmd 2148553947 [ 361.497800][ T4178] (null): failure setting delay to 10us [ 361.514127][ T4178] i2c-tiny-usb: probe of 1-1:0.0 failed with error -5 [ 361.555983][ T4178] usb 1-1: USB disconnect, device number 6 [ 361.646810][ T7788] vhci_hcd: connection reset by peer [ 361.674913][ T3814] vhci_hcd: stop threads [ 361.713506][ T3814] vhci_hcd: release socket [ 361.766360][ T3679] libceph: connect (1)[c::]:6789 error -101 [ 361.774752][ T3814] vhci_hcd: disconnect device [ 361.780138][ T3679] libceph: mon0 (1)[c::]:6789 connect error [ 361.798170][ T3679] libceph: connect (1)[c::]:6789 error -101 [ 361.804797][ T3679] libceph: mon0 (1)[c::]:6789 connect error [ 362.069107][ T3679] libceph: connect (1)[c::]:6789 error -101 [ 362.075518][ T3679] libceph: mon0 (1)[c::]:6789 connect error [ 362.461785][ T7810] loop2: detected capacity change from 0 to 40427 [ 362.519599][ T7810] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 362.583606][ T7810] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 362.616869][ T4178] libceph: connect (1)[c::]:6789 error -101 [ 362.621130][ T7832] loop0: detected capacity change from 0 to 256 [ 362.629414][ T4178] libceph: mon0 (1)[c::]:6789 connect error [ 362.645585][ T7810] F2FS-fs (loop2): invalid crc value [ 362.683079][ T7832] exfat: Deprecated parameter 'namecase' [ 362.719899][ T7810] F2FS-fs (loop2): Found nat_bits in checkpoint [ 362.746118][ T7832] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 362.769287][ T7836] tap0: tun_chr_ioctl cmd 1074025677 [ 362.791347][ T7836] tap0: linktype set to 0 [ 362.891502][ T7810] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 362.913877][ T7810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 362.962516][ T7819] ceph: No mds server is up or the cluster is laggy [ 362.970537][ T27] audit: type=1804 audit(1723379654.935:284): pid=7832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.881" name=2F6E6577726F6F742F352F66696C65302FB7DB7DE6B6BA6D6EBBDBE176BA5DBF dev="loop0" ino=1048748 res=1 errno=0 [ 363.405090][ T7844] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 363.905696][ T7587] syz-executor: attempt to access beyond end of device [ 363.905696][ T7587] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 364.247423][ T3679] libceph: connect (1)[c::]:6789 error -101 [ 364.264220][ T3679] libceph: mon0 (1)[c::]:6789 connect error [ 366.086618][ T4438] vhci_hcd: vhci_device speed not set [ 366.133597][ T7920] loop0: detected capacity change from 0 to 512 [ 366.213861][ T7920] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 366.304286][ T7921] loop3: detected capacity change from 0 to 4096 [ 366.394816][ T7921] NILFS (loop3): invalid segment: Checksum error in segment payload [ 366.417171][ T7921] NILFS (loop3): trying rollback from an earlier position [ 366.429804][ T7927] loop4: detected capacity change from 0 to 256 [ 366.473083][ T7921] NILFS (loop3): recovery complete [ 366.515394][ T7931] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.707663][ T7921] overlayfs: upper fs does not support tmpfile. [ 366.741648][ T7921] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 366.859942][ T7921] overlayfs: failed to set xattr on upper [ 366.865703][ T7921] overlayfs: ...falling back to index=off,metacopy=off. [ 367.051936][ T7948] loop4: detected capacity change from 0 to 256 [ 367.135504][ T7948] FAT-fs (loop4): Directory bread(block 64) failed [ 367.155330][ T7948] FAT-fs (loop4): Directory bread(block 65) failed [ 367.189157][ T7948] FAT-fs (loop4): Directory bread(block 66) failed [ 367.228506][ T7948] FAT-fs (loop4): Directory bread(block 67) failed [ 367.235892][ T7948] FAT-fs (loop4): Directory bread(block 68) failed [ 367.275682][ T7950] loop2: detected capacity change from 0 to 4096 [ 367.282296][ T7948] FAT-fs (loop4): Directory bread(block 69) failed [ 367.303239][ T7948] FAT-fs (loop4): Directory bread(block 70) failed [ 367.337905][ T7948] FAT-fs (loop4): Directory bread(block 71) failed [ 367.346045][ T7948] FAT-fs (loop4): Directory bread(block 72) failed [ 367.365175][ T7948] FAT-fs (loop4): Directory bread(block 73) failed [ 367.497928][ T7950] ntfs3: loop2: failed to convert "0080" to cp852 [ 367.564015][ T7950] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 367.601339][ T7950] ntfs3: loop2: failed to convert name for inode 1e. [ 367.900485][ T7942] loop1: detected capacity change from 0 to 32768 [ 367.932649][ T7942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.903 (7942) [ 368.022283][ T7942] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.060205][ T7942] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 368.105572][ T7942] BTRFS info (device loop1): setting nodatasum [ 368.161220][ T7942] BTRFS info (device loop1): force zlib compression, level 3 [ 368.196846][ T7942] BTRFS info (device loop1): allowing degraded mounts [ 368.203781][ T7942] BTRFS info (device loop1): turning on flush-on-commit [ 368.233728][ T7942] BTRFS info (device loop1): allowing degraded mounts [ 368.256816][ T7942] BTRFS info (device loop1): using free space tree [ 368.278702][ T7944] loop0: detected capacity change from 0 to 32768 [ 368.342966][ T7944] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 368.383872][ T7942] BTRFS info (device loop1): enabling ssd optimizations [ 368.394531][ T7944] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 368.527297][ T3679] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 368.551336][ T7944] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 368.583699][ T4178] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 368.596698][ T4178] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 368.700496][ T5408] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.744368][ T4178] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 147ms [ 368.768055][ T3679] usb 3-1: Using ep0 maxpacket: 32 [ 368.790051][ T4178] gfs2: fsid=syz:syz.0: jid=0: Done [ 368.797161][ T7944] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 368.854963][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.917'. [ 368.887365][ T3679] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 368.897747][ T7991] netlink: 'syz.4.917': attribute type 10 has an invalid length. [ 369.066804][ T3679] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 369.079878][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.098787][ T3679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.122610][ T7991] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 369.124320][ T3679] usb 3-1: Product: syz [ 369.136598][ T3679] usb 3-1: Manufacturer: syz [ 369.141722][ T3679] usb 3-1: SerialNumber: syz [ 369.148094][ T3679] usb 3-1: config 0 descriptor?? [ 369.166934][ T7966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.211134][ T3679] hub 3-1:0.0: bad descriptor, ignoring hub [ 369.241770][ T7998] loop3: detected capacity change from 0 to 256 [ 369.247658][ T3679] hub: probe of 3-1:0.0 failed with error -5 [ 369.299012][ T3679] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 369.303630][ T27] audit: type=1326 audit(1723379661.275:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a3f779f9 code=0x0 [ 369.582164][ T3051] usb 3-1: USB disconnect, device number 8 [ 369.586575][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 369.652750][ T8007] loop1: detected capacity change from 0 to 1024 [ 369.784959][ T8007] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.924: Invalid block bitmap block 0 in block_group 0 [ 369.867332][ T8007] Quota error (device loop1): write_blk: dquota write failed [ 369.875070][ T8007] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 369.891554][ T8007] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.924: Failed to acquire dquot type 0 [ 369.906216][ T8007] EXT4-fs error (device loop1): ext4_free_blocks:6213: comm syz.1.924: Freeing blocks not in datazone - block = 0, count = 4096 [ 369.932175][ T8007] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.924: Invalid inode bitmap blk 0 in block_group 0 [ 369.948141][ T7900] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 369.958271][ T7900] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:20: Failed to release dquot type 0 [ 369.978522][ T8007] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 369.987651][ T8007] EXT4-fs (loop1): 1 orphan inode deleted [ 369.993481][ T8007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 370.842474][ T5408] EXT4-fs (loop1): unmounting filesystem. [ 371.874412][ T8040] loop3: detected capacity change from 0 to 64 [ 371.940250][ T8040] hfs: found bad thread record in catalog [ 371.999531][ T8040] hfs: get root inode failed [ 373.059199][ T8052] loop2: detected capacity change from 0 to 512 [ 373.204839][ T8052] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 373.339695][ T8052] EXT4-fs (loop2): mount failed [ 373.906012][ T8037] loop0: detected capacity change from 0 to 32768 [ 373.921064][ T8033] loop1: detected capacity change from 0 to 40427 [ 373.959295][ T8037] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 scanned by syz.0.933 (8037) [ 373.971547][ T8033] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 373.977675][ T2034] pvrusb2: request_firmware fatal error with code=-110 [ 373.979636][ T8033] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 374.005956][ T8037] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 374.030916][ T2034] pvrusb2: Failure uploading firmware1 [ 374.040625][ T8033] F2FS-fs (loop1): invalid crc value [ 374.056676][ T8037] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 374.065955][ T8037] BTRFS info (device loop0): using free space tree [ 374.067093][ T2034] pvrusb2: Device initialization was not successful. [ 374.076910][ T8033] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 374.178975][ T8037] BTRFS error (device loop0): open_ctree failed [ 374.188514][ T2034] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 374.248190][ T2034] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 374.322995][ T4180] pvrusb2: Device being rendered inoperable [ 374.329882][ T2034] pvrusb2: Failed to submit write-control URB status=-19 [ 374.366926][ T2034] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 374.436832][ T2034] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 374.650427][ T8048] loop4: detected capacity change from 0 to 32768 [ 374.787031][ T8048] XFS (loop4): Mounting V5 Filesystem [ 374.934517][ T8048] XFS (loop4): Ending clean mount [ 374.956372][ T8101] loop3: detected capacity change from 0 to 512 [ 374.975840][ T8101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.994189][ T8101] EXT4-fs (loop3): Test dummy encryption mode enabled [ 375.054265][ T8101] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.948: iget: bogus i_mode (0) [ 375.082758][ T8101] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.948: couldn't read orphan inode 17 (err -117) [ 375.103234][ T6655] XFS (loop4): Unmounting Filesystem [ 375.103817][ T8101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 375.352999][ T8110] loop0: detected capacity change from 0 to 512 [ 375.384762][ T8110] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 375.402880][ T8110] EXT4-fs (loop0): mount failed [ 375.791774][ T8119] loop0: detected capacity change from 0 to 1024 [ 375.799398][ T8101] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 375.802361][ T8119] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 375.821158][ T8119] EXT4-fs (loop0): write access will be enabled during recovery [ 375.826118][ T8101] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.948: bg 0: block 7: invalid block bitmap [ 375.830331][ T8119] EXT4-fs (loop0): barriers disabled [ 375.851366][ T8119] JBD2: no valid journal superblock found [ 375.857992][ T8119] EXT4-fs (loop0): error loading journal [ 376.128703][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 377.136069][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.197444][ T6532] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 377.233745][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.254687][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.278929][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.331093][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.358052][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.395087][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.428931][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.445300][ T8137] loop2: detected capacity change from 0 to 24 [ 377.454307][ T6532] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /92/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 377.596695][ T4438] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 377.624310][ T8139] loop2: detected capacity change from 0 to 512 [ 377.660946][ T8139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 377.671898][ T8139] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 377.731946][ T8139] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 377.876572][ T4438] usb 1-1: Using ep0 maxpacket: 16 [ 377.885507][ T7587] EXT4-fs (loop2): unmounting filesystem. [ 378.027026][ T4438] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.051566][ T4438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.063737][ T4438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.074158][ T4438] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 378.084561][ T4438] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.189734][ T4438] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 378.198941][ T4438] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 378.199407][ T6532] EXT4-fs (loop3): unmounting filesystem. [ 378.207054][ T4438] usb 1-1: Manufacturer: syz [ 378.233174][ T4438] usb 1-1: config 0 descriptor?? [ 378.461751][ T3640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.471592][ T3640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.482797][ T3640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.492556][ T3640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.505087][ T3640] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 378.514947][ T3640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.586620][ T4438] rc_core: IR keymap rc-hauppauge not found [ 378.597266][ T4438] Registered IR keymap rc-empty [ 378.605734][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.650392][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 378.659119][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.696292][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.704976][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.708503][ T4438] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 378.713500][ T8151] device bridge_slave_0 entered promiscuous mode [ 378.725927][ T4438] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 378.746758][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.757802][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.764959][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.775877][ T8151] device bridge_slave_1 entered promiscuous mode [ 378.788591][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.807732][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.817055][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.826343][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.846773][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.860008][ T8151] team0: Port device team_slave_0 added [ 378.871000][ T8151] team0: Port device team_slave_1 added [ 378.876863][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.903613][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.910824][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.918304][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.944598][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.957444][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.964425][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.972954][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.991373][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.004334][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.022165][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.066779][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.096699][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.137363][ T4438] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.198012][ T4438] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 379.210679][ T4438] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 379.227966][ T8164] loop2: detected capacity change from 0 to 16 [ 379.234667][ T8164] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 379.288266][ T8151] device hsr_slave_0 entered promiscuous mode [ 379.312343][ T8151] device hsr_slave_1 entered promiscuous mode [ 379.351687][ T8151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.367786][ T8151] Cannot create hsr debugfs directory [ 379.702295][ T8151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.798278][ T8151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.884976][ T8168] loop2: detected capacity change from 0 to 32768 [ 379.893999][ T8151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.981570][ T8151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.205458][ T8151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.232365][ T8151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.245539][ T8151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.258422][ T8151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.392657][ T3679] usb 1-1: USB disconnect, device number 7 [ 380.434499][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.491562][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.501739][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.528811][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.549698][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.567541][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.572318][ T3640] Bluetooth: hci1: command tx timeout [ 380.576042][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.589051][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.637048][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.645147][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.668645][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.687180][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.694392][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.733521][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.742525][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.784946][ T8151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.807686][ T8151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.827844][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.844853][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.853966][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.872481][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.885055][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.905709][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.915155][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.930300][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.946199][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.967462][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.184269][ T8176] loop4: detected capacity change from 0 to 32768 [ 382.057496][ T8179] loop0: detected capacity change from 0 to 40427 [ 382.145176][ T8179] F2FS-fs (loop0): invalid crc value [ 382.320670][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.329040][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.340008][ T8179] F2FS-fs (loop0): Found nat_bits in checkpoint [ 382.368973][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.425469][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.448011][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.462760][ T8179] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 382.485108][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.495057][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.503848][ T8179] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 382.505442][ T8212] loop4: detected capacity change from 0 to 16 [ 382.530619][ T8151] device veth0_vlan entered promiscuous mode [ 382.543966][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.552836][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.567046][ T8151] device veth1_vlan entered promiscuous mode [ 382.573027][ T8212] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 382.645207][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 382.652963][ T3637] Bluetooth: hci1: command tx timeout [ 382.660338][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 382.669190][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.679164][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.694226][ T8151] device veth0_macvtap entered promiscuous mode [ 382.708808][ T8151] device veth1_macvtap entered promiscuous mode [ 382.716692][ T27] audit: type=1800 audit(1723379674.685:286): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.977" name="bus" dev="loop0" ino=14 res=0 errno=0 [ 382.755388][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.767373][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.783593][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.794645][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.811095][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.828316][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.844939][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.856560][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.866894][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.877657][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.913556][ T7541] syz-executor: attempt to access beyond end of device [ 382.913556][ T7541] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 382.928476][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.942867][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 382.965741][ T8203] loop2: detected capacity change from 0 to 40427 [ 382.965858][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 382.999795][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.027946][ T8203] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 383.033629][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.050765][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.062737][ T8203] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 383.096746][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.106695][ T8203] F2FS-fs (loop2): invalid crc value [ 383.116616][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.132264][ T8203] F2FS-fs (loop2): Found nat_bits in checkpoint [ 383.137552][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.149272][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.188471][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.246760][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.266655][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.289658][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.297100][ T8203] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 383.310662][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.328007][ T8203] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 383.337783][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.370913][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.387430][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.418912][ T8151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.436964][ T8151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.463526][ T8151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.506623][ T8151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.552556][ T8209] loop1: detected capacity change from 0 to 32768 [ 383.586030][ T8219] loop0: detected capacity change from 0 to 512 [ 383.622045][ T8209] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 383.654364][ T8219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 383.673419][ T8209] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 383.710801][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.720026][ T3729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.730691][ T8219] EXT4-fs (loop0): 1 truncate cleaned up [ 383.736374][ T8219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 383.774748][ T3729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.783363][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.798122][ T8209] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 383.821216][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 383.869650][ T7587] syz-executor: attempt to access beyond end of device [ 383.869650][ T7587] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 383.873313][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 383.901814][ T7587] syz-executor: attempt to access beyond end of device [ 383.901814][ T7587] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 383.923225][ T152] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 383.924651][ T8219] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 383.930800][ T152] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 384.022594][ T8214] loop4: detected capacity change from 0 to 32768 [ 384.051606][ T8214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.983 (8214) [ 384.068043][ T152] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 384.076124][ T152] gfs2: fsid=syz:syz.0: jid=0: Done [ 384.082765][ T8209] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 384.095494][ T8214] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 384.158386][ T8214] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 384.186052][ T7541] EXT4-fs (loop0): unmounting filesystem. [ 384.195708][ T8214] BTRFS info (device loop4): setting nodatasum [ 384.275417][ T8214] BTRFS info (device loop4): force zlib compression, level 3 [ 384.311963][ T8214] BTRFS info (device loop4): allowing degraded mounts [ 384.336607][ T8214] BTRFS info (device loop4): turning on flush-on-commit [ 384.362112][ T8214] BTRFS info (device loop4): allowing degraded mounts [ 384.369277][ T8214] BTRFS info (device loop4): using free space tree [ 384.379551][ T7910] kworker/u4:24: attempt to access beyond end of device [ 384.379551][ T7910] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 385.057537][ T3640] Bluetooth: hci1: command tx timeout [ 385.256768][ T8214] BTRFS info (device loop4): enabling ssd optimizations [ 385.283866][ T8249] loop1: detected capacity change from 0 to 1024 [ 385.479084][ T3729] hfsplus: b-tree write err: -5, ino 4 [ 385.614402][ T6655] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.666795][ T7910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.962902][ T7910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.070713][ T7910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.201932][ T8261] loop4: detected capacity change from 0 to 512 [ 386.209588][ T8261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.219189][ T8261] EXT4-fs (loop4): Test dummy encryption mode enabled [ 386.269938][ T8261] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz.4.990: iget: bogus i_mode (0) [ 386.287452][ T8261] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.990: couldn't read orphan inode 17 (err -117) [ 386.296984][ T7910] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.311566][ T8261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 386.368288][ T8261] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.990: bg 0: block 7: invalid block bitmap [ 386.684166][ T8270] loop0: detected capacity change from 0 to 16 [ 386.742793][ T8270] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 387.061215][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.080470][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.126865][ T3637] Bluetooth: hci1: command tx timeout [ 387.250087][ T8286] loop3: detected capacity change from 0 to 2048 [ 387.275948][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.310086][ T8286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.397486][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.471843][ T3640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.474941][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.508569][ T3640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.517803][ T3640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.537247][ T3640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.544938][ T3640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.555274][ T3640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.587485][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.624549][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.729626][ T8269] loop1: detected capacity change from 0 to 32768 [ 387.794556][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.813969][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.843651][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.873775][ T6655] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /65/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 387.920575][ T8288] loop0: detected capacity change from 0 to 32768 [ 387.934363][ T8269] XFS (loop1): Mounting V5 Filesystem [ 388.193568][ T8269] XFS (loop1): Ending clean mount [ 388.353418][ T5408] XFS (loop1): Unmounting Filesystem [ 388.458093][ T8292] chnl_net:caif_netlink_parms(): no params data found [ 389.218682][ T3637] Bluetooth: hci1: command tx timeout [ 389.619150][ T3637] Bluetooth: hci3: command tx timeout [ 389.945420][ T6655] EXT4-fs (loop4): unmounting filesystem. [ 389.966452][ T7910] device hsr_slave_0 left promiscuous mode [ 389.974206][ T7910] device hsr_slave_1 left promiscuous mode [ 390.035915][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.108771][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.143427][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.172681][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.197497][ T7910] device bridge_slave_1 left promiscuous mode [ 390.205778][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.242402][ T7910] device bridge_slave_0 left promiscuous mode [ 390.252501][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.363933][ T7910] device veth1_macvtap left promiscuous mode [ 390.385831][ T7910] device veth0_macvtap left promiscuous mode [ 390.393612][ T7910] device veth1_vlan left promiscuous mode [ 390.405081][ T7910] device veth0_vlan left promiscuous mode [ 391.403165][ T8352] loop3: detected capacity change from 0 to 32768 [ 391.414316][ T8352] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.1012 (8352) [ 391.455526][ T8352] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 391.496803][ T8352] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 391.526967][ T8352] BTRFS info (device loop3): using free space tree [ 391.576171][ T3640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.588187][ T3640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.600328][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 391.610931][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.619136][ T3640] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 391.628522][ T3640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 391.688111][ T3640] Bluetooth: hci3: command tx timeout [ 391.762724][ T8378] loop1: detected capacity change from 0 to 512 [ 391.805072][ T8378] ext4: Unknown parameter 'measure' [ 391.818144][ T8352] BTRFS info (device loop3): enabling ssd optimizations [ 391.857763][ T27] audit: type=1800 audit(1723379683.835:287): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1012" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 392.033879][ T8151] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 392.157923][ T8383] x_tables: ip_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 312 [ 392.347562][ T8384] loop1: detected capacity change from 0 to 512 [ 392.401671][ T8384] EXT4-fs: Ignoring removed bh option [ 392.470791][ T27] audit: type=1326 audit(1723379684.445:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.3.1016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeabd779f9 code=0x0 [ 392.520944][ T8384] EXT4-fs (loop1): 1 truncate cleaned up [ 392.533860][ T8384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 392.626254][ T8383] EXT4-fs error (device loop1): ext4_find_dest_de:2113: inode #2: block 13: comm syz.1.1015: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 392.939725][ T8390] loop3: detected capacity change from 0 to 32768 [ 392.994483][ T7910] team0 (unregistering): Port device team_slave_1 removed [ 392.999223][ T3681] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x3c0/0x4e0, xfs_sb_quiet block 0x0 [ 393.029388][ T3681] XFS (loop3): Unmount and run xfs_repair [ 393.038350][ T3681] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 393.045772][ T3681] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 393.062201][ T3681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.072998][ T7910] team0 (unregistering): Port device team_slave_0 removed [ 393.077919][ T3681] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 393.089948][ T3681] 00000030: 00 00 00 00 00 00 00 17 00 00 00 00 00 00 24 40 ..............$@ [ 393.099054][ T3681] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 393.108156][ T3681] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 393.117105][ T3681] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 393.126694][ T3681] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 393.180949][ T7910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.263442][ T7910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.401934][ T8387] loop3: detected capacity change from 0 to 512 [ 393.463904][ T8387] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 393.474556][ T8387] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 393.485363][ T8387] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1016: Failed to acquire dquot type 1 [ 393.515243][ T8387] EXT4-fs (loop3): 1 truncate cleaned up [ 393.526687][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 393.535691][ T8387] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 393.695881][ T3640] Bluetooth: hci4: command tx timeout [ 393.719727][ T8151] EXT4-fs (loop3): unmounting filesystem. [ 393.766812][ T3640] Bluetooth: hci3: command tx timeout [ 393.996141][ T7910] bond0 (unregistering): Released all slaves [ 394.082886][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.090293][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.098641][ T8292] device bridge_slave_0 entered promiscuous mode [ 394.106982][ T8292] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.114334][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.123083][ T8292] device bridge_slave_1 entered promiscuous mode [ 394.269714][ T8292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.379493][ T8292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.167187][ T3640] Bluetooth: hci4: command tx timeout [ 396.181088][ T8389] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 396.287483][ T3637] Bluetooth: hci3: command tx timeout [ 396.331877][ T8292] team0: Port device team_slave_0 added [ 396.355953][ T5408] EXT4-fs (loop1): unmounting filesystem. [ 396.397836][ T8292] team0: Port device team_slave_1 added [ 396.515904][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.543462][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.546778][ T8424] loop1: detected capacity change from 0 to 512 [ 396.706638][ T8292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.784075][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.822540][ T8424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 396.837684][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.846705][ T8424] ext4 filesystem being mounted at /130/bus supports timestamps until 2038 (0x7fffffff) [ 396.946815][ T8292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.066371][ T8413] loop0: detected capacity change from 0 to 32768 [ 397.082954][ T5408] EXT4-fs (loop1): unmounting filesystem. [ 397.122133][ T8413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1021 (8413) [ 397.262128][ T8413] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 397.340271][ T8413] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 397.386667][ T8413] BTRFS info (device loop0): using free space tree [ 397.399986][ T8292] device hsr_slave_0 entered promiscuous mode [ 397.420624][ T8292] device hsr_slave_1 entered promiscuous mode [ 397.457378][ T8292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.464986][ T8292] Cannot create hsr debugfs directory [ 397.481247][ T8361] chnl_net:caif_netlink_parms(): no params data found [ 397.802046][ T27] audit: type=1326 audit(1723379689.775:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 397.807754][ T8413] BTRFS info (device loop0): enabling ssd optimizations [ 397.844981][ T27] audit: type=1326 audit(1723379689.805:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.073716][ T8361] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.084626][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.093636][ T27] audit: type=1326 audit(1723379689.805:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.137890][ T7541] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.140952][ T8361] device bridge_slave_0 entered promiscuous mode [ 398.225156][ T27] audit: type=1326 audit(1723379689.805:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.246957][ T3640] Bluetooth: hci4: command tx timeout [ 398.338554][ T8361] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.347676][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.387531][ T8361] device bridge_slave_1 entered promiscuous mode [ 398.396322][ T27] audit: type=1326 audit(1723379689.805:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.496648][ T27] audit: type=1326 audit(1723379689.805:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.570594][ T27] audit: type=1326 audit(1723379689.805:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.681720][ T27] audit: type=1326 audit(1723379689.805:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.776714][ T27] audit: type=1326 audit(1723379689.805:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.876549][ T27] audit: type=1326 audit(1723379689.805:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb7b3779f9 code=0x7ffc0000 [ 398.935882][ T8361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.984995][ T8361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.213981][ T8361] team0: Port device team_slave_0 added [ 399.430971][ T8361] team0: Port device team_slave_1 added [ 399.651325][ T8485] loop0: detected capacity change from 0 to 32768 [ 399.707450][ T8361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.714539][ T8361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.803198][ T8361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.970397][ T8490] loop1: detected capacity change from 0 to 40427 [ 399.992000][ T8361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.007003][ T8361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.016348][ T8490] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 400.101939][ T8490] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 400.129903][ T8490] F2FS-fs (loop1): invalid crc value [ 400.148744][ T8361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.185585][ T8490] F2FS-fs (loop1): Found nat_bits in checkpoint [ 400.326728][ T3640] Bluetooth: hci4: command tx timeout [ 400.343697][ T8361] device hsr_slave_0 entered promiscuous mode [ 400.377032][ T8490] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 400.384198][ T8490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 400.405838][ T8361] device hsr_slave_1 entered promiscuous mode [ 400.457412][ T8361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.466118][ T8361] Cannot create hsr debugfs directory [ 400.613059][ T8490] syz.1.1030: attempt to access beyond end of device [ 400.613059][ T8490] loop1: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 400.890585][ T8292] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.994844][ T8292] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.003913][ T5408] syz-executor: attempt to access beyond end of device [ 401.003913][ T5408] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 401.109618][ T3640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.134728][ T3640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.144371][ T3640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.152737][ T3640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.162706][ T3640] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 401.170414][ T3640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.226158][ T8361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.296101][ T8292] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.339049][ T8292] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.442655][ T8361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.579584][ T8361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.728770][ T8361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.859901][ T7910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.924424][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.943906][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.952787][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.125132][ T8292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.210416][ T3640] Bluetooth: hci1: command tx timeout [ 403.234866][ T7910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.315560][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.324483][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.338222][ T8292] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.388569][ T7910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.680400][ T8548] loop1: detected capacity change from 0 to 1024 [ 405.800040][ T3640] Bluetooth: hci1: command tx timeout [ 406.069942][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.089539][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.109772][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.116949][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.208302][ T7910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.259332][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.281644][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.312613][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.336079][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.343276][ T7303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.355338][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 406.388782][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 406.459277][ T8361] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.534557][ T8361] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.600644][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 406.622850][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 406.664278][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.689151][ T8361] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.700014][ T8566] sp0: Synchronizing with TNC [ 406.730455][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.746400][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 406.768161][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.785689][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 406.801495][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.883506][ T8292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.900334][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.916239][ T8361] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.984742][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.004326][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.243472][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.253319][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.262119][ T8521] device bridge_slave_0 entered promiscuous mode [ 407.271831][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.279150][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.305007][ T8521] device bridge_slave_1 entered promiscuous mode [ 407.495823][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.778683][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.847070][ T3640] Bluetooth: hci1: command tx timeout [ 407.858264][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.866373][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.891382][ T8361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.910783][ T8292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.045363][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.054147][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.080295][ T8521] team0: Port device team_slave_0 added [ 408.100847][ T8361] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.121789][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.137253][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.229911][ T8521] team0: Port device team_slave_1 added [ 408.343754][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.361215][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.372288][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.379463][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.401597][ T8292] device veth0_vlan entered promiscuous mode [ 408.417599][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.424571][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.489432][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.577347][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.585646][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.605896][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.617875][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.625013][ T7303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.643341][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.667768][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.686826][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.695237][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.750939][ T8292] device veth1_vlan entered promiscuous mode [ 408.777086][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.788025][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.825032][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.926255][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.934959][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.948355][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.967111][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.987901][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.007071][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.015903][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.173534][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 409.182002][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.190760][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.203711][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.226702][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.257185][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.358085][ T8361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.384388][ T8292] device veth0_macvtap entered promiscuous mode [ 409.412039][ T8627] loop1: detected capacity change from 0 to 4096 [ 409.412871][ T8521] device hsr_slave_0 entered promiscuous mode [ 409.434441][ T8521] device hsr_slave_1 entered promiscuous mode [ 409.454566][ T8627] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 409.466741][ T8521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.477450][ T8521] Cannot create hsr debugfs directory [ 409.481961][ T8627] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 409.505435][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.533353][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.612291][ T3730] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 409.645209][ T8292] device veth1_macvtap entered promiscuous mode [ 409.668000][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.683313][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.803569][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.827288][ T5408] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 409.877350][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.897022][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.912309][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.922589][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.933328][ T3637] Bluetooth: hci1: command tx timeout [ 409.955747][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.996592][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.042474][ T8646] loop0: detected capacity change from 0 to 512 [ 410.049796][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.061138][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.072120][ T8646] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 410.091670][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.118715][ T8292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.132536][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.136644][ T8646] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1055: invalid block [ 410.142264][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.257082][ T8646] EXT4-fs (loop0): Remounting filesystem read-only [ 410.305295][ T8646] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1055: invalid indirect mapped block 4294967295 (level 1) [ 410.337817][ T8646] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1055: invalid indirect mapped block 4294967295 (level 1) [ 410.352986][ T8646] EXT4-fs (loop0): 2 truncates cleaned up [ 410.359448][ T8646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 410.373149][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.397181][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.426232][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.465042][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.484554][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.504326][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.514245][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.533295][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.544305][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.562140][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.584580][ T8292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.599550][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.602174][ T7541] EXT4-fs (loop0): unmounting filesystem. [ 410.615041][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.689048][ T8292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.724827][ T8292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.734708][ T8292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.743571][ T8292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.878653][ C0] eth0: bad gso: type: 1, size: 1408 [ 411.134394][ T8361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.170951][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.186833][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.746948][ T3681] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 413.141634][ T7898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.154648][ T7910] device hsr_slave_0 left promiscuous mode [ 413.166679][ T7898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.182042][ T7910] device hsr_slave_1 left promiscuous mode [ 413.199114][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.207416][ T3681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.223908][ T3681] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.235143][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.244959][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.256774][ T3681] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.266836][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.282471][ T7910] device bridge_slave_1 left promiscuous mode [ 413.293916][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.296365][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.310956][ T7910] device bridge_slave_0 left promiscuous mode [ 413.325825][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.350165][ T3681] usb 1-1: config 0 descriptor?? [ 413.362339][ T7910] device hsr_slave_0 left promiscuous mode [ 413.372694][ T7910] device hsr_slave_1 left promiscuous mode [ 413.389166][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.407461][ T3681] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 413.430450][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.440540][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.449612][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.457888][ T7910] device bridge_slave_1 left promiscuous mode [ 413.464218][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.474573][ T7910] device bridge_slave_0 left promiscuous mode [ 413.489523][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.552146][ T7910] device veth1_macvtap left promiscuous mode [ 413.558581][ T7910] device veth0_macvtap left promiscuous mode [ 413.564827][ T7910] device veth1_vlan left promiscuous mode [ 413.571281][ T7910] device veth0_vlan left promiscuous mode [ 413.581134][ T7910] device veth1_macvtap left promiscuous mode [ 413.587776][ T7910] device veth0_macvtap left promiscuous mode [ 413.594052][ T7910] device veth0_vlan left promiscuous mode [ 414.443135][ T7910] team0 (unregistering): Port device team_slave_1 removed [ 414.498829][ T7910] team0 (unregistering): Port device team_slave_0 removed [ 414.551763][ T7910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.601526][ T7910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.150159][ T7910] bond0 (unregistering): Released all slaves [ 415.213956][ T26] usb 1-1: USB disconnect, device number 8 [ 415.732470][ T7910] team0 (unregistering): Port device team_slave_1 removed [ 415.780510][ T7910] team0 (unregistering): Port device team_slave_0 removed [ 415.823343][ T7910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.869004][ T7910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.080730][ T7910] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 416.376838][ T7910] bond0 (unregistering): Released all slaves [ 416.467729][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.502377][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.515651][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.596304][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 416.612900][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 416.642090][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.682806][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 416.713572][ T8725] loop1: detected capacity change from 0 to 1024 [ 416.724152][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.740138][ T8725] JBD2: no valid journal superblock found [ 416.747706][ T8361] device veth0_vlan entered promiscuous mode [ 416.754969][ T8725] EXT4-fs (loop1): error loading journal [ 416.764700][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.777194][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.787544][ T8361] device veth1_vlan entered promiscuous mode [ 417.099443][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 417.117753][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 417.199378][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.268076][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.451517][ T8361] device veth0_macvtap entered promiscuous mode [ 417.619096][ T8361] device veth1_macvtap entered promiscuous mode [ 417.803130][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 417.811522][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 417.826331][ T8521] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.988986][ T8521] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 417.990119][ T8746] loop1: detected capacity change from 0 to 512 [ 418.019551][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.054242][ T8746] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 418.067303][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.097961][ T8746] EXT4-fs (loop1): Remounting filesystem read-only [ 418.105391][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.116056][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.122117][ T8746] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1067: invalid indirect mapped block 4278190080 (level 0) [ 418.126026][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.153380][ T8746] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1067: invalid indirect mapped block 1 (level 1) [ 418.153600][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.183810][ T8746] EXT4-fs (loop1): 1 truncate cleaned up [ 418.195905][ T8752] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1069'. [ 418.207696][ T8746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 418.216672][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.257691][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.283511][ T8361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.319731][ T8521] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 418.332396][ T5408] EXT4-fs (loop1): unmounting filesystem. [ 418.354984][ T8521] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 418.372478][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.414204][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.471311][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.504338][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.520407][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.532010][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.542621][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.561290][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.572303][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.987100][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.134305][ T8361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.244329][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.300174][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.321922][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1072'. [ 419.333235][ T8361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.345315][ T8361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.361834][ T8361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.386396][ T8361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.622072][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.645645][ T7898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.682809][ T7898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.700762][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.725457][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 419.734950][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 419.743000][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.785880][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.796173][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.796632][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.837623][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.846004][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.853157][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.861227][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.871048][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.879662][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.886788][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.894477][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 419.917526][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 419.971388][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 419.990789][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.992122][ T8774] loop0: detected capacity change from 0 to 2048 [ 420.001584][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.029864][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.044190][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.053203][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.061907][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 420.061915][ T8774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 420.070492][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.278673][ T3640] Bluetooth: hci0: command tx timeout [ 420.319768][ T8521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.049064][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 421.049079][ T27] audit: type=1800 audit(1723379713.025:303): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1075" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 421.119232][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.151357][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.179661][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.210105][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.343916][ T7541] EXT4-fs (loop0): unmounting filesystem. [ 422.629842][ T8801] loop4: detected capacity change from 0 to 1024 [ 422.779185][ T8801] syz.4.1079: attempt to access beyond end of device [ 422.779185][ T8801] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 422.872432][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.884660][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.909460][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.032999][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.048439][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.076750][ T3765] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 423.103430][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.113212][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.132438][ T8521] device veth0_vlan entered promiscuous mode [ 423.141401][ T8808] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 423.144826][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.162770][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.192958][ T8521] device veth1_vlan entered promiscuous mode [ 423.269081][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 423.298293][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 423.327921][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.352974][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.379537][ T8521] device veth0_macvtap entered promiscuous mode [ 423.407307][ T8521] device veth1_macvtap entered promiscuous mode [ 423.446890][ T3765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.478350][ T3765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.498143][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.527732][ T3765] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.552707][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.583127][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.594760][ T3765] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.627633][ T3765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.636770][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.683132][ T3765] usb 1-1: config 0 descriptor?? [ 423.690724][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.713012][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.730792][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.750434][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.760828][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.772065][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.784302][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.793614][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.803472][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 423.815289][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 423.824802][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.836064][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.850122][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.864113][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.890295][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x1 [ 423.900015][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.914212][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 423.927195][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.938164][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 423.951626][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 423.963098][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.984472][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.001755][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.015928][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.032507][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.043418][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x4 [ 424.061101][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.073311][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.090405][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x2 [ 424.101775][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.121401][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.133930][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.162128][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.182386][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.192767][ T3765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 424.207782][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.225765][ T3765] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 424.235036][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 424.246734][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.254163][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x4 [ 424.272712][ T8521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.292776][ T8521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.311472][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.325030][ T3765] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 424.338213][ T8521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.348681][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.356105][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.359795][ T8521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.411055][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.452794][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.478135][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.485731][ T8827] loop1: detected capacity change from 0 to 1024 [ 424.499036][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.518532][ T8827] EXT4-fs: Ignoring removed orlov option [ 424.524224][ T8827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.545948][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.558280][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.565797][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.583830][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.592295][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.608226][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.616353][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.635134][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.643537][ T8827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 424.671285][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.685269][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.707119][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.714860][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.726411][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.743800][ T3685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 424.760621][ T3685] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz0 [ 424.940911][ T3730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.955454][ T3730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.013228][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 425.029290][ T3729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.041329][ T5408] EXT4-fs (loop1): unmounting filesystem. [ 425.053919][ T3729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.145605][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.494580][ T8839] loop2: detected capacity change from 0 to 8 [ 426.186969][ T3637] Bluetooth: hci4: command tx timeout [ 426.884106][ T8847] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1090'. [ 426.916718][ T8847] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1090'. [ 427.240125][ T8857] block nbd1: shutting down sockets [ 429.392122][ T8867] loop4: detected capacity change from 0 to 512 [ 429.432567][ T8867] EXT4-fs: Ignoring removed orlov option [ 429.476823][ T8867] EXT4-fs: Ignoring removed i_version option [ 429.529360][ T8867] EXT4-fs (loop4): 1 truncate cleaned up [ 429.535068][ T8867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 429.830412][ T8805] usb 1-1: string descriptor 0 read error: -32 [ 432.632692][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 432.652201][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.661111][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.692283][ T5837] usb 1-1: USB disconnect, device number 9 [ 432.797861][ T8361] EXT4-fs (loop4): unmounting filesystem. [ 433.655419][ T8897] loop3: detected capacity change from 0 to 8 [ 435.240456][ T8898] loop2: detected capacity change from 0 to 256 [ 436.172916][ T2034] pvrusb2: request_firmware fatal error with code=-110 [ 436.196927][ T2034] pvrusb2: Failure uploading firmware1 [ 436.279794][ T8898] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 436.463647][ T2034] pvrusb2: Device initialization was not successful. [ 436.506668][ T3752] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.576704][ T2034] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 436.634136][ T2034] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 436.647797][ T3640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.659247][ T3640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.668546][ T3640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.676378][ T3640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.684562][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 436.693909][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.734323][ T8906] loop2: detected capacity change from 0 to 128 [ 436.938040][ T4180] pvrusb2: Device being rendered inoperable [ 438.385490][ T7906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.670021][ T3637] Bluetooth: hci0: command tx timeout [ 440.163128][ T8929] loop1: detected capacity change from 0 to 512 [ 440.334821][ T8929] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1114: iget: bad extended attribute block 117440512 [ 440.386603][ T8929] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1114: couldn't read orphan inode 15 (err -117) [ 440.387379][ T7906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.417031][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.423829][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.622343][ T8929] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 440.645125][ T8944] overlayfs: empty lowerdir [ 440.957172][ T8945] binder: BINDER_SET_CONTEXT_MGR already set [ 441.083492][ T8945] binder: 8942:8945 ioctl 4018620d 20000200 returned -16 [ 441.116693][ T8929] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1114: Directory hole found for htree leaf block 0 [ 441.130281][ T8945] binder: 8942:8945 ioctl c018620c 20000000 returned -1 [ 441.160381][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.226194][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.234953][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.295618][ T8950] netlink: 'syz.4.1120': attribute type 3 has an invalid length. [ 441.543967][ T3640] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 441.621544][ T8957] loop4: detected capacity change from 0 to 512 [ 441.647480][ T8958] loop2: detected capacity change from 0 to 64 [ 441.658653][ T7906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.678960][ T8929] netlink: 'syz.1.1114': attribute type 4 has an invalid length. [ 441.687388][ T3640] Bluetooth: hci0: command tx timeout [ 441.707082][ T8929] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1114'. [ 441.740475][ T8957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 441.764708][ T8957] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 441.889184][ T5408] EXT4-fs (loop1): unmounting filesystem. [ 442.063686][ T7906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.094985][ T8963] loop3: detected capacity change from 0 to 2048 [ 442.902758][ T8970] loop1: detected capacity change from 0 to 1024 [ 442.925901][ T8970] hfsplus: failed to load root directory [ 442.927507][ T8963] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 442.947069][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 442.966089][ T8952] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1121: Directory hole found for htree leaf block 0 [ 443.185509][ T8979] loop1: detected capacity change from 0 to 256 [ 443.192924][ T8979] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 443.209192][ T8979] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 443.413448][ T8977] loop2: detected capacity change from 0 to 1024 [ 443.557067][ T8977] EXT4-fs: Ignoring removed orlov option [ 443.562770][ T8977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.287060][ T3637] Bluetooth: hci0: command tx timeout [ 444.414233][ T8977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 444.431058][ T8521] EXT4-fs (loop3): unmounting filesystem. [ 444.513357][ T8361] EXT4-fs (loop4): unmounting filesystem. [ 444.528110][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.535242][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.606001][ T8900] device bridge_slave_0 entered promiscuous mode [ 444.624645][ T8988] ip6t_rpfilter: unknown options [ 444.740151][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.801440][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.833793][ T8900] device bridge_slave_1 entered promiscuous mode [ 444.920723][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.932608][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.535285][ T8900] team0: Port device team_slave_0 added [ 445.598602][ T8292] EXT4-fs (loop2): unmounting filesystem. [ 445.644629][ T8900] team0: Port device team_slave_1 added [ 445.785792][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.799686][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.843551][ T9011] loop2: detected capacity change from 0 to 2048 [ 445.876802][ T8900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.923405][ T9011] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 446.226869][ T9011] EXT4-fs error (device loop2): ext4_group_add:1746: comm syz.2.1135: inode #7: comm syz.2.1135: iget: illegal inode # [ 446.247294][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.257104][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.292401][ T9011] EXT4-fs warning (device loop2): ext4_group_add:1748: Error opening resize inode [ 446.326617][ T3637] Bluetooth: hci0: command tx timeout [ 446.354613][ T8900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.400503][ T9004] loop1: detected capacity change from 0 to 40427 [ 446.404200][ T8292] EXT4-fs (loop2): unmounting filesystem. [ 446.441779][ T9004] F2FS-fs (loop1): invalid crc value [ 446.519991][ T9004] F2FS-fs (loop1): Found nat_bits in checkpoint [ 446.680771][ T9004] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 446.691847][ T9039] loop2: detected capacity change from 0 to 2048 [ 446.693720][ T8900] device hsr_slave_0 entered promiscuous mode [ 446.708283][ T8900] device hsr_slave_1 entered promiscuous mode [ 446.725063][ T9004] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 446.736631][ T8900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.754176][ T8900] Cannot create hsr debugfs directory [ 446.771330][ T9039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 446.792677][ T9004] F2FS-fs (loop1): Can't flush 1 in 0 for segs_per_sec 1 != 1 [ 446.989623][ T9046] loop3: detected capacity change from 0 to 1024 [ 447.023869][ T9046] hfsplus: failed to load root directory [ 447.922937][ T8292] EXT4-fs (loop2): unmounting filesystem. [ 448.032036][ T9051] loop3: detected capacity change from 0 to 256 [ 448.048085][ T9051] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 448.086254][ T9051] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 448.665758][ T3637] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 449.500152][ T9065] loop1: detected capacity change from 0 to 512 [ 449.605386][ T9065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 449.644386][ T9065] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038 (0x7fffffff) [ 450.701864][ T9065] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1141: Directory hole found for htree leaf block 0 [ 450.755212][ T9092] loop4: detected capacity change from 0 to 256 [ 450.815222][ T9092] exfat: Deprecated parameter 'utf8' [ 450.854700][ T9092] exfat: Deprecated parameter 'namecase' [ 450.891895][ T9092] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1806556a, utbl_chksum : 0xe619d30d) [ 451.287377][ T9100] loop2: detected capacity change from 0 to 40427 [ 451.306671][ T9100] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 451.314432][ T9100] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 451.364552][ T9100] F2FS-fs (loop2): Found nat_bits in checkpoint [ 451.454575][ T9100] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 451.463723][ T9100] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 451.495215][ T9101] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262144 (only 8 groups) [ 451.581821][ T5408] EXT4-fs (loop1): unmounting filesystem. [ 455.437703][ T9113] loop1: detected capacity change from 0 to 32768 [ 455.485989][ T9113] XFS: ikeep mount option is deprecated. [ 455.525446][ T9113] XFS: ikeep mount option is deprecated. [ 455.587513][ T9113] XFS (loop1): Mounting V5 Filesystem [ 455.638892][ T9113] XFS (loop1): Ending clean mount [ 455.687480][ T9113] XFS (loop1): Quotacheck needed: Please wait. [ 455.785278][ T9128] mmap: syz.2.1156 (9128) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 455.804668][ T9113] XFS (loop1): Quotacheck: Done. [ 456.088624][ T7906] device hsr_slave_0 left promiscuous mode [ 456.097587][ T7906] device hsr_slave_1 left promiscuous mode [ 456.133760][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.149047][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.188816][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.196222][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.218625][ T5408] XFS (loop1): Unmounting Filesystem [ 456.319690][ T7906] device bridge_slave_1 left promiscuous mode [ 456.325983][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.445815][ T7906] device bridge_slave_0 left promiscuous mode [ 456.501782][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.588205][ T7906] device veth1_macvtap left promiscuous mode [ 456.621780][ T7906] device veth0_macvtap left promiscuous mode [ 456.651263][ T7906] device veth1_vlan left promiscuous mode [ 456.667035][ T7906] device veth0_vlan left promiscuous mode [ 457.100390][ T9146] loop4: detected capacity change from 0 to 1024 [ 457.298102][ T9126] loop2: detected capacity change from 0 to 4096 [ 457.298504][ T9126] ntfs3: Unknown parameter '“µX›uX—õXŸ' [ 458.026062][ T9152] hfsplus: xattr searching failed [ 458.036820][ T27] audit: type=1800 audit(1723379750.005:304): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1158" name="file1" dev="loop4" ino=25 res=0 errno=0 [ 458.057760][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.664166][ T9148] loop1: detected capacity change from 0 to 40427 [ 458.691962][ T9148] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 458.714316][ T9148] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 458.757707][ T9148] F2FS-fs (loop1): invalid crc value [ 458.796759][ T9148] F2FS-fs (loop1): Found nat_bits in checkpoint [ 458.902506][ T9148] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 458.909795][ T9148] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 459.164999][ T96] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 459.184612][ T9161] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 459.192826][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 459.264398][ T96] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 459.357230][ T7906] team0 (unregistering): Port device team_slave_1 removed [ 459.569374][ T7906] team0 (unregistering): Port device team_slave_0 removed [ 460.035185][ T9172] loop3: detected capacity change from 0 to 2048 [ 460.076916][ T7906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.235685][ T9172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 460.527160][ T9186] EXT4-fs error (device loop3): ext4_group_add:1746: comm syz.3.1165: inode #7: comm syz.3.1165: iget: illegal inode # [ 461.173099][ T9186] EXT4-fs warning (device loop3): ext4_group_add:1748: Error opening resize inode [ 461.176383][ T9190] loop4: detected capacity change from 0 to 1024 [ 461.201122][ T7906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.225093][ T9190] hfsplus: failed to load root directory [ 461.290859][ T8521] EXT4-fs (loop3): unmounting filesystem. [ 461.332679][ T9193] loop1: detected capacity change from 0 to 256 [ 461.377179][ T9193] exfat: Deprecated parameter 'utf8' [ 461.382547][ T9193] exfat: Deprecated parameter 'namecase' [ 461.632152][ T9193] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1806556a, utbl_chksum : 0xe619d30d) [ 462.032656][ T9188] loop4: detected capacity change from 0 to 256 [ 462.084164][ T9188] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.366793][ T9188] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 462.916763][ T9206] loop3: detected capacity change from 0 to 8 [ 462.959475][ T9206] SQUASHFS error: lzo decompression failed, data probably corrupt [ 462.967590][ T9206] SQUASHFS error: Failed to read block 0x91: -5 [ 462.973984][ T9206] SQUASHFS error: Unable to read metadata cache entry [8f] [ 462.981313][ T9206] SQUASHFS error: Unable to read inode 0x11f [ 464.396410][ T7906] bond0 (unregistering): Released all slaves [ 464.779430][ T8900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 464.822182][ T8900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 464.881350][ T8900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.925006][ T8900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.932091][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 465.036577][ T152] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 465.173962][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.240176][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.254236][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.328698][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.362492][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.383671][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.398797][ T9237] Bluetooth: MGMT ver 1.22 [ 466.073092][ T152] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 466.155742][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.170417][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.177618][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.186685][ T152] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 466.251768][ T152] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.055113][ T8900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.070982][ T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.114204][ T152] usb 4-1: config 0 descriptor?? [ 467.119881][ T8900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.144700][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.163958][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.228919][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.246180][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.253692][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.315116][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.324297][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.344174][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.371978][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.407901][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.427684][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.447342][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.455859][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.496193][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.535838][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.605076][ T152] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 467.625897][ T152] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 468.306858][ T152] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 468.351838][ T9252] tap0: tun_chr_ioctl cmd 2148553947 [ 468.382670][ T9267] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 468.434070][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.461537][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.628393][ C0] eth0: bad gso: type: 1, size: 1408 [ 469.005695][ T9285] loop2: detected capacity change from 0 to 512 [ 469.570859][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.608209][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.862263][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.914416][ T9285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 469.952869][ T9285] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 470.047505][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 470.073784][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.149796][ T3681] usb 4-1: USB disconnect, device number 9 [ 470.171264][ T8900] device veth0_vlan entered promiscuous mode [ 470.214268][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 470.223150][ T9285] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.1194: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 470.233770][ T9292] loop4: detected capacity change from 0 to 512 [ 470.254715][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 470.301512][ T8900] device veth1_vlan entered promiscuous mode [ 470.341237][ T9292] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 470.379293][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.392257][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.430754][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 470.449678][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 470.497588][ T8292] EXT4-fs (loop2): unmounting filesystem. [ 470.524492][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.567746][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.578818][ T8900] device veth0_macvtap entered promiscuous mode [ 470.606897][ T9292] loop4: detected capacity change from 0 to 256 [ 470.620656][ T8900] device veth1_macvtap entered promiscuous mode [ 470.621859][ T9305] loop1: detected capacity change from 0 to 512 [ 470.674236][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.683781][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.687125][ T9305] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1201: casefold flag without casefold feature [ 470.707912][ T9305] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1201: missing EA_INODE flag [ 470.727536][ T9111] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 470.762977][ T9305] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1201: error while reading EA inode 12 err=-117 [ 470.777803][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.807267][ T9305] EXT4-fs (loop1): 1 orphan inode deleted [ 470.814898][ T9305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 470.846565][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.896586][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.949294][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.990736][ T9312] loop4: detected capacity change from 0 to 512 [ 471.000430][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.006944][ T9312] EXT4-fs: Ignoring removed i_version option [ 471.030871][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.040124][ T9312] journal_path: Lookup failure for './file0' [ 471.076862][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.084466][ T9312] EXT4-fs: error: could not find journal device path [ 471.116478][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.145032][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.170073][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.190928][ T5408] EXT4-fs (loop1): unmounting filesystem. [ 471.210043][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.255804][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.267346][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.278168][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.322538][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.367108][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.388279][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.415145][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.475062][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.858222][ T9329] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 472.002506][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.616557][ T3637] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 472.625538][ T3637] Bluetooth: hci4: Injecting HCI hardware error event [ 472.641046][ T3640] Bluetooth: hci4: hardware error 0x00 [ 472.743897][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.786375][ T9329] [ 472.788736][ T9329] ====================================================== [ 472.789151][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.795827][ T9329] WARNING: possible circular locking dependency detected [ 472.795836][ T9329] 6.1.104-syzkaller #0 Not tainted [ 472.795846][ T9329] ------------------------------------------------------ [ 472.795851][ T9329] syz.1.1203/9329 is trying to acquire lock: [ 472.795861][ T9329] ffff888012fe0400 [ 472.806462][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.813249][ T9329] (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_bmap+0x4b/0x410 [ 472.819773][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.825355][ T9329] [ 472.825355][ T9329] but task is already holding lock: [ 472.825363][ T9329] ffff88814c0083f8 [ 472.833467][ T8900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.835001][ T9329] (&journal->j_checkpoint_mutex [ 472.845307][ T8900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.853213][ T9329] ){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40 [ 472.853259][ T9329] [ 472.853259][ T9329] which lock already depends on the new lock. [ 472.853259][ T9329] [ 472.853265][ T9329] [ 472.853265][ T9329] the existing dependency chain (in reverse order) is: [ 472.853270][ T9329] [ 472.853270][ T9329] -> #4 [ 472.860916][ T8900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.867882][ T9329] (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 472.867908][ T9329] lock_acquire+0x1f8/0x5a0 [ 472.871625][ T8900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.880267][ T9329] mutex_lock_io_nested+0x134/0xab0 [ 472.880291][ T9329] jbd2_journal_flush+0x29b/0xc40 [ 472.965710][ T9329] ext4_ioctl_group_add+0x1f5/0x530 [ 472.971616][ T9329] ext4_ioctl+0x1d20/0x5f60 [ 472.976647][ T9329] __se_sys_ioctl+0xf1/0x160 [ 472.981785][ T9329] do_syscall_64+0x3b/0xb0 [ 472.986747][ T9329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.993181][ T9329] [ 472.993181][ T9329] -> #3 (&journal->j_barrier){+.+.}-{3:3}: [ 473.001194][ T9329] lock_acquire+0x1f8/0x5a0 [ 473.006248][ T9329] __mutex_lock+0x132/0xd80 [ 473.011398][ T9329] jbd2_journal_lock_updates+0x2b0/0x380 [ 473.017790][ T9329] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 473.024390][ T9329] ext4_fileattr_set+0xe04/0x1770 [ 473.029923][ T9329] vfs_fileattr_set+0x8f3/0xd30 [ 473.035284][ T9329] do_vfs_ioctl+0x1cd1/0x2a90 [ 473.040642][ T9329] __se_sys_ioctl+0x81/0x160 [ 473.045849][ T9329] do_syscall_64+0x3b/0xb0 [ 473.050788][ T9329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.057373][ T9329] [ 473.057373][ T9329] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 473.065879][ T9329] lock_acquire+0x1f8/0x5a0 [ 473.070891][ T9329] percpu_down_read+0x44/0x1a0 [ 473.076166][ T9329] ext4_writepages+0x1e5/0x3de0 [ 473.081559][ T9329] do_writepages+0x3a2/0x670 [ 473.086665][ T9329] filemap_fdatawrite_wbc+0x121/0x180 [ 473.092596][ T9329] filemap_write_and_wait_range+0x1a4/0x290 [ 473.098997][ T9329] ext4_change_inode_journal_flag+0x143/0x6e0 [ 473.105661][ T9329] ext4_fileattr_set+0xe04/0x1770 [ 473.111190][ T9329] vfs_fileattr_set+0x8f3/0xd30 [ 473.116807][ T9329] do_vfs_ioctl+0x1cd1/0x2a90 [ 473.121988][ T9329] __se_sys_ioctl+0x81/0x160 [ 473.127252][ T9329] do_syscall_64+0x3b/0xb0 [ 473.132172][ T9329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.138599][ T9329] [ 473.138599][ T9329] -> #1 (mapping.invalidate_lock){++++}-{3:3}: [ 473.146919][ T9329] lock_acquire+0x1f8/0x5a0 [ 473.152011][ T9329] down_write+0x36/0x60 [ 473.156664][ T9329] ext4_setattr+0xec7/0x1a00 [ 473.161753][ T9329] notify_change+0xce3/0xfc0 [ 473.166850][ T9329] do_truncate+0x21c/0x300 [ 473.171767][ T9329] do_sys_ftruncate+0x2e2/0x380 [ 473.177140][ T9329] do_syscall_64+0x3b/0xb0 [ 473.182061][ T9329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.188485][ T9329] [ 473.188485][ T9329] -> #0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 473.197097][ T9329] validate_chain+0x1661/0x5950 [ 473.202447][ T9329] __lock_acquire+0x125b/0x1f80 [ 473.207807][ T9329] lock_acquire+0x1f8/0x5a0 [ 473.212830][ T9329] down_read+0xad/0xa30 [ 473.217747][ T9329] ext4_bmap+0x4b/0x410 [ 473.222592][ T9329] bmap+0xa1/0xd0 [ 473.226765][ T9329] jbd2_journal_flush+0x5b5/0xc40 [ 473.232412][ T9329] ext4_ioctl+0x3986/0x5f60 [ 473.237474][ T9329] __se_sys_ioctl+0xf1/0x160 [ 473.242610][ T9329] do_syscall_64+0x3b/0xb0 [ 473.247669][ T9329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.254089][ T9329] [ 473.254089][ T9329] other info that might help us debug this: [ 473.254089][ T9329] [ 473.264337][ T9329] Chain exists of: [ 473.264337][ T9329] &sb->s_type->i_mutex_key#8 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 473.264337][ T9329] [ 473.280001][ T9329] Possible unsafe locking scenario: [ 473.280001][ T9329] [ 473.287450][ T9329] CPU0 CPU1 [ 473.292897][ T9329] ---- ---- [ 473.298246][ T9329] lock(&journal->j_checkpoint_mutex); [ 473.303852][ T9329] lock(&journal->j_barrier); [ 473.311223][ T9329] lock(&journal->j_checkpoint_mutex); [ 473.319276][ T9329] lock(&sb->s_type->i_mutex_key#8); [ 473.324911][ T9329] [ 473.324911][ T9329] *** DEADLOCK *** [ 473.324911][ T9329] [ 473.333426][ T9329] 2 locks held by syz.1.1203/9329: [ 473.338535][ T9329] #0: ffff88814c008170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380 [ 473.349431][ T9329] #1: ffff88814c0083f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40 [ 473.360478][ T9329] [ 473.360478][ T9329] stack backtrace: [ 473.366356][ T9329] CPU: 0 PID: 9329 Comm: syz.1.1203 Not tainted 6.1.104-syzkaller #0 [ 473.374409][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 473.384547][ T9329] Call Trace: [ 473.387876][ T9329] [ 473.390899][ T9329] dump_stack_lvl+0x1e3/0x2cb [ 473.395562][ T9329] ? nf_tcp_handle_invalid+0x642/0x642 [ 473.401098][ T9329] ? print_circular_bug+0x12b/0x1a0 [ 473.406300][ T9329] check_noncircular+0x2fa/0x3b0 [ 473.411311][ T9329] ? add_chain_block+0x850/0x850 [ 473.416239][ T9329] ? lockdep_lock+0x11f/0x2a0 [ 473.420913][ T9329] ? _find_first_zero_bit+0xd0/0x100 [ 473.426284][ T9329] validate_chain+0x1661/0x5950 [ 473.431135][ T9329] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 473.437204][ T9329] ? reacquire_held_locks+0x660/0x660 [ 473.442586][ T9329] ? do_raw_spin_unlock+0x137/0x8a0 [ 473.447767][ T9329] ? validate_chain+0x112/0x5950 [ 473.452683][ T9329] ? finish_task_switch+0x299/0x810 [ 473.457867][ T9329] ? mark_lock+0x9a/0x340 [ 473.462178][ T9329] __lock_acquire+0x125b/0x1f80 [ 473.467037][ T9329] lock_acquire+0x1f8/0x5a0 [ 473.471555][ T9329] ? ext4_bmap+0x4b/0x410 [ 473.476052][ T9329] ? read_lock_is_recursive+0x10/0x10 [ 473.481417][ T9329] ? __might_sleep+0xb0/0xb0 [ 473.486080][ T9329] ? __lock_acquire+0x125b/0x1f80 [ 473.491104][ T9329] ? mark_lock+0x9a/0x340 [ 473.495421][ T9329] down_read+0xad/0xa30 [ 473.499556][ T9329] ? ext4_bmap+0x4b/0x410 [ 473.503890][ T9329] ? print_irqtrace_events+0x210/0x210 [ 473.509365][ T9329] ? rcu_is_watching+0x11/0xb0 [ 473.514169][ T9329] ? __down_common+0x8b0/0x8b0 [ 473.518926][ T9329] ? asm_sysvec_call_function_single+0x16/0x20 [ 473.525069][ T9329] ? lockdep_hardirqs_on+0x94/0x130 [ 473.530255][ T9329] ? asm_sysvec_call_function_single+0x16/0x20 [ 473.536390][ T9329] ? ext4_journalled_write_end+0xec0/0xec0 [ 473.542191][ T9329] ? jbd2_journal_flush+0x508/0xc40 [ 473.547548][ T9329] ? ext4_journalled_write_end+0xec0/0xec0 [ 473.553424][ T9329] ext4_bmap+0x4b/0x410 [ 473.557590][ T9329] ? ext4_journalled_write_end+0xec0/0xec0 [ 473.563388][ T9329] bmap+0xa1/0xd0 [ 473.567120][ T9329] jbd2_journal_flush+0x5b5/0xc40 [ 473.572229][ T9329] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 473.578034][ T9329] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 473.585399][ T9329] ext4_ioctl+0x3986/0x5f60 [ 473.589993][ T9329] ? print_irqtrace_events+0x210/0x210 [ 473.596759][ T9329] ? rcu_is_watching+0x11/0xb0 [ 473.601638][ T9329] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 473.607351][ T9329] ? ext4_fileattr_set+0x1770/0x1770 [ 473.612637][ T9329] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 473.618377][ T9329] ? __se_sys_ioctl+0x52/0x160 [ 473.623227][ T9329] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 473.628063][ T9329] ? __x64_compat_sys_ioctl+0x80/0x80 [ 473.633418][ T9329] ? __lock_acquire+0x1f80/0x1f80 [ 473.638538][ T9329] ? lockdep_hardirqs_on+0x94/0x130 [ 473.643752][ T9329] ? __kmem_cache_free+0x25c/0x3c0 [ 473.648855][ T9329] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 473.654492][ T9329] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 473.660117][ T9329] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 473.665760][ T9329] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 473.671234][ T9329] ? __fget_files+0x28/0x4a0 [ 473.676508][ T9329] ? __rcu_read_unlock+0x92/0x100 [ 473.681523][ T9329] ? __fget_files+0x28/0x4a0 [ 473.686104][ T9329] ? __fget_files+0x435/0x4a0 [ 473.690940][ T9329] ? __fget_files+0x28/0x4a0 [ 473.695615][ T9329] ? bpf_lsm_file_ioctl+0x5/0x10 [ 473.700595][ T9329] ? security_file_ioctl+0x7d/0xa0 [ 473.705732][ T9329] ? ext4_fileattr_set+0x1770/0x1770 [ 473.711019][ T9329] __se_sys_ioctl+0xf1/0x160 [ 473.715871][ T9329] do_syscall_64+0x3b/0xb0 [ 473.720544][ T9329] ? clear_bhb_loop+0x45/0xa0 [ 473.725581][ T9329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.731486][ T9329] RIP: 0033:0x7ffb7b3779f9 [ 473.735889][ T9329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.755570][ T9329] RSP: 002b:00007ffb7c069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.764063][ T9329] RAX: ffffffffffffffda RBX: 00007ffb7b506130 RCX: 00007ffb7b3779f9 [ 473.772026][ T9329] RDX: 0000000020000180 RSI: 000000004004662b RDI: 0000000000000008 [ 473.780006][ T9329] RBP: 00007ffb7b3e58ee R08: 0000000000000000 R09: 0000000000000000 [ 473.787973][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.795955][ T9329] R13: 0000000000000000 R14: 00007ffb7b506130 R15: 00007ffe3d66f768 [ 473.803938][ T9329] [ 473.983698][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.007755][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.033825][ T8900] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 474.057952][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.058714][ T8900] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 474.075273][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.086127][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 474.111579][ T4070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.126505][ T4070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.139015][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 474.783701][ T7906] device hsr_slave_0 left promiscuous mode [ 474.789884][ T7906] device hsr_slave_1 left promiscuous mode [ 474.796029][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.804219][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.813487][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.820944][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.830522][ T7906] device bridge_slave_1 left promiscuous mode [ 474.836761][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.844538][ T7906] device bridge_slave_0 left promiscuous mode [ 474.851415][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.860669][ T7906] device veth1_macvtap left promiscuous mode [ 474.866762][ T7906] device veth0_macvtap left promiscuous mode [ 474.872781][ T7906] device veth1_vlan left promiscuous mode [ 474.878589][ T7906] device veth0_vlan left promiscuous mode [ 475.013313][ T7906] team0 (unregistering): Port device team_slave_1 removed [ 475.040674][ T7906] team0 (unregistering): Port device team_slave_0 removed [ 475.068862][ T7906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.096323][ T7906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.143801][ T7906] bond0 (unregistering): Released all slaves [ 475.926574][ T3640] Bluetooth: hci4: Opcode 0x0c03 failed: -110