last executing test programs: 22.37256705s ago: executing program 2 (id=1149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) 21.37531169s ago: executing program 2 (id=1154): r0 = syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[], 0x1, 0x22a, &(0x7f00000005c0)="$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") sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 21.30025147s ago: executing program 2 (id=1155): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xf) 17.855417502s ago: executing program 3 (id=1160): openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffff9c, 0x0, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='fsi_master_gpio_in\x00', r3, 0x0, 0x1}, 0x18) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 14.215507204s ago: executing program 0 (id=1164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) 13.240490034s ago: executing program 0 (id=1166): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2a0085e, &(0x7f0000000080)=ANY=[], 0xa, 0x229, &(0x7f0000000140)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000540)=""/239, 0xef) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44005) 13.042880254s ago: executing program 1 (id=1167): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 10.650238115s ago: executing program 1 (id=1169): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4002, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'iso8859-1'}}, {@umask={'umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x4, 0x33e, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r3, r4, &(0x7f0000000100)=0x10, 0x10001) 9.750179225s ago: executing program 0 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x18c80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}]}}) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) 9.481114886s ago: executing program 1 (id=1172): socket$inet6(0xa, 0x2, 0x3a) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.738364766s ago: executing program 2 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'icmp6\x00'}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100)='\x00', 0x1, 0x0, 0x0, 0xffffff5a) 7.738136936s ago: executing program 3 (id=1174): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 7.733435826s ago: executing program 0 (id=1183): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xf) 7.732574396s ago: executing program 1 (id=1175): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) read$FUSE(r1, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMBIC(r5, 0x5417, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 7.515059957s ago: executing program 3 (id=1177): syz_mount_image$nilfs2(&(0x7f0000020480), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f00000204c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="8931bdfc41b48c4cbb4858f1d32f73ae6d04a155886a928d6179b0e3e74ddf6e1a0470336b428d5ac2b199c04c9ab0509813f896e538af57af34c42b05273bbea7b9f11eaa9585effddcda182c2018c3f1f4867f60d9e60f0ebf02caf1cc73582d45db1e794901676e76d7b46c9c20c5f4bac40eddf061b1ce907d8d412e39d1e0741375d3daffd7e012756020e4a9a804a7b4c1e266c707aa1204db2e582a1e277756769c3b56238744b6e4f510b0f4872dbfcc6b948fd1246dcbc958088e88c9177825cd63f2", @ANYRES8=0x0, @ANYRES64, @ANYRES64], 0x3, 0xa84, &(0x7f0000000180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) 6.314164917s ago: executing program 4 (id=1178): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0xff, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) 6.113622737s ago: executing program 2 (id=1179): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 5.216234917s ago: executing program 3 (id=1180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000005c0)=0x40009, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x6}, 0x804) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 5.161352077s ago: executing program 2 (id=1181): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xf) 4.040758828s ago: executing program 4 (id=1182): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2a0085e, &(0x7f0000000080)=ANY=[], 0xa, 0x229, &(0x7f0000000140)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44005) 3.758659188s ago: executing program 4 (id=1184): r0 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x2182842, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x20142, 0x0) preadv2(r4, &(0x7f0000000400)=[{&(0x7f0000000380)=""/22, 0x16}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x10, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 3.740587578s ago: executing program 1 (id=1185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[], 0xff, 0x6bc, &(0x7f0000000140)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$packet(0x11, 0x2, 0x300) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.664423079s ago: executing program 4 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$unix(r6, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.827026259s ago: executing program 3 (id=1187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x118, &(0x7f0000000100)={0x0, 0x2, 0x10, 0xfffffffc, 0x3a6}, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) sigaltstack(&(0x7f00000001c0)={&(0x7f0000000180)=""/47, 0x1, 0x2f}, &(0x7f0000000300)={&(0x7f0000000280)=""/9, 0x0, 0x9}) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000003c0)={0xe0000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) 1.683614529s ago: executing program 4 (id=1188): openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) 1.634559389s ago: executing program 0 (id=1189): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4002, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'iso8859-1'}}, {@umask={'umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x4, 0x33e, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) 1.400430119s ago: executing program 1 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000030801030000000000000000030000013c0004800800014000000003080001400000001e08000240f7fffff9080002400000000b0800014000010001080001400000000608000240000000010500030088"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r4 = socket(0xa, 0x6, 0x0) r5 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), 0x0, &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 369.033829ms ago: executing program 0 (id=1191): socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="d115e6", 0x3, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa4) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r4, 0x0, 0x0, 0x80000) 291.51µs ago: executing program 3 (id=1192): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setgroups(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, 0x0, 0x0) 0s ago: executing program 4 (id=1193): syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x1089, &(0x7f00000002c0)={[{@barrier}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1000}}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x434, &(0x7f0000000680)="$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") r0 = openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000280)) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, 0x0, 0x0) write$binfmt_aout(r6, 0x0, 0x28) socket$inet6(0xa, 0x1, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) kernel console output (not intermixed with test programs): man_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.542648][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.544590][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.547034][ T4311] device bridge_slave_0 entered promiscuous mode [ 37.551211][ T4301] team0: Port device team_slave_1 added [ 37.559117][ T4308] team0: Port device team_slave_0 added [ 37.563612][ T4302] team0: Port device team_slave_0 added [ 37.568021][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.569894][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.572813][ T4311] device bridge_slave_1 entered promiscuous mode [ 37.582458][ T4308] team0: Port device team_slave_1 added [ 37.585095][ T4302] team0: Port device team_slave_1 added [ 37.596606][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.598439][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.606271][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.618057][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.619844][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.627123][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.633008][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.634916][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.642149][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.655470][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.657337][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.664472][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.694597][ T4311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.699611][ T4311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.702886][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.704745][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.712106][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.752089][ T4305] device hsr_slave_0 entered promiscuous mode [ 37.800475][ T4305] device hsr_slave_1 entered promiscuous mode [ 37.864924][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.866810][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.874202][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.923532][ T4311] team0: Port device team_slave_0 added [ 37.961848][ T4302] device hsr_slave_0 entered promiscuous mode [ 38.000496][ T4302] device hsr_slave_1 entered promiscuous mode [ 38.040316][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.042462][ T4302] Cannot create hsr debugfs directory [ 38.081834][ T4301] device hsr_slave_0 entered promiscuous mode [ 38.120480][ T4301] device hsr_slave_1 entered promiscuous mode [ 38.165577][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.167598][ T4301] Cannot create hsr debugfs directory [ 38.173420][ T4311] team0: Port device team_slave_1 added [ 38.281741][ T4308] device hsr_slave_0 entered promiscuous mode [ 38.320865][ T4308] device hsr_slave_1 entered promiscuous mode [ 38.360141][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.362304][ T4308] Cannot create hsr debugfs directory [ 38.385078][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.387075][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.394474][ T4311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.400971][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.402831][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.409769][ T4311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.551793][ T4311] device hsr_slave_0 entered promiscuous mode [ 38.590391][ T4311] device hsr_slave_1 entered promiscuous mode [ 38.630125][ T4311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.632071][ T4311] Cannot create hsr debugfs directory [ 38.714298][ T4305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.732873][ T4305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.775361][ T4305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.812835][ T4305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.878815][ T4301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.881077][ T4310] Bluetooth: hci0: command 0x0409 tx timeout [ 38.881128][ T4315] Bluetooth: hci1: command 0x0409 tx timeout [ 38.890152][ T4315] Bluetooth: hci3: command 0x0409 tx timeout [ 38.891890][ T4310] Bluetooth: hci2: command 0x0409 tx timeout [ 38.921686][ T4301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.960456][ T4310] Bluetooth: hci4: command 0x0409 tx timeout [ 38.971572][ T4301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.024146][ T4301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.092146][ T4302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.133027][ T4302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.171655][ T4302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.229671][ T4302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.341389][ T4308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.371707][ T4308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.427941][ T4308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.471942][ T4308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.544180][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.567302][ T4311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.614719][ T4311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.662072][ T4311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.703472][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.708945][ T4311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.762802][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.771230][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.774896][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.777533][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.780336][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.783844][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.785927][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.788625][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.791630][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.794327][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.796194][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.807790][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.811871][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.814355][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.816752][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.823851][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.828804][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.845177][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.848938][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.852395][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.854845][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.856789][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.859098][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.862873][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.865336][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.879147][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.881989][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.884777][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.888018][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.890011][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.894314][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.897315][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.899908][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.913422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.916153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.918793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.922026][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.923813][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.926165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.951584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.957311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.961334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.964969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.967689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.971581][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.973460][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.975780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.979013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.983040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.985654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.988173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.991906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.997935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.003093][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.005773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.027139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.029744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.033828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.036581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.039322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.044303][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.056815][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.067288][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.075910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.082538][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.091555][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.094230][ T167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.109197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.113523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.116070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.118514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.121295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.123804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.127330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.129643][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.135765][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.146920][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.171859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.174584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.177176][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.179106][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.186836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.209052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.212487][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.214885][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.216952][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.238415][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.248443][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.257651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.261779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.264484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.270423][ T4311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.279161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.285611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.287770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.292621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.309231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.314460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.318574][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.333605][ T4308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.336923][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.345454][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.348070][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.353516][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.356706][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.367508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.369589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.375327][ T4311] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.385322][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.387503][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.407619][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.435055][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.437094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.439765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.443547][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.445356][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.448066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.451469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.465688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.468083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.472324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.475667][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.477500][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.479718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.484608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.494100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.496845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.501298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.504535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.514847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.517395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.519865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.523221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.525619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.537865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.542342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.553368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.556144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.558824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.562071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.571909][ T4305] device veth0_vlan entered promiscuous mode [ 40.582338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.584929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.587502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.591287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.602606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.605178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.609504][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.616812][ T4305] device veth1_vlan entered promiscuous mode [ 40.619194][ T4302] device veth0_vlan entered promiscuous mode [ 40.621890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.624391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.626683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.634572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.637415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.642862][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.648192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.650827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.654127][ T4301] device veth0_vlan entered promiscuous mode [ 40.684969][ T4301] device veth1_vlan entered promiscuous mode [ 40.688596][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.696029][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.698579][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.705587][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.712081][ T4305] device veth0_macvtap entered promiscuous mode [ 40.715014][ T4302] device veth1_vlan entered promiscuous mode [ 40.738046][ T4305] device veth1_macvtap entered promiscuous mode [ 40.744582][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.747130][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.751977][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.754901][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.757382][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.759801][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.763496][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.776982][ T4302] device veth0_macvtap entered promiscuous mode [ 40.780973][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.783733][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.786331][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.794488][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.798663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.802833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.813891][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.824116][ T4302] device veth1_macvtap entered promiscuous mode [ 40.827128][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.829649][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.832546][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.835990][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.838559][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.845606][ T4305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.848028][ T4305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.850774][ T4305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.853035][ T4305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.857547][ T4301] device veth0_macvtap entered promiscuous mode [ 40.862750][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.865375][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.867414][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.887527][ T4311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.892541][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.895181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.898859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.902565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.905519][ T4308] device veth0_vlan entered promiscuous mode [ 40.914860][ T4301] device veth1_macvtap entered promiscuous mode [ 40.933090][ T4308] device veth1_vlan entered promiscuous mode [ 40.939857][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.947261][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.952262][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.956492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.959155][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.961404][ T4310] Bluetooth: hci3: command 0x041b tx timeout [ 40.961452][ T4310] Bluetooth: hci0: command 0x041b tx timeout [ 40.961481][ T4310] Bluetooth: hci1: command 0x041b tx timeout [ 40.967067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.969791][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.972227][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 40.997656][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.003327][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.005975][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.008729][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.013774][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.018448][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.021116][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.023759][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.035848][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.038728][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.043386][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.045656][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.048316][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.051286][ T4310] Bluetooth: hci4: command 0x041b tx timeout [ 41.052447][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.055769][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.059430][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.064718][ T4302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.067071][ T4302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.069372][ T4302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.072961][ T4302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.091343][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.094032][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.096671][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.099363][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.127486][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.129711][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.138517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.141831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.144466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.156847][ T4301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.159234][ T4301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.163873][ T4301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.166187][ T4301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.184878][ T4308] device veth0_macvtap entered promiscuous mode [ 41.195021][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.197617][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.203893][ T4308] device veth1_macvtap entered promiscuous mode [ 41.220494][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.223591][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.226151][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.228625][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.232635][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.295039][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.297218][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.306472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.309585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.314719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.317313][ T4311] device veth0_vlan entered promiscuous mode [ 41.319708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.324259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.337022][ T4311] device veth1_vlan entered promiscuous mode [ 41.348899][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.360513][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.363232][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.365968][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.368550][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.381081][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.385657][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.417434][ T4311] device veth0_macvtap entered promiscuous mode [ 41.422867][ T4311] device veth1_macvtap entered promiscuous mode [ 41.442931][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.445751][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.448390][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.457288][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.459763][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.464377][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.466844][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.469455][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.479776][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.485044][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.487844][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.497466][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.500638][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.503416][ T4311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.506218][ T4311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.515931][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.524578][ T4311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.527365][ T4311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.529724][ T4311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.532609][ T4311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.557281][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.561308][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.563788][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.566676][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.569371][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.576873][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.579540][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.583859][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.586480][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.589025][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.592688][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.654322][ T4385] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 41.656495][ T4385] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 41.658623][ T4385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 41.698562][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.972950][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.997783][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.035742][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.062933][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.199095][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.255624][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.258241][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.265005][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.271721][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.320276][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.322940][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.349879][ T4308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.361682][ T4308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.364331][ T4308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.370793][ T4308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.404848][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.407143][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.411257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.551951][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.554166][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.556753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.824079][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.826576][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.855655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.070271][ T4318] Bluetooth: hci2: command 0x040f tx timeout [ 43.070562][ T4310] Bluetooth: hci1: command 0x040f tx timeout [ 43.074142][ T4310] Bluetooth: hci0: command 0x040f tx timeout [ 43.076178][ T4310] Bluetooth: hci3: command 0x040f tx timeout [ 43.121128][ T4315] Bluetooth: hci4: command 0x040f tx timeout [ 43.403423][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.405618][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.408587][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.462360][ T1775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.464555][ T1775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.468346][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.495988][ T4396] loop3: detected capacity change from 0 to 8192 [ 43.531417][ T4396] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.542444][ T4396] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 43.545004][ T4396] REISERFS (device loop3): using ordered data mode [ 43.546832][ T4396] reiserfs: using flush barriers [ 43.565872][ T4396] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.571032][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.573222][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.595754][ T4396] REISERFS (device loop3): checking transaction log (loop3) [ 43.645545][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.648148][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.657406][ T4396] REISERFS (device loop3): Using r5 hash to sort names [ 43.701492][ T4396] reiserfs: enabling write barrier flush mode [ 43.720636][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.723236][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.781361][ T4396] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 44.165530][ T4409] loop2: detected capacity change from 0 to 40427 [ 44.230421][ T4409] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 44.233032][ T4409] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 44.277057][ T4409] F2FS-fs (loop2): invalid crc value [ 44.947962][ T4406] loop1: detected capacity change from 0 to 4096 [ 44.975800][ T4409] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.998546][ T4406] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 45.021975][ T4406] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 45.026845][ T4406] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 45.031392][ T4409] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.033418][ T4409] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.123879][ T4315] Bluetooth: hci3: command 0x0419 tx timeout [ 45.125545][ T4315] Bluetooth: hci2: command 0x0419 tx timeout [ 45.127142][ T4315] Bluetooth: hci0: command 0x0419 tx timeout [ 45.128677][ T4315] Bluetooth: hci1: command 0x0419 tx timeout [ 45.220082][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 45.347187][ T4427] loop4: detected capacity change from 0 to 22 [ 45.354989][ T4427] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 45.710760][ T4427] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 46.996074][ T4392] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 47.006663][ T4392] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 47.139112][ T4436] loop4: detected capacity change from 0 to 40427 [ 47.155809][ T4436] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 47.157820][ T4436] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 47.161599][ T4436] F2FS-fs (loop4): invalid crc value [ 48.182215][ T4436] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.214327][ T4436] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 48.216330][ T4436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.527541][ T4452] loop0: detected capacity change from 0 to 32768 [ 48.648394][ T4454] syz.4.14: attempt to access beyond end of device [ 48.648394][ T4454] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 49.546064][ T4461] loop3: detected capacity change from 0 to 1024 [ 51.082141][ T4468] hfsplus: xattr searching failed [ 51.155351][ T4465] loop2: detected capacity change from 0 to 8192 [ 51.229014][ T4465] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.239051][ T4465] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 51.263218][ T4465] REISERFS (device loop2): using ordered data mode [ 51.264967][ T4465] reiserfs: using flush barriers [ 51.410025][ T4465] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.414466][ T4465] REISERFS (device loop2): checking transaction log (loop2) [ 51.477118][ T4474] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 51.486540][ T4474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23'. [ 52.739174][ T4465] REISERFS (device loop2): Using tea hash to sort names [ 52.741920][ T4465] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 53.349948][ C1] sched: RT throttling activated [ 53.391640][ T4490] Bluetooth: MGMT ver 1.22 [ 53.393026][ T4490] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 53.482521][ T4493] loop4: detected capacity change from 0 to 16 [ 53.510516][ T4493] erofs: (device loop4): mounted with root inode @ nid 36. [ 57.171529][ T4315] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 57.177841][ T4498] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 58.191538][ T4510] loop4: detected capacity change from 0 to 1024 [ 58.219010][ T4510] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (1c2c0) [ 58.238096][ T4519] loop0: detected capacity change from 0 to 1024 [ 58.244265][ T4517] loop1: detected capacity change from 0 to 8192 [ 58.247552][ T4519] EXT4-fs: Ignoring removed orlov option [ 58.247560][ T4517] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.249037][ T4519] EXT4-fs: Ignoring removed bh option [ 58.249056][ T4519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.269891][ T4517] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 58.276788][ T4517] REISERFS (device loop1): using ordered data mode [ 58.288618][ T4293] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.301477][ T4517] reiserfs: using flush barriers [ 58.304124][ T4517] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.308509][ T4517] REISERFS (device loop1): checking transaction log (loop1) [ 58.311442][ T4519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.361349][ T4526] loop3: detected capacity change from 0 to 256 [ 58.363714][ T4526] ======================================================= [ 58.363714][ T4526] WARNING: The mand mount option has been deprecated and [ 58.363714][ T4526] and is ignored by this kernel. Remove the mand [ 58.363714][ T4526] option from the mount to silence this warning. [ 58.363714][ T4526] ======================================================= [ 58.380443][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 58.400285][ T4526] exfat: Deprecated parameter 'utf8' [ 58.401788][ T4526] exfat: Deprecated parameter 'namecase' [ 58.403438][ T4526] exfat: Deprecated parameter 'utf8' [ 58.455511][ T4517] REISERFS (device loop1): Using r5 hash to sort names [ 58.464255][ T4526] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 59.166798][ T4517] reiserfs: enabling write barrier flush mode [ 59.193636][ T4517] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 64.250346][ T4570] loop3: detected capacity change from 0 to 4096 [ 64.345773][ T4570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.525711][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.527754][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.752833][ T4580] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 65.701581][ T4585] loop2: detected capacity change from 0 to 64 [ 68.607656][ T4561] syz.4.47 (4561): drop_caches: 2 [ 68.683819][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 68.764779][ T4601] capability: warning: `syz.1.57' uses deprecated v2 capabilities in a way that may be insecure [ 70.336422][ T1516] cfg80211: failed to load regulatory.db [ 70.684528][ T4603] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 71.622429][ T4626] loop2: detected capacity change from 0 to 2048 [ 71.651323][ T4626] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.670025][ T4626] EXT4-fs: Ignoring removed i_version option [ 71.742848][ T4626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.801480][ T4631] device syz_tun entered promiscuous mode [ 71.803124][ T4631] device macsec1 entered promiscuous mode [ 71.831994][ T4631] device syz_tun left promiscuous mode [ 71.864817][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 72.858104][ T4623] loop3: detected capacity change from 0 to 32768 [ 73.036629][ T4642] loop4: detected capacity change from 0 to 256 [ 73.098496][ T4643] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 73.102188][ T4643] XFS (loop2): SB validate failed with error -5. [ 76.205205][ T4669] loop4: detected capacity change from 0 to 256 [ 76.420801][ T4675] loop0: detected capacity change from 0 to 128 [ 76.601028][ T4675] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 76.603688][ T4675] FAT-fs (loop0): Filesystem has been set read-only [ 77.501329][ T4669] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe1843155, utbl_chksum : 0xe619d30d) [ 78.364755][ T4687] Cannot find set identified by id 0 to match [ 79.311453][ T4702] loop3: detected capacity change from 0 to 256 [ 79.408013][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.435936][ T4706] loop1: detected capacity change from 0 to 1024 [ 79.454831][ T4706] hfsplus: failed to load root directory [ 86.653180][ T4758] loop4: detected capacity change from 0 to 256 [ 87.804570][ T4763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.807233][ T4763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.832577][ T4764] loop3: detected capacity change from 0 to 164 [ 87.848212][ T4764] rock: directory entry would overflow storage [ 87.856321][ T4764] rock: sig=0x5245, size=8, remaining=3 [ 87.872218][ T4763] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 87.988913][ T4763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.796497][ T4768] bond1: (slave gretap1): making interface the new active one [ 88.803582][ T4768] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 88.810336][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 88.909327][ T4772] loop0: detected capacity change from 0 to 2048 [ 88.930673][ T4772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.310739][ T4772] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.101: bad orphan inode 8 [ 90.317894][ T4772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.853590][ T4794] loop1: detected capacity change from 0 to 512 [ 91.036867][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 91.077175][ T4794] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.108: casefold flag without casefold feature [ 91.086655][ T4794] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.108: couldn't read orphan inode 15 (err -117) [ 91.101947][ T4794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.562140][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 93.588275][ T4820] loop4: detected capacity change from 0 to 4096 [ 94.702807][ T4837] loop1: detected capacity change from 0 to 512 [ 95.953582][ T4836] loop3: detected capacity change from 0 to 256 [ 95.987138][ T4836] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d) [ 96.001993][ T4837] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.115: casefold flag without casefold feature [ 96.005657][ T4837] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.115: couldn't read orphan inode 15 (err -117) [ 96.009234][ T4837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.042097][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 96.294336][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 98.498045][ T4863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.500684][ T4863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.846760][ T4866] block device autoloading is deprecated and will be removed. [ 100.365070][ T4875] loop0: detected capacity change from 0 to 2048 [ 100.683641][ T4875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.949719][ T4881] loop4: detected capacity change from 0 to 256 [ 101.175314][ T4886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'. [ 101.178099][ T4886] tipc: Started in network mode [ 101.179589][ T4886] tipc: Node identity 7, cluster identity 5 [ 101.181970][ T4886] tipc: Node number set to 7 [ 102.151267][ T4895] input: syz1 as /devices/virtual/input/input2 [ 104.517076][ T4911] syz.4.138 (4911): drop_caches: 2 [ 106.104320][ T4927] loop4: detected capacity change from 0 to 128 [ 106.503862][ T4927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.607164][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 107.369634][ T4952] Zero length message leads to an empty skb [ 107.420461][ T4927] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.144'. [ 108.800465][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.804018][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.830808][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 108.840426][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.844170][ T4967] device bridge_slave_0 left promiscuous mode [ 108.857549][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.927877][ T4967] device bridge_slave_1 left promiscuous mode [ 108.929776][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.033529][ T4967] bond0: (slave bond_slave_0): Releasing backup interface [ 109.078741][ T4967] bond0: (slave bond_slave_1): Releasing backup interface [ 109.879310][ T4967] team0: Port device team_slave_0 removed [ 109.891482][ T4967] team0: Port device team_slave_1 removed [ 109.893752][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.895979][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.933817][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.935968][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.950305][ T4974] tipc: Started in network mode [ 109.954763][ T4974] tipc: Node identity 4, cluster identity 4711 [ 109.956388][ T4974] tipc: Node number set to 4 [ 109.968711][ T4977] bridge0: port 1(vlan2) entered blocking state [ 110.025778][ T4977] bridge0: port 1(vlan2) entered disabled state [ 110.028495][ T4977] device veth0_to_batadv entered promiscuous mode [ 110.057349][ T4977] bridge0: port 1(vlan2) entered blocking state [ 110.059042][ T4977] bridge0: port 1(vlan2) entered forwarding state [ 110.107034][ T4990] loop2: detected capacity change from 0 to 1024 [ 111.800460][ T4998] mmap: syz.4.163 (4998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.887805][ T4998] netlink: 'syz.4.163': attribute type 4 has an invalid length. [ 111.944192][ T5000] netlink: 116 bytes leftover after parsing attributes in process `syz.3.164'. [ 111.949405][ T4535] hfsplus: b-tree write err: -5, ino 4 [ 112.138183][ T5010] loop4: detected capacity change from 0 to 128 [ 112.210670][ T5011] loop0: detected capacity change from 0 to 4096 [ 112.275987][ T5010] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.297021][ T5011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.500345][ T5020] loop2: detected capacity change from 0 to 1024 [ 113.187792][ T5019] loop1: detected capacity change from 0 to 40427 [ 113.269969][ T5019] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 113.272356][ T5019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.278108][ T5019] F2FS-fs (loop1): invalid crc value [ 114.211157][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 114.236247][ T5019] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.255316][ T5019] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.257119][ T5019] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.639094][ T5038] syz.1.171: attempt to access beyond end of device [ 114.639094][ T5038] loop1: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 115.006490][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 116.815271][ T5056] loop1: detected capacity change from 0 to 40427 [ 117.263582][ T5056] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 117.265759][ T5056] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.813041][ T27] audit: type=1326 audit(118.095:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8455ad28 code=0x7fc00000 [ 117.885425][ T5056] F2FS-fs (loop1): invalid crc value [ 117.922637][ T5056] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.944446][ T5056] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.946384][ T5056] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.506985][ T5066] loop4: detected capacity change from 0 to 1024 [ 122.274790][ T1775] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 122.278145][ T1775] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 122.474653][ T5092] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 122.691914][ T5099] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 123.320463][ T5100] loop3: detected capacity change from 0 to 2048 [ 123.322694][ T5100] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.324435][ T5100] EXT4-fs: Ignoring removed i_version option [ 123.421148][ T5100] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.455422][ T5098] netlink: 32 bytes leftover after parsing attributes in process `syz.4.189'. [ 123.525488][ T5105] loop1: detected capacity change from 0 to 64 [ 123.710880][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 125.861892][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.863918][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.143667][ T5132] loop4: detected capacity change from 0 to 40427 [ 128.174146][ T5132] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 128.176208][ T5132] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.179577][ T5132] F2FS-fs (loop4): invalid crc value [ 128.229917][ T5132] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.257829][ T5132] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.259824][ T5132] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.566177][ T5143] syz.0.195 (5143): drop_caches: 2 [ 133.130322][ T4360] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 133.133526][ T4360] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 133.862344][ T5163] loop3: detected capacity change from 0 to 4096 [ 134.110165][ T5165] loop0: detected capacity change from 0 to 40427 [ 134.122094][ T5165] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 134.124274][ T5165] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.155586][ T5165] F2FS-fs (loop0): invalid crc value [ 134.617246][ T5165] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.831245][ T5165] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.833327][ T5165] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.957068][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.342548][ T5177] syz.0.202: attempt to access beyond end of device [ 135.342548][ T5177] loop0: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 137.381704][ T5190] syz.2.208 (5190): drop_caches: 2 [ 138.846562][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 139.589931][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.593291][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.595589][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.598804][ T5199] device bridge_slave_0 left promiscuous mode [ 139.600697][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.696372][ T5199] device bridge_slave_1 left promiscuous mode [ 139.698033][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.781567][ T5199] bond0: (slave bond_slave_0): Releasing backup interface [ 140.845029][ T5199] bond0: (slave bond_slave_1): Releasing backup interface [ 141.713119][ T5199] team0: Port device team_slave_0 removed [ 141.743681][ T5219] loop0: detected capacity change from 0 to 64 [ 141.768092][ T5199] team0: Port device team_slave_1 removed [ 141.770132][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.772124][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.005764][ T5224] loop3: detected capacity change from 0 to 40427 [ 142.034625][ T5224] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 142.036670][ T5224] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 142.050417][ T5224] F2FS-fs (loop3): invalid crc value [ 142.087697][ T5227] loop4: detected capacity change from 0 to 128 [ 142.109008][ T5227] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 142.111323][ T5227] FAT-fs (loop4): Filesystem has been set read-only [ 142.654053][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.656131][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.710131][ T5199] bond1: (slave gretap1): Releasing active interface [ 142.718860][ T5224] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.738603][ T5224] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 142.740469][ T5224] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.750630][ T5216] loop2: detected capacity change from 0 to 1024 [ 142.784867][ T5216] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (1c2c0) [ 142.831455][ T4529] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.642154][ T5203] bridge0: port 1(vlan2) entered blocking state [ 143.648087][ T5203] bridge0: port 1(vlan2) entered disabled state [ 143.650639][ T5203] device veth0_to_batadv entered promiscuous mode [ 144.379534][ T5203] bridge0: port 1(vlan2) entered blocking state [ 144.382409][ T5203] bridge0: port 1(vlan2) entered forwarding state [ 144.471826][ T4302] syz-executor: attempt to access beyond end of device [ 144.471826][ T4302] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 144.478484][ T4392] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 144.483217][ T4392] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 144.500690][ T5244] loop1: detected capacity change from 0 to 1024 [ 145.484244][ T5242] md2: error: bitmap file must be a regular file [ 145.632937][ T5250] loop2: detected capacity change from 0 to 40427 [ 145.654436][ T5250] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 145.656647][ T5250] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.696185][ T5250] F2FS-fs (loop2): invalid crc value [ 146.385821][ T4392] hfsplus: b-tree write err: -5, ino 4 [ 146.726051][ T5250] F2FS-fs (loop2): Found nat_bits in checkpoint [ 147.146957][ T5250] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 147.148887][ T5250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 147.654506][ T5271] syz.1.223 (5271): drop_caches: 2 [ 148.715763][ T5276] loop3: detected capacity change from 0 to 2048 [ 148.943373][ T5276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.821920][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.825426][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.827467][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.901968][ T5298] device bridge_slave_0 left promiscuous mode [ 152.903773][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.959078][ T5298] device bridge_slave_1 left promiscuous mode [ 153.960937][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.024612][ T5316] loop4: detected capacity change from 0 to 1024 [ 155.029470][ T5298] bond0: (slave bond_slave_0): Releasing backup interface [ 155.120311][ T5298] bond0: (slave bond_slave_1): Releasing backup interface [ 155.133854][ T5316] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.651335][ T5331] syz.3.238 (5331): drop_caches: 2 [ 156.355371][ T5298] team0: Port device team_slave_0 removed [ 156.382040][ T5298] team0: Port device team_slave_1 removed [ 156.389659][ T5298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.396104][ T5298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.400056][ T5338] loop3: detected capacity change from 0 to 2048 [ 157.078397][ T5298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.080751][ T5298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.102319][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 157.121583][ T5341] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.165479][ T5311] bridge0: port 1(vlan2) entered blocking state [ 157.170619][ T5311] bridge0: port 1(vlan2) entered disabled state [ 157.187628][ T5311] device veth0_to_batadv entered promiscuous mode [ 157.368867][ T5311] bridge0: port 1(vlan2) entered blocking state [ 157.370894][ T5311] bridge0: port 1(vlan2) entered forwarding state [ 158.773780][ T5354] loop1: detected capacity change from 0 to 2048 [ 158.779214][ T5354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.557400][ T4318] Bluetooth: hci3: command 0x0406 tx timeout [ 164.557520][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 164.561060][ T4310] Bluetooth: hci0: command 0x0406 tx timeout [ 164.562953][ T4315] Bluetooth: hci1: command 0x0406 tx timeout [ 164.564825][ T4315] Bluetooth: hci4: command 0x0406 tx timeout [ 168.155504][ T5417] loop0: detected capacity change from 0 to 8192 [ 168.191195][ T5417] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.194777][ T5417] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 168.265279][ T5417] REISERFS (device loop0): using ordered data mode [ 168.267150][ T5417] reiserfs: using flush barriers [ 168.370392][ T5417] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.375405][ T5417] REISERFS (device loop0): checking transaction log (loop0) [ 168.394741][ T5417] REISERFS (device loop0): Using r5 hash to sort names [ 168.481643][ T5425] loop4: detected capacity change from 0 to 40427 [ 168.546154][ T5425] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 168.548291][ T5425] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 168.551792][ T5425] F2FS-fs (loop4): invalid crc value [ 168.567030][ T5417] reiserfs: enabling write barrier flush mode [ 168.596086][ T5417] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 171.421217][ T5425] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 171.446928][ T4307] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 171.449407][ T4307] Bluetooth: hci3: Injecting HCI hardware error event [ 171.453137][ T4307] Bluetooth: hci3: hardware error 0x00 [ 172.441471][ T5450] loop2: detected capacity change from 0 to 1024 [ 172.462675][ T5450] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (1c2c0) [ 172.536989][ T5460] loop0: detected capacity change from 0 to 1024 [ 172.730442][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.732595][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.579722][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.582828][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.607669][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.609662][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.669199][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.671254][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.357951][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.359901][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.380269][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.382141][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.574163][ T4307] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 174.987455][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.989431][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.033649][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.035683][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.155021][ T5484] loop1: detected capacity change from 0 to 4096 [ 175.220254][ T5484] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.222969][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.224928][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.928035][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.930069][ T5460] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.956289][ T5500] loop2: detected capacity change from 0 to 512 [ 176.969877][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 176.990432][ T5500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 177.002899][ T5500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.009193][ T5500] EXT4-fs (loop2): 1 truncate cleaned up [ 177.010708][ T5500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.796650][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 178.248804][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 178.300372][ T5513] bridge0: port 3(vlan2) entered blocking state [ 178.331236][ T5513] bridge0: port 3(vlan2) entered disabled state [ 178.343183][ T5513] device vlan2 entered promiscuous mode [ 178.501362][ T5513] device bond0 entered promiscuous mode [ 178.532457][ T5513] device bond_slave_0 entered promiscuous mode [ 178.534315][ T5513] device bond_slave_1 entered promiscuous mode [ 178.536555][ T5513] bridge0: port 3(vlan2) entered blocking state [ 178.538244][ T5513] bridge0: port 3(vlan2) entered forwarding state [ 182.258884][ T5536] loop1: detected capacity change from 0 to 1024 [ 182.278018][ T5536] EXT2-fs (loop1): error: couldn't mount because of unsupported optional features (1c2c0) [ 182.362246][ T5548] loop0: detected capacity change from 0 to 64 [ 182.593814][ T5550] loop3: detected capacity change from 0 to 512 [ 184.366101][ T5555] loop4: detected capacity change from 0 to 4096 [ 184.401693][ T5555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.724157][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 186.740650][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 186.795695][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 186.872350][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.874206][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.822337][ T5644] loop2: detected capacity change from 0 to 4096 [ 195.130246][ T5647] loop1: detected capacity change from 0 to 40427 [ 195.258480][ T5647] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 195.260731][ T5647] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 195.271018][ T5647] F2FS-fs (loop1): invalid crc value [ 195.580137][ T5647] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.920804][ T5647] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 195.922956][ T5647] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.926711][ T5644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.434133][ T5661] syz.1.330: attempt to access beyond end of device [ 196.434133][ T5661] loop1: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 197.798551][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 198.248515][ T5682] loop2: detected capacity change from 0 to 256 [ 198.257750][ T5682] FAT-fs (loop2): Unrecognized mount option "Y84"F3mLm؀9BW呇 Qא;tìlYQȄ؛?pP͜. -\va)}"ITpƢ`]]>naTƂH֗W6`qV3" or missing value [ 200.118504][ T4293] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.554233][ T5698] loop4: detected capacity change from 0 to 512 [ 201.233073][ T5699] loop3: detected capacity change from 0 to 1024 [ 201.286324][ T5699] EXT2-fs (loop3): error: couldn't mount because of unsupported optional features (1c2c0) [ 203.996761][ T5725] loop1: detected capacity change from 0 to 4096 [ 204.068714][ T5725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 206.043440][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 206.079090][ T5752] loop2: detected capacity change from 0 to 16 [ 206.100327][ T5752] erofs: (device loop2): mounted with root inode @ nid 36. [ 206.888575][ T5758] loop1: detected capacity change from 0 to 64 [ 206.906366][ T5758] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 207.127815][ T5763] process 'syz.2.356' launched './file0' with NULL argv: empty string added [ 207.141295][ T5763] syz.2.356: attempt to access beyond end of device [ 207.141295][ T5763] loop2: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 207.228779][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 207.231483][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 207.234224][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 207.237294][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 207.240194][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 207.242935][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 207.246696][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 207.249181][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 207.251578][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 207.254409][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 207.256837][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 207.259385][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 207.262046][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 207.264517][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 207.267219][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 207.270610][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 207.273207][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 207.276252][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 207.278947][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 207.281954][ T5763] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 207.284476][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 207.288282][ T5763] syz.2.356: attempt to access beyond end of device [ 207.288282][ T5763] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 207.292524][ T5763] syz.2.356: attempt to access beyond end of device [ 207.292524][ T5763] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 207.296683][ T5763] syz.2.356: attempt to access beyond end of device [ 207.296683][ T5763] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 207.301064][ T5763] syz.2.356: attempt to access beyond end of device [ 207.301064][ T5763] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 207.305331][ T5763] syz.2.356: attempt to access beyond end of device [ 207.305331][ T5763] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 207.309337][ T5763] syz.2.356: attempt to access beyond end of device [ 207.309337][ T5763] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 207.313496][ T5763] syz.2.356: attempt to access beyond end of device [ 207.313496][ T5763] loop2: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 207.317738][ T5763] syz.2.356: attempt to access beyond end of device [ 207.317738][ T5763] loop2: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 207.321909][ T5763] syz.2.356: attempt to access beyond end of device [ 207.321909][ T5763] loop2: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 207.339527][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 207.342268][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 207.345183][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 207.348445][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 207.351020][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 207.353740][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 207.356758][ T5763] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 207.359377][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 207.361897][ T5763] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 207.364393][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 207.367480][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 207.369996][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 207.372888][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 207.375311][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 207.377722][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 207.380315][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 207.382765][ T5763] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 207.385374][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 207.387967][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 207.390598][ T5763] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 210.042869][ T5786] loop4: detected capacity change from 0 to 1024 [ 210.118637][ T5786] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (1c2c0) [ 210.323394][ T4293] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.441538][ T5806] loop3: detected capacity change from 0 to 64 [ 210.464432][ T5802] loop2: detected capacity change from 0 to 2048 [ 210.486808][ T5802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.674537][ T5811] bridge0: port 2(vlan3) entered blocking state [ 210.676409][ T5811] bridge0: port 2(vlan3) entered disabled state [ 210.681568][ T5811] device vlan3 entered promiscuous mode [ 210.683133][ T5811] device bond0 entered promiscuous mode [ 210.718975][ T5811] device vlan2 entered promiscuous mode [ 210.890353][ T5816] binder: 5814:5816 ioctl c0046209 9999999999999999 returned -22 [ 211.597478][ T5816] loop3: detected capacity change from 0 to 256 [ 211.672597][ T5821] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 211.703188][ T5816] input: syz0 as /devices/virtual/input/input3 [ 212.624472][ T5825] bond1: (slave gretap1): making interface the new active one [ 212.640311][ T5825] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 215.446819][ T5842] loop0: detected capacity change from 0 to 2048 [ 215.496062][ T5848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.453726][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 218.159648][ T5881] bridge0: port 2(vlan3) entered blocking state [ 218.163323][ T5881] bridge0: port 2(vlan3) entered disabled state [ 218.165950][ T5881] device vlan3 entered promiscuous mode [ 218.167546][ T5881] device bond0 entered promiscuous mode [ 218.170535][ T5881] device vlan2 entered promiscuous mode [ 218.302468][ T5860] loop1: detected capacity change from 0 to 40427 [ 218.305647][ T5860] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 218.313926][ T5860] F2FS-fs (loop1): invalid crc value [ 218.317307][ T5860] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.718554][ T5860] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 221.764905][ T5905] loop2: detected capacity change from 0 to 512 [ 230.238295][ T5971] loop0: detected capacity change from 0 to 256 [ 230.244694][ T5971] FAT-fs (loop0): Unrecognized mount option "Y84"F3mLm؀9BW呇 Qא;tìlYQȄ؛?pP͜. -\va)}"ITpƢ`]]>naTƂH֗W6`qV3" or missing value [ 231.830559][ T4529] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.832085][ T5976] fuse: Unknown parameter '0xffffffffffffffff' [ 231.850171][ T5976] loop1: detected capacity change from 0 to 16 [ 231.977751][ T5980] bridge0: port 3(vlan2) entered blocking state [ 231.997521][ T5976] erofs: (device loop1): mounted with root inode @ nid 36. [ 231.999956][ T5980] bridge0: port 3(vlan2) entered disabled state [ 232.002649][ T5980] device vlan2 entered promiscuous mode [ 232.004070][ T5980] device bond0 entered promiscuous mode [ 232.005544][ T5980] device bond_slave_0 entered promiscuous mode [ 232.007198][ T5980] device bond_slave_1 entered promiscuous mode [ 232.020746][ T5980] bridge0: port 3(vlan2) entered blocking state [ 232.022541][ T5980] bridge0: port 3(vlan2) entered forwarding state [ 232.027544][ T5976] syz.1.414 (5976): drop_caches: 2 [ 232.883598][ T5976] bio_check_eod: 18 callbacks suppressed [ 232.883615][ T5976] syz.1.414: attempt to access beyond end of device [ 232.883615][ T5976] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 233.159618][ T5987] syz.1.414: attempt to access beyond end of device [ 233.159618][ T5987] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 236.879978][ T6025] loop4: detected capacity change from 0 to 256 [ 236.883551][ T6025] FAT-fs (loop4): Unrecognized mount option "Y84"F3mLm؀9BW呇 Qא;tìlYQȄ؛?pP͜. -\va)}"ITpƢ`]]>naTƂH֗W6`qV3" or missing value [ 237.094632][ T6034] netlink: 240 bytes leftover after parsing attributes in process `syz.2.431'. [ 237.097691][ T6034] netlink: 152 bytes leftover after parsing attributes in process `syz.2.431'. [ 237.104497][ T6034] loop2: detected capacity change from 0 to 16 [ 238.087126][ T6034] erofs: (device loop2): mounted with root inode @ nid 36. [ 240.220195][ T6051] loop2: detected capacity change from 0 to 128 [ 241.007367][ T6053] loop0: detected capacity change from 0 to 2048 [ 241.968045][ T6060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.724776][ T6096] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 246.561849][ T6096] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 246.641977][ T6096] netlink: 164 bytes leftover after parsing attributes in process `syz.2.450'. [ 246.747636][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 246.771751][ T6114] loop1: detected capacity change from 0 to 128 [ 248.357952][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.359678][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.434944][ T6114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 249.577627][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 253.077006][ T6166] loop0: detected capacity change from 0 to 2048 [ 254.105172][ T6170] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.586018][ T6201] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 256.656178][ T6201] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 256.667145][ T4392] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 256.673286][ T6201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.688338][ T6201] device vlan4 entered promiscuous mode [ 256.690620][ T6201] device bond1 entered promiscuous mode [ 256.692221][ T6201] device ip6gretap1 entered promiscuous mode [ 257.749169][ T39] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.757228][ T6201] device bond1 left promiscuous mode [ 257.757256][ T6201] device ip6gretap1 left promiscuous mode [ 258.129362][ T6214] loop4: detected capacity change from 0 to 8 [ 258.152921][ T6214] SQUASHFS error: Unable to read inode 0x11f [ 259.950617][ T6226] loop0: detected capacity change from 0 to 1024 [ 260.047368][ T6226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.303068][ T6226] overlayfs: missing 'lowerdir' [ 262.251120][ T6239] loop1: detected capacity change from 0 to 256 [ 263.652431][ T6265] loop0: detected capacity change from 0 to 16 [ 264.303298][ T6265] erofs: (device loop0): mounted with root inode @ nid 36. [ 264.339326][ T6268] loop1: detected capacity change from 0 to 1024 [ 265.070784][ T6268] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 265.073420][ T6268] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 265.078623][ T6268] EXT4-fs error (device loop1): ext4_get_journal_inode:5723: inode #5: comm syz.1.494: unexpected bad inode w/o EXT4_IGET_BAD [ 265.095639][ T6268] EXT4-fs (loop1): no journal found [ 265.097074][ T6268] EXT4-fs (loop1): can't get journal size [ 265.114388][ T6268] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 267.305128][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 268.103432][ T6298] loop0: detected capacity change from 0 to 128 [ 268.899232][ T6298] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 268.901778][ T6298] FAT-fs (loop0): Filesystem has been set read-only [ 272.308906][ T6327] loop4: detected capacity change from 0 to 4096 [ 272.607978][ T6336] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.595796][ T6356] bridge0: port 3(vxlan0) entered blocking state [ 274.597729][ T6356] bridge0: port 3(vxlan0) entered disabled state [ 274.601332][ T6356] device vxlan0 entered promiscuous mode [ 274.761690][ T6360] loop2: detected capacity change from 0 to 2048 [ 274.808055][ T6360] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 274.854426][ T6360] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 274.871878][ T6360] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 274.886353][ T6360] UDF-fs: Scanning with blocksize 512 failed [ 274.935313][ T6360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.297324][ T6380] loop2: detected capacity change from 0 to 512 [ 276.378840][ T6380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 277.401754][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 279.331510][ T6415] loop4: detected capacity change from 0 to 64 [ 279.398197][ T6421] loop0: detected capacity change from 0 to 2048 [ 279.422890][ T6424] netlink: 104 bytes leftover after parsing attributes in process `syz.3.539'. [ 279.437139][ T6426] loop2: detected capacity change from 0 to 256 [ 279.452824][ T6422] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 279.454972][ T6422] FAT-fs (loop2): Filesystem has been set read-only [ 279.473402][ T6421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 279.501127][ T4307] Bluetooth: hci0: Invalid handle: 0xfcf7 > 0x0eff [ 279.656950][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 281.161002][ T6432] fuse: Unknown parameter 'user_i00000000000000000000' [ 283.046936][ T6465] loop2: detected capacity change from 0 to 1024 [ 283.158637][ T6465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 283.396923][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 284.428469][ T4307] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 284.431379][ T4307] CPU: 1 PID: 4307 Comm: kworker/u5:2 Not tainted 6.1.129-syzkaller #0 [ 284.433681][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 284.436471][ T4307] Workqueue: hci4 hci_rx_work [ 284.437766][ T4307] Call trace: [ 284.438621][ T4307] dump_backtrace+0x1c8/0x1f4 [ 284.439872][ T4307] show_stack+0x2c/0x3c [ 284.441008][ T4307] dump_stack_lvl+0x108/0x170 [ 284.442261][ T4307] dump_stack+0x1c/0x58 [ 284.443499][ T4307] sysfs_create_dir_ns+0x278/0x318 [ 284.444887][ T4307] kobject_add_internal+0x598/0xb14 [ 284.446400][ T4307] kobject_add+0x14c/0x21c [ 284.447581][ T4307] device_add+0x400/0xef4 [ 284.448795][ T4307] hci_conn_add_sysfs+0xc4/0x1cc [ 284.450194][ T4307] le_conn_complete_evt+0xa48/0xff4 [ 284.451649][ T4307] hci_le_conn_complete_evt+0x114/0x404 [ 284.453254][ T4307] hci_le_meta_evt+0x2b8/0x47c [ 284.454701][ T4307] hci_event_packet+0x6f8/0x109c [ 284.456065][ T4307] hci_rx_work+0x310/0xa84 [ 284.457387][ T4307] process_one_work+0x804/0x1484 [ 284.458751][ T4307] worker_thread+0x8e4/0xfec [ 284.459982][ T4307] kthread+0x250/0x2d8 [ 284.461146][ T4307] ret_from_fork+0x10/0x20 [ 284.469454][ T4307] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 284.473073][ T4307] Bluetooth: hci4: failed to register connection device [ 286.038569][ T6501] loop4: detected capacity change from 0 to 4096 [ 286.303788][ T6501] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 286.306761][ T6501] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 286.318071][ T6501] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 286.321180][ T6501] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 286.324691][ T6501] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 286.328973][ T6501] ntfs: volume version 3.1. [ 286.331601][ T6501] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 286.334849][ T6501] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 286.339036][ T6501] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 286.341871][ T6501] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 286.344840][ T6501] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 288.269648][ T6512] loop4: detected capacity change from 0 to 2048 [ 288.338514][ T6521] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.530067][ T6537] overlayfs: failed to clone upperpath [ 291.847434][ T4315] Bluetooth: hci4: command 0x0406 tx timeout [ 295.934413][ T6580] loop2: detected capacity change from 0 to 1024 [ 298.435923][ T6589] loop1: detected capacity change from 0 to 2048 [ 298.465900][ T6595] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.492905][ T6594] loop0: detected capacity change from 0 to 512 [ 298.657432][ T6594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.890994][ T6603] loop4: detected capacity change from 0 to 512 [ 298.896710][ T6603] EXT4-fs: Ignoring removed i_version option [ 298.935551][ T6603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 299.144304][ T6603] EXT4-fs (loop4): 1 truncate cleaned up [ 299.145935][ T6603] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.504076][ T6594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 299.655770][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 300.632769][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 301.899607][ T6622] binder: 6609:6622 ioctl c0306201 0 returned -14 [ 304.558033][ T6643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.080817][ T6656] loop4: detected capacity change from 0 to 512 [ 306.090247][ T6649] loop0: detected capacity change from 0 to 2048 [ 306.095646][ T6656] EXT4-fs: Ignoring removed orlov option [ 306.107114][ T6656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 306.695706][ T6659] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.824967][ T6656] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.603: casefold flag without casefold feature [ 306.829869][ T6656] EXT4-fs (loop4): Remounting filesystem read-only [ 306.831947][ T6656] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.603: couldn't read orphan inode 15 (err -117) [ 306.835240][ T6656] EXT4-fs (loop4): Remounting filesystem read-only [ 306.837054][ T6656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 307.107267][ T6671] loop2: detected capacity change from 0 to 2048 [ 308.129264][ T6680] netlink: 156 bytes leftover after parsing attributes in process `syz.1.609'. [ 308.680794][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 308.704366][ T6681] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.403017][ T6693] loop4: detected capacity change from 0 to 64 [ 309.871271][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.873000][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.089705][ T6694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.236574][ T6703] loop4: detected capacity change from 0 to 2048 [ 310.321882][ T6709] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.345969][ T6708] loop1: detected capacity change from 0 to 1024 [ 310.356105][ T6707] loop0: detected capacity change from 0 to 1024 [ 310.755329][ T6707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 310.783298][ T6719] loop2: detected capacity change from 0 to 2048 [ 310.794615][ T6719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.903492][ T6708] EXT4-fs (loop1): Test dummy encryption mode enabled [ 310.979081][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 310.981853][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.984347][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.725081][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.725892][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.387111][ T6708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 312.418967][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.421363][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.467663][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 312.534381][ T6708] EXT4-fs (loop1): unmounting filesystem. [ 313.685551][ T6734] loop0: detected capacity change from 0 to 2048 [ 313.768904][ T6736] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.075290][ T6749] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.081513][ T6755] loop4: detected capacity change from 0 to 2048 [ 315.279899][ T6760] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.511600][ T6763] loop0: detected capacity change from 0 to 512 [ 315.529844][ T6763] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.562216][ T6763] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.634: invalid block [ 315.595079][ T6763] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.634: couldn't read orphan inode 11 (err -117) [ 315.598528][ T6763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 319.580935][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 320.656568][ T6810] loop2: detected capacity change from 0 to 2048 [ 320.722023][ T6811] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.111639][ T6815] loop4: detected capacity change from 0 to 1024 [ 321.113835][ T6815] EXT4-fs: Ignoring removed nobh option [ 321.115294][ T6815] EXT4-fs: Ignoring removed bh option [ 321.116733][ T6815] EXT4-fs: Ignoring removed bh option [ 321.152127][ T6815] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.205122][ T6815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 323.440918][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 324.317987][ T6842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.652'. [ 327.916081][ T6870] loop4: detected capacity change from 0 to 2048 [ 328.019858][ T6872] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.865881][ T6916] loop0: detected capacity change from 0 to 1024 [ 331.882599][ T6916] EXT4-fs: Ignoring removed nobh option [ 331.884129][ T6916] EXT4-fs: Ignoring removed bh option [ 331.886044][ T6916] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 332.630431][ T6916] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.286617][ T6930] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.671: Allocating blocks 497-513 which overlap fs metadata [ 333.514123][ T6930] EXT4-fs (loop0): pa 00000000694d2aff: logic 256, phys. 385, len 8 [ 333.516481][ T6930] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 333.751369][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 337.207612][ T6979] loop4: detected capacity change from 0 to 2048 [ 338.286769][ T6985] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.363891][ T7008] syz.2.695 uses obsolete (PF_INET,SOCK_PACKET) [ 341.389066][ T7022] netlink: 108 bytes leftover after parsing attributes in process `syz.2.699'. [ 342.543321][ T7030] loop0: detected capacity change from 0 to 2048 [ 342.629911][ T7035] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.592598][ T7078] loop0: detected capacity change from 0 to 2048 [ 347.731729][ T7079] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.059691][ T7088] loop4: detected capacity change from 0 to 64 [ 348.133755][ T7088] syz.4.719: attempt to access beyond end of device [ 348.133755][ T7088] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 348.146724][ T7088] Buffer I/O error on dev loop4, logical block 512, async page read [ 348.153693][ T7088] syz.4.719: attempt to access beyond end of device [ 348.153693][ T7088] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 348.171130][ T7088] Buffer I/O error on dev loop4, logical block 56576, async page read [ 348.326126][ T7092] loop0: detected capacity change from 0 to 64 [ 348.995453][ T7088] syz.4.719: attempt to access beyond end of device [ 348.995453][ T7088] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 349.008161][ T7088] Buffer I/O error on dev loop4, logical block 512, async page read [ 349.010621][ T7088] syz.4.719: attempt to access beyond end of device [ 349.010621][ T7088] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 349.014167][ T7088] Buffer I/O error on dev loop4, logical block 56576, async page read [ 349.061963][ T7087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.374807][ T7099] loop0: detected capacity change from 0 to 1024 [ 349.625792][ T7099] EXT4-fs (loop0): Test dummy encryption mode enabled [ 351.799964][ T7099] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 351.903595][ T7117] loop2: detected capacity change from 0 to 2048 [ 351.922881][ T7119] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.748357][ T7135] hub 2-0:1.0: USB hub found [ 352.751784][ T7135] hub 2-0:1.0: 8 ports detected [ 353.222068][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 353.677549][ T7139] loop4: detected capacity change from 0 to 2048 [ 353.746204][ T7141] loop0: detected capacity change from 0 to 2048 [ 353.822542][ T7145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.854895][ T7144] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.351678][ T7158] loop4: detected capacity change from 0 to 128 [ 356.441174][ T7158] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 357.945144][ T7177] loop2: detected capacity change from 0 to 1024 [ 357.958716][ T7177] EXT4-fs (loop2): Test dummy encryption mode enabled [ 358.045083][ T7178] loop0: detected capacity change from 0 to 2048 [ 358.071443][ T7177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 358.083042][ T7184] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.091031][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.093475][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.017326][ T7177] EXT4-fs (loop2): unmounting filesystem. [ 363.256172][ T7225] loop0: detected capacity change from 0 to 64 [ 363.351990][ T7225] syz.0.759: attempt to access beyond end of device [ 363.351990][ T7225] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 363.366665][ T7225] Buffer I/O error on dev loop0, logical block 512, async page read [ 363.384660][ T7225] syz.0.759: attempt to access beyond end of device [ 363.384660][ T7225] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 363.412923][ T7225] Buffer I/O error on dev loop0, logical block 56576, async page read [ 363.434985][ T7225] syz.0.759: attempt to access beyond end of device [ 363.434985][ T7225] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 363.479087][ T7225] Buffer I/O error on dev loop0, logical block 512, async page read [ 363.483717][ T7225] syz.0.759: attempt to access beyond end of device [ 363.483717][ T7225] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 363.487436][ T7225] Buffer I/O error on dev loop0, logical block 56576, async page read [ 370.227204][ T7274] loop4: detected capacity change from 0 to 8 [ 370.293955][ T7274] SQUASHFS error: Unable to read inode 0x11f [ 370.703265][ T7282] loop4: detected capacity change from 0 to 4096 [ 370.770495][ T7282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.899944][ T7282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 371.391906][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.393785][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.552656][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 372.001498][ T7296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.310781][ T7371] loop0: detected capacity change from 0 to 40427 [ 382.321229][ T7371] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 382.323418][ T7371] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 382.331370][ T7371] F2FS-fs (loop0): invalid crc value [ 382.364771][ T7371] F2FS-fs (loop0): Found nat_bits in checkpoint [ 382.388663][ T7371] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 382.390671][ T7371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 382.899908][ T7380] syz.0.799: attempt to access beyond end of device [ 382.899908][ T7380] loop0: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 384.015048][ T7388] loop0: detected capacity change from 0 to 2048 [ 384.045467][ T7389] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.191304][ T7431] loop0: detected capacity change from 0 to 4096 [ 390.236609][ T7436] loop4: detected capacity change from 0 to 2048 [ 390.295675][ T7439] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.299176][ T7438] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.961683][ T7468] loop0: detected capacity change from 0 to 2048 [ 394.027998][ T7469] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.295110][ T7548] loop4: detected capacity change from 0 to 128 [ 403.185694][ T7548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 403.481922][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 403.634747][ T7567] loop4: detected capacity change from 0 to 2048 [ 403.674622][ T7567] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 403.820695][ T7567] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 403.823831][ T7567] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 403.825836][ T7567] UDF-fs: Scanning with blocksize 512 failed [ 403.846662][ T7567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.994254][ T7617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.021177][ T7630] loop0: detected capacity change from 0 to 2048 [ 411.061875][ T7633] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.340543][ T7614] fuse: Unknown parameter 'user_i00000000000000000000' [ 413.062479][ T7650] loop4: detected capacity change from 0 to 2048 [ 413.160935][ T7660] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 415.221376][ T7670] netlink: 'syz.1.886': attribute type 10 has an invalid length. [ 415.301577][ T7670] device wlan1 entered promiscuous mode [ 415.306111][ T7670] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 415.364348][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 415.367128][ T4564] bridge0: port 2(vlan3) entered blocking state [ 415.368991][ T4564] bridge0: port 2(vlan3) entered forwarding state [ 415.413551][ T7670] netlink: 164 bytes leftover after parsing attributes in process `syz.1.886'. [ 421.252705][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 427.293223][ T7763] loop4: detected capacity change from 0 to 1024 [ 427.305866][ T7763] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 427.308757][ T7763] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 427.313866][ T7763] EXT4-fs error (device loop4): ext4_get_journal_inode:5723: inode #5: comm syz.4.908: unexpected bad inode w/o EXT4_IGET_BAD [ 427.318518][ T7763] EXT4-fs (loop4): no journal found [ 427.319979][ T7763] EXT4-fs (loop4): can't get journal size [ 427.407178][ T7763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 428.810032][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 433.085600][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.087362][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.265646][ T7836] loop0: detected capacity change from 0 to 1024 [ 433.293205][ T7836] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 433.295742][ T7836] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 433.301142][ T7836] EXT4-fs error (device loop0): ext4_get_journal_inode:5723: inode #5: comm syz.0.931: unexpected bad inode w/o EXT4_IGET_BAD [ 433.305044][ T7836] EXT4-fs (loop0): no journal found [ 433.306467][ T7836] EXT4-fs (loop0): can't get journal size [ 433.324889][ T7836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 435.126619][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 447.099464][ T8002] loop4: detected capacity change from 0 to 8 [ 447.464588][ T8002] SQUASHFS error: zlib decompression failed, data probably corrupt [ 447.464633][ T8002] SQUASHFS error: Failed to read block 0x9b: -5 [ 447.464646][ T8002] SQUASHFS error: Unable to read metadata cache entry [99] [ 447.464657][ T8002] SQUASHFS error: Unable to read inode 0x127 [ 449.697104][ T8028] netlink: 'syz.3.960': attribute type 10 has an invalid length. [ 449.711297][ T8028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.960'. [ 449.713895][ T8028] device batadv0 entered promiscuous mode [ 449.747408][ T8028] bridge0: port 4(batadv0) entered blocking state [ 449.757585][ T8028] bridge0: port 4(batadv0) entered disabled state [ 449.785322][ T8028] bridge0: port 4(batadv0) entered blocking state [ 449.787086][ T8028] bridge0: port 4(batadv0) entered forwarding state [ 450.051047][ T7914] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 450.053831][ T7914] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 455.101591][ T8068] loop4: detected capacity change from 0 to 1024 [ 455.137985][ T8068] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 455.140638][ T8068] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 455.144450][ T8068] EXT4-fs error (device loop4): ext4_get_journal_inode:5723: inode #5: comm syz.4.971: unexpected bad inode w/o EXT4_IGET_BAD [ 455.148270][ T8068] EXT4-fs (loop4): no journal found [ 455.149683][ T8068] EXT4-fs (loop4): can't get journal size [ 455.340048][ T8068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 455.486128][ T8080] loop0: detected capacity change from 0 to 128 [ 455.531659][ T8080] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 457.004184][ T8080] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 457.319148][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 458.191197][ T8090] loop4: detected capacity change from 0 to 64 [ 458.298874][ T8090] syz.4.977: attempt to access beyond end of device [ 458.298874][ T8090] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 458.302361][ T8090] Buffer I/O error on dev loop4, logical block 512, async page read [ 458.304730][ T8090] syz.4.977: attempt to access beyond end of device [ 458.304730][ T8090] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 458.339609][ T8090] Buffer I/O error on dev loop4, logical block 56576, async page read [ 458.345515][ T8090] syz.4.977: attempt to access beyond end of device [ 458.345515][ T8090] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 458.395599][ T8090] Buffer I/O error on dev loop4, logical block 512, async page read [ 458.419618][ T8090] syz.4.977: attempt to access beyond end of device [ 458.419618][ T8090] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 459.127032][ T8090] Buffer I/O error on dev loop4, logical block 56576, async page read [ 464.476999][ T8147] loop0: detected capacity change from 0 to 64 [ 464.549520][ T8147] syz.0.991: attempt to access beyond end of device [ 464.549520][ T8147] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 464.552996][ T8147] Buffer I/O error on dev loop0, logical block 512, async page read [ 464.555208][ T8147] syz.0.991: attempt to access beyond end of device [ 464.555208][ T8147] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 464.563955][ T8147] Buffer I/O error on dev loop0, logical block 56576, async page read [ 464.567510][ T8147] syz.0.991: attempt to access beyond end of device [ 464.567510][ T8147] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 464.573142][ T8147] Buffer I/O error on dev loop0, logical block 512, async page read [ 464.575302][ T8147] syz.0.991: attempt to access beyond end of device [ 464.575302][ T8147] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 464.597879][ T8147] Buffer I/O error on dev loop0, logical block 56576, async page read [ 471.633521][ T8268] loop4: detected capacity change from 0 to 1024 [ 471.659021][ T8268] EXT4-fs: Ignoring removed orlov option [ 471.663383][ T8268] EXT4-fs (loop4): Test dummy encryption mode enabled [ 471.726526][ T8268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 473.169805][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 473.249073][ T8288] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 473.272059][ T8288] CIFS mount error: No usable UNC path provided in device string! [ 473.272059][ T8288] [ 473.274893][ T8288] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 478.707405][ T8400] loop0: detected capacity change from 0 to 512 [ 479.343689][ T8400] EXT4-fs: Ignoring removed i_version option [ 479.404658][ T8400] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 479.421391][ T8400] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 479.426232][ T8400] EXT4-fs (loop0): 1 truncate cleaned up [ 479.428075][ T8400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 479.537783][ T8400] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 479.540062][ T8400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1025'. [ 479.542356][ T8400] device batadv0 entered promiscuous mode [ 479.544399][ T8400] bridge0: port 4(batadv0) entered blocking state [ 479.546450][ T8400] bridge0: port 4(batadv0) entered disabled state [ 479.553437][ T8400] bridge0: port 4(batadv0) entered blocking state [ 479.555121][ T8400] bridge0: port 4(batadv0) entered forwarding state [ 480.807068][ T4565] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 480.809905][ T4565] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 480.939999][ T8400] batman_adv: batadv0: Adding interface: dummy0 [ 480.941913][ T8400] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.962060][ T8400] batman_adv: batadv0: Interface activated: dummy0 [ 480.989213][ T8400] batadv0: mtu less than device minimum [ 481.004126][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.010243][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.016076][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.021853][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.027740][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.033552][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.039240][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.044999][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.050745][ T8400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.384084][ T8497] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 483.888432][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 486.761800][ T8520] loop4: detected capacity change from 0 to 64 [ 487.488363][ T8520] syz.4.1042: attempt to access beyond end of device [ 487.488363][ T8520] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 487.492059][ T8520] Buffer I/O error on dev loop4, logical block 512, async page read [ 487.494214][ T8520] syz.4.1042: attempt to access beyond end of device [ 487.494214][ T8520] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 487.583524][ T8520] Buffer I/O error on dev loop4, logical block 56576, async page read [ 487.599607][ T8528] syz.4.1042: attempt to access beyond end of device [ 487.599607][ T8528] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 487.603255][ T8528] Buffer I/O error on dev loop4, logical block 512, async page read [ 487.605332][ T8528] syz.4.1042: attempt to access beyond end of device [ 487.605332][ T8528] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 487.650801][ T8528] Buffer I/O error on dev loop4, logical block 56576, async page read [ 488.441892][ T8541] loop4: detected capacity change from 0 to 256 [ 488.457766][ T8541] exfat: Unknown parameter 'zero_size_dir' [ 488.743597][ T8005] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.390892][ T8554] loop4: detected capacity change from 0 to 16 [ 490.398595][ T8554] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 492.965440][ T8631] loop4: detected capacity change from 0 to 16 [ 492.995279][ T8631] erofs: (device loop4): mounted with root inode @ nid 36. [ 493.905705][ T14] net_ratelimit: 10 callbacks suppressed [ 493.905720][ T14] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 494.409239][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.411032][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.493420][ T14] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 495.091929][ T8648] loop0: detected capacity change from 0 to 64 [ 495.206587][ T8648] syz.0.1056: attempt to access beyond end of device [ 495.206587][ T8648] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 495.226119][ T8648] Buffer I/O error on dev loop0, logical block 512, async page read [ 495.237190][ T8648] syz.0.1056: attempt to access beyond end of device [ 495.237190][ T8648] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 495.277233][ T8648] Buffer I/O error on dev loop0, logical block 56576, async page read [ 495.307226][ T8648] syz.0.1056: attempt to access beyond end of device [ 495.307226][ T8648] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 495.329375][ T8648] Buffer I/O error on dev loop0, logical block 512, async page read [ 495.331582][ T8648] syz.0.1056: attempt to access beyond end of device [ 495.331582][ T8648] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 495.335126][ T8648] Buffer I/O error on dev loop0, logical block 56576, async page read [ 495.664752][ T8656] loop0: detected capacity change from 0 to 64 [ 496.864568][ T8656] syz.0.1068: attempt to access beyond end of device [ 496.864568][ T8656] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 496.875342][ T8656] Buffer I/O error on dev loop0, logical block 512, async page read [ 496.877467][ T8656] syz.0.1068: attempt to access beyond end of device [ 496.877467][ T8656] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 496.881395][ T8656] Buffer I/O error on dev loop0, logical block 56576, async page read [ 504.895671][ T8720] loop0: detected capacity change from 0 to 128 [ 509.363693][ T8743] loop4: detected capacity change from 0 to 131072 [ 509.494176][ T8743] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 509.496541][ T8743] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 509.501745][ T8743] F2FS-fs (loop4): invalid crc value [ 510.519934][ T8743] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 511.979393][ T8772] loop0: detected capacity change from 0 to 64 [ 515.295481][ T8793] loop0: detected capacity change from 0 to 64 [ 515.378117][ T8793] syz.0.1095: attempt to access beyond end of device [ 515.378117][ T8793] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 515.381878][ T8793] Buffer I/O error on dev loop0, logical block 512, async page read [ 515.383994][ T8793] syz.0.1095: attempt to access beyond end of device [ 515.383994][ T8793] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 515.387420][ T8793] Buffer I/O error on dev loop0, logical block 56576, async page read [ 519.752847][ T8822] loop0: detected capacity change from 0 to 64 [ 531.412597][ T8904] overlayfs: failed to clone upperpath [ 532.145321][ T8908] loop0: detected capacity change from 0 to 64 [ 532.307089][ T8912] loop4: detected capacity change from 0 to 16 [ 532.324415][ T8912] erofs: (device loop4): mounted with root inode @ nid 36. [ 533.454052][ T8923] loop0: detected capacity change from 0 to 256 [ 533.456175][ T8923] exfat: Unknown parameter 'zero_size_dir' [ 534.553106][ T8675] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 534.803936][ T8938] loop4: detected capacity change from 0 to 256 [ 535.517072][ T8941] loop0: detected capacity change from 0 to 16 [ 535.519459][ T8941] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 538.543866][ T8959] loop4: detected capacity change from 0 to 64 [ 538.666081][ T8961] loop0: detected capacity change from 0 to 64 [ 538.690533][ T8961] syz.0.1141: attempt to access beyond end of device [ 538.690533][ T8961] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 538.694401][ T8961] Buffer I/O error on dev loop0, logical block 512, async page read [ 538.707060][ T8961] syz.0.1141: attempt to access beyond end of device [ 538.707060][ T8961] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 538.715783][ T8961] Buffer I/O error on dev loop0, logical block 56576, async page read [ 538.724869][ T8961] syz.0.1141: attempt to access beyond end of device [ 538.724869][ T8961] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 538.734971][ T8961] Buffer I/O error on dev loop0, logical block 512, async page read [ 538.737085][ T8961] syz.0.1141: attempt to access beyond end of device [ 538.737085][ T8961] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 538.751268][ T8961] Buffer I/O error on dev loop0, logical block 56576, async page read [ 540.687809][ T8977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.691534][ T8977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.229270][ T9009] loop0: detected capacity change from 0 to 512 [ 544.680943][ T9009] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 545.007750][ T9017] loop4: detected capacity change from 0 to 256 [ 545.034936][ T9017] exfat: Unknown parameter 'zero_size_dir' [ 545.070321][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 545.869211][ T9023] loop4: detected capacity change from 0 to 16 [ 545.871587][ T9023] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 546.761109][ T9027] loop0: detected capacity change from 0 to 64 [ 546.784787][ T9027] hfs: get root inode failed [ 550.127935][ T8691] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 552.569630][ T9051] loop4: detected capacity change from 0 to 16 [ 552.575574][ T9051] erofs: (device loop4): mounted with root inode @ nid 36. [ 552.598040][ T9053] loop0: detected capacity change from 0 to 64 [ 552.811810][ T9053] syz.0.1166: attempt to access beyond end of device [ 552.811810][ T9053] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 552.815337][ T9053] Buffer I/O error on dev loop0, logical block 512, async page read [ 553.132089][ T9053] syz.0.1166: attempt to access beyond end of device [ 553.132089][ T9053] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 553.317203][ T9053] Buffer I/O error on dev loop0, logical block 56576, async page read [ 553.475537][ T9053] syz.0.1166: attempt to access beyond end of device [ 553.475537][ T9053] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 553.493996][ T9053] Buffer I/O error on dev loop0, logical block 512, async page read [ 553.496247][ T9053] syz.0.1166: attempt to access beyond end of device [ 553.496247][ T9053] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 553.678184][ T9053] Buffer I/O error on dev loop0, logical block 56576, async page read [ 555.081573][ T9035] Set syz1 is full, maxelem 65536 reached [ 555.565613][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.567680][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.653719][ T9082] loop4: detected capacity change from 0 to 64 [ 558.282327][ T9099] loop4: detected capacity change from 0 to 512 [ 558.460779][ T9099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 559.254123][ T9099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 560.320172][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 560.443254][ T9119] loop4: detected capacity change from 0 to 64 [ 560.465125][ T9119] syz.4.1182: attempt to access beyond end of device [ 560.465125][ T9119] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 560.478469][ T9119] Buffer I/O error on dev loop4, logical block 512, async page read [ 560.483018][ T9119] syz.4.1182: attempt to access beyond end of device [ 560.483018][ T9119] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 560.504391][ T9119] Buffer I/O error on dev loop4, logical block 56576, async page read [ 560.628821][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 562.906556][ T9139] loop0: detected capacity change from 0 to 64 [ 564.499213][ T4307] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 564.501884][ T4307] CPU: 0 PID: 4307 Comm: kworker/u5:2 Not tainted 6.1.129-syzkaller #0 [ 564.504134][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 564.506864][ T4307] Workqueue: hci0 hci_rx_work [ 564.508228][ T4307] Call trace: [ 564.509195][ T4307] dump_backtrace+0x1c8/0x1f4 [ 564.510515][ T4307] show_stack+0x2c/0x3c [ 564.511809][ T4307] dump_stack_lvl+0x108/0x170 [ 564.513073][ T4307] dump_stack+0x1c/0x58 [ 564.514224][ T4307] sysfs_create_dir_ns+0x278/0x318 [ 564.515687][ T4307] kobject_add_internal+0x598/0xb14 [ 564.517165][ T4307] kobject_add+0x14c/0x21c [ 564.518571][ T4307] device_add+0x400/0xef4 [ 564.519761][ T4307] hci_conn_add_sysfs+0xc4/0x1cc [ 564.521273][ T4307] le_conn_complete_evt+0xa48/0xff4 [ 564.522752][ T4307] hci_le_conn_complete_evt+0x114/0x404 [ 564.524265][ T4307] hci_le_meta_evt+0x2b8/0x47c [ 564.525607][ T4307] hci_event_packet+0x6f8/0x109c [ 564.526953][ T4307] hci_rx_work+0x310/0xa84 [ 564.528236][ T4307] process_one_work+0x804/0x1484 [ 564.529589][ T4307] worker_thread+0x8e4/0xfec [ 564.530928][ T4307] kthread+0x250/0x2d8 [ 564.532031][ T4307] ret_from_fork+0x10/0x20 [ 564.536334][ T4307] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.540156][ T4307] Bluetooth: hci0: failed to register connection device [ 565.816543][ T4307] ================================================================== [ 565.818961][ T4307] BUG: KASAN: use-after-free in l2cap_sock_new_connection_cb+0x1d4/0x284 [ 565.821362][ T4307] Read of size 8 at addr ffff0000f5a0f540 by task kworker/u5:2/4307 [ 565.823502][ T4307] [ 565.824132][ T4307] CPU: 1 PID: 4307 Comm: kworker/u5:2 Not tainted 6.1.129-syzkaller #0 [ 565.826506][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 565.829340][ T4307] Workqueue: hci0 hci_rx_work [ 565.830712][ T4307] Call trace: [ 565.831574][ T4307] dump_backtrace+0x1c8/0x1f4 [ 565.832896][ T4307] show_stack+0x2c/0x3c [ 565.834024][ T4307] dump_stack_lvl+0x108/0x170 [ 565.835383][ T4307] print_report+0x174/0x4c0 [ 565.836629][ T4307] kasan_report+0xd4/0x130 [ 565.837847][ T4307] __asan_report_load8_noabort+0x2c/0x38 [ 565.839392][ T4307] l2cap_sock_new_connection_cb+0x1d4/0x284 [ 565.840985][ T4307] l2cap_connect_cfm+0x2f8/0xe10 [ 565.842326][ T4307] hci_connect_cfm+0x120/0x1d0 [ 565.843570][ T4307] le_conn_complete_evt+0xab8/0xff4 [ 565.845058][ T4307] hci_le_conn_complete_evt+0x114/0x404 [ 565.846645][ T4307] hci_le_meta_evt+0x2b8/0x47c [ 565.848015][ T4307] hci_event_packet+0x6f8/0x109c [ 565.849339][ T4307] hci_rx_work+0x310/0xa84 [ 565.850554][ T4307] process_one_work+0x804/0x1484 [ 565.851888][ T4307] worker_thread+0x8e4/0xfec [ 565.853131][ T4307] kthread+0x250/0x2d8 [ 565.854211][ T4307] ret_from_fork+0x10/0x20 [ 565.855424][ T4307] [ 565.856033][ T4307] Allocated by task 4307: [ 565.857240][ T4307] kasan_set_track+0x4c/0x80 [ 565.858610][ T4307] kasan_save_alloc_info+0x24/0x30 [ 565.860057][ T4307] __kasan_kmalloc+0xac/0xc4 [ 565.861332][ T4307] __kmalloc+0xd8/0x1c4 [ 565.862698][ T4307] sk_prot_alloc+0xc4/0x1f0 [ 565.864034][ T4307] sk_alloc+0x44/0x3e0 [ 565.865191][ T4307] bt_sock_alloc+0x4c/0x140 [ 565.866446][ T4307] l2cap_sock_new_connection_cb+0xe4/0x284 [ 565.868037][ T4307] l2cap_connect_cfm+0x2f8/0xe10 [ 565.869364][ T4307] hci_connect_cfm+0x120/0x1d0 [ 565.870618][ T4307] le_conn_complete_evt+0xab8/0xff4 [ 565.872014][ T4307] hci_le_conn_complete_evt+0x114/0x404 [ 565.873532][ T4307] hci_le_meta_evt+0x2b8/0x47c [ 565.874852][ T4307] hci_event_packet+0x6f8/0x109c [ 565.876119][ T4307] hci_rx_work+0x310/0xa84 [ 565.877293][ T4307] process_one_work+0x804/0x1484 [ 565.878633][ T4307] worker_thread+0x8e4/0xfec [ 565.879883][ T4307] kthread+0x250/0x2d8 [ 565.881103][ T4307] ret_from_fork+0x10/0x20 [ 565.882359][ T4307] [ 565.882946][ T4307] Freed by task 9150: [ 565.884028][ T4307] kasan_set_track+0x4c/0x80 [ 565.885303][ T4307] kasan_save_free_info+0x38/0x5c [ 565.886655][ T4307] ____kasan_slab_free+0x144/0x1c0 [ 565.888084][ T4307] __kasan_slab_free+0x18/0x28 [ 565.889329][ T4307] __kmem_cache_free+0x2c0/0x4b4 [ 565.890618][ T4307] kfree+0xcc/0x1b8 [ 565.891611][ T4307] __sk_destruct+0x4bc/0x760 [ 565.892828][ T4307] __sk_free+0x388/0x4f4 [ 565.893923][ T4307] sk_free+0x60/0xc8 [ 565.894924][ T4307] l2cap_sock_kill+0x12c/0x234 [ 565.896271][ T4307] l2cap_sock_cleanup_listen+0xf8/0x290 [ 565.897746][ T4307] l2cap_sock_release+0x5c/0x1b4 [ 565.899045][ T4307] sock_close+0xb8/0x1fc [ 565.900178][ T4307] __fput+0x1c8/0x7c8 [ 565.901247][ T4307] ____fput+0x20/0x30 [ 565.902336][ T4307] task_work_run+0x240/0x2f0 [ 565.903481][ T4307] get_signal+0x1330/0x1528 [ 565.904689][ T4307] do_notify_resume+0x388/0x2cb8 [ 565.906004][ T4307] el0_svc+0x9c/0x168 [ 565.907056][ T4307] el0t_64_sync_handler+0x84/0xf0 [ 565.908432][ T4307] el0t_64_sync+0x18c/0x190 [ 565.909574][ T4307] [ 565.910172][ T4307] Last potentially related work creation: [ 565.911756][ T4307] kasan_save_stack+0x40/0x70 [ 565.913033][ T4307] __kasan_record_aux_stack+0xcc/0xe8 [ 565.914495][ T4307] kasan_record_aux_stack_noalloc+0x14/0x20 [ 565.916080][ T4307] call_rcu+0xfc/0xa40 [ 565.917284][ T4307] netlink_release+0x13c0/0x1910 [ 565.918557][ T4307] sock_close+0xb8/0x1fc [ 565.919763][ T4307] __fput+0x1c8/0x7c8 [ 565.920783][ T4307] ____fput+0x20/0x30 [ 565.921888][ T4307] task_work_run+0x240/0x2f0 [ 565.923099][ T4307] do_notify_resume+0x2080/0x2cb8 [ 565.924451][ T4307] el0_svc+0x9c/0x168 [ 565.925530][ T4307] el0t_64_sync_handler+0x84/0xf0 [ 565.926889][ T4307] el0t_64_sync+0x18c/0x190 [ 565.928052][ T4307] [ 565.928632][ T4307] Second to last potentially related work creation: [ 565.930456][ T4307] kasan_save_stack+0x40/0x70 [ 565.931750][ T4307] __kasan_record_aux_stack+0xcc/0xe8 [ 565.933199][ T4307] kasan_record_aux_stack_noalloc+0x14/0x20 [ 565.934782][ T4307] call_rcu+0xfc/0xa40 [ 565.935916][ T4307] netlink_release+0x13c0/0x1910 [ 565.937308][ T4307] sock_close+0xb8/0x1fc [ 565.938543][ T4307] __fput+0x1c8/0x7c8 [ 565.939539][ T4307] ____fput+0x20/0x30 [ 565.940692][ T4307] task_work_run+0x240/0x2f0 [ 565.941928][ T4307] do_notify_resume+0x2080/0x2cb8 [ 565.943311][ T4307] el0_svc+0x9c/0x168 [ 565.944427][ T4307] el0t_64_sync_handler+0x84/0xf0 [ 565.945753][ T4307] el0t_64_sync+0x18c/0x190 [ 565.946964][ T4307] [ 565.947620][ T4307] The buggy address belongs to the object at ffff0000f5a0f000 [ 565.947620][ T4307] which belongs to the cache kmalloc-2k of size 2048 [ 565.951516][ T4307] The buggy address is located 1344 bytes inside of [ 565.951516][ T4307] 2048-byte region [ffff0000f5a0f000, ffff0000f5a0f800) [ 565.955018][ T4307] [ 565.955616][ T4307] The buggy address belongs to the physical page: [ 565.957361][ T4307] page:00000000b898a23e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x135a08 [ 565.960059][ T4307] head:00000000b898a23e order:3 compound_mapcount:0 compound_pincount:0 [ 565.962319][ T4307] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 565.964549][ T4307] raw: 05ffc00000010200 fffffc000344c400 dead000000000002 ffff0000c0002900 [ 565.966808][ T4307] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 565.969132][ T4307] page dumped because: kasan: bad access detected [ 565.970866][ T4307] [ 565.971437][ T4307] Memory state around the buggy address: [ 565.973031][ T4307] ffff0000f5a0f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 565.975192][ T4307] ffff0000f5a0f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 565.977278][ T4307] >ffff0000f5a0f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 565.979442][ T4307] ^ [ 565.981071][ T4307] ffff0000f5a0f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 565.983309][ T4307] ffff0000f5a0f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 565.985459][ T4307] ================================================================== [ 565.990627][ T4307] Disabling lock debugging due to kernel taint [ 565.992294][ T4307] ------------[ cut here ]------------ [ 565.993685][ T4307] refcount_t: addition on 0; use-after-free. [ 565.995740][ T4307] WARNING: CPU: 1 PID: 4307 at lib/refcount.c:25 refcount_warn_saturate+0x1a8/0x20c [ 565.998205][ T4307] Modules linked in: [ 565.999338][ T4307] CPU: 1 PID: 4307 Comm: kworker/u5:2 Tainted: G B 6.1.129-syzkaller #0 [ 566.001932][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 566.004607][ T4307] Workqueue: hci0 hci_rx_work [ 566.005923][ T4307] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 566.007965][ T4307] pc : refcount_warn_saturate+0x1a8/0x20c [ 566.009470][ T4307] lr : refcount_warn_saturate+0x1a8/0x20c [ 566.011044][ T4307] sp : ffff800021277480 [ 566.012209][ T4307] x29: ffff800021277480 x28: ffff0000f5a09000 x27: ffff0000dde314c8 [ 566.014439][ T4307] x26: 1fffe0001eb41207 x25: 1fffe0001b3f4200 x24: dfff800000000000 [ 566.016661][ T4307] x23: ffff0000d0342014 x22: 00000000ffffffff x21: 0000000000000002 [ 566.018953][ T4307] x20: ffff0000f5a09018 x19: ffff8000184d8000 x18: 1fffe0003679cb76 [ 566.021106][ T4307] x17: 0000000000000000 x16: ffff80001226f180 x15: 0000000000000002 [ 566.023240][ T4307] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000100000 [ 566.025404][ T4307] x11: 0000000000055fd0 x10: ffff800033a2d000 x9 : 351f0992d98c2400 [ 566.027522][ T4307] x8 : 351f0992d98c2400 x7 : 0000000000000001 x6 : 0000000000000001 [ 566.029588][ T4307] x5 : ffff800021276d78 x4 : ffff800015bd5320 x3 : ffff80000834ac64 [ 566.031730][ T4307] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 566.033957][ T4307] Call trace: [ 566.034815][ T4307] refcount_warn_saturate+0x1a8/0x20c [ 566.036335][ T4307] l2cap_chan_hold+0x98/0x124 [ 566.037604][ T4307] __l2cap_chan_add+0x278/0x6d4 [ 566.038934][ T4307] l2cap_connect_cfm+0x3ac/0xe10 [ 566.040330][ T4307] hci_connect_cfm+0x120/0x1d0 [ 566.041563][ T4307] le_conn_complete_evt+0xab8/0xff4 [ 566.043069][ T4307] hci_le_conn_complete_evt+0x114/0x404 [ 566.044655][ T4307] hci_le_meta_evt+0x2b8/0x47c [ 566.045937][ T4307] hci_event_packet+0x6f8/0x109c [ 566.047287][ T4307] hci_rx_work+0x310/0xa84 [ 566.048521][ T4307] process_one_work+0x804/0x1484 [ 566.049905][ T4307] worker_thread+0x8e4/0xfec [ 566.051167][ T4307] kthread+0x250/0x2d8 [ 566.052290][ T4307] ret_from_fork+0x10/0x20 [ 566.053589][ T4307] irq event stamp: 8005 [ 566.054695][ T4307] hardirqs last enabled at (8005): [] finish_lock_switch+0xbc/0x1e8 [ 566.057323][ T4307] hardirqs last disabled at (8004): [] __schedule+0x2a4/0x1d44 [ 566.059882][ T4307] softirqs last enabled at (7752): [] release_sock+0x178/0x1cc [ 566.062423][ T4307] softirqs last disabled at (7748): [] release_sock+0x3c/0x1cc [ 566.064946][ T4307] ---[ end trace 0000000000000000 ]--- [ 566.106314][ T9156] loop4: detected capacity change from 0 to 512 [ 566.110914][ T4307] ------------[ cut here ]------------ [ 566.112409][ T4307] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: l2cap_chan_timeout+0x0/0x288 [ 566.115755][ T4307] WARNING: CPU: 1 PID: 4307 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 566.118370][ T4307] Modules linked in: [ 566.119492][ T4307] CPU: 1 PID: 4307 Comm: kworker/u5:2 Tainted: G B W 6.1.129-syzkaller #0 [ 566.122115][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 566.125012][ T4307] Workqueue: hci0 hci_rx_work [ 566.126370][ T4307] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 566.128619][ T4307] pc : debug_print_object+0x148/0x1d4 [ 566.130046][ T4307] lr : debug_print_object+0x148/0x1d4 [ 566.131514][ T4307] sp : ffff800021277050 [ 566.132702][ T4307] x29: ffff800021277050 x28: dfff800000000000 x27: ffff70000424ee18 [ 566.134921][ T4307] x26: ffff0000da111168 x25: ffff8000083f2774 x24: dfff800000000000 [ 566.137047][ T4307] x23: 0000000000000000 x22: ffff80001158a7d4 x21: ffff800012977a00 [ 566.139282][ T4307] x20: ffff80001249b020 x19: ffff800012977540 x18: 1fffe0003679cb76 [ 566.141597][ T4307] x17: 203a657079742074 x16: ffff80001232163c x15: 0000000000000002 [ 566.143723][ T4307] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000100000 [ 566.145953][ T4307] x11: 0000000000072e20 x10: ffff800033a2d000 x9 : 351f0992d98c2400 [ 566.148152][ T4307] x8 : 351f0992d98c2400 x7 : 0000000000000001 x6 : 0000000000000001 [ 566.150359][ T4307] x5 : ffff800021276938 x4 : ffff800015bd5320 x3 : ffff800008587574 [ 566.152582][ T4307] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 566.154778][ T4307] Call trace: [ 566.155637][ T4307] debug_print_object+0x148/0x1d4 [ 566.157006][ T4307] debug_object_assert_init+0x318/0x3c8 [ 566.158505][ T4307] timer_delete+0xa8/0x2b4 [ 566.159742][ T4307] try_to_grab_pending+0xa4/0x65c [ 566.161217][ T4307] __cancel_work+0xb0/0x2b0 [ 566.162490][ T4307] cancel_delayed_work+0x24/0x38 [ 566.163868][ T4307] l2cap_le_start+0x8e4/0x13a8 [ 566.165123][ T4307] l2cap_connect_cfm+0x5ac/0xe10 [ 566.166627][ T4307] hci_connect_cfm+0x120/0x1d0 [ 566.167989][ T4307] le_conn_complete_evt+0xab8/0xff4 [ 566.169447][ T4307] hci_le_conn_complete_evt+0x114/0x404 [ 566.170965][ T4307] hci_le_meta_evt+0x2b8/0x47c [ 566.172287][ T4307] hci_event_packet+0x6f8/0x109c [ 566.173606][ T4307] hci_rx_work+0x310/0xa84 [ 566.174886][ T4307] process_one_work+0x804/0x1484 [ 566.176177][ T4307] worker_thread+0x8e4/0xfec [ 566.177456][ T4307] kthread+0x250/0x2d8 [ 566.178592][ T4307] ret_from_fork+0x10/0x20 [ 566.179798][ T4307] irq event stamp: 8005 [ 566.180873][ T4307] hardirqs last enabled at (8005): [] finish_lock_switch+0xbc/0x1e8 [ 566.183433][ T4307] hardirqs last disabled at (8004): [] __schedule+0x2a4/0x1d44 [ 566.185902][ T4307] softirqs last enabled at (7752): [] release_sock+0x178/0x1cc [ 566.188318][ T4307] softirqs last disabled at (7748): [] release_sock+0x3c/0x1cc [ 566.190910][ T4307] ---[ end trace 0000000000000000 ]--- [ 566.193645][ T4307] Unable to handle kernel paging request at virtual address dfff800000000013 [ 566.195932][ T4307] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 566.198186][ T4307] Mem abort info: [ 566.199183][ T4307] ESR = 0x0000000096000006 [ 566.200454][ T4307] EC = 0x25: DABT (current EL), IL = 32 bits [ 566.202172][ T4307] SET = 0, FnV = 0 [ 566.203187][ T4307] EA = 0, S1PTW = 0 [ 566.204241][ T4307] FSC = 0x06: level 2 translation fault [ 566.205794][ T4307] Data abort info: [ 566.206728][ T4307] ISV = 0, ISS = 0x00000006 [ 566.207994][ T4307] CM = 0, WnR = 0 [ 566.208928][ T4307] [dfff800000000013] address between user and kernel address ranges [ 566.210977][ T4307] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 566.212797][ T4307] Modules linked in: [ 566.213791][ T4307] CPU: 1 PID: 4307 Comm: kworker/u5:2 Tainted: G B W 6.1.129-syzkaller #0 [ 566.216224][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 566.219002][ T4307] Workqueue: hci0 hci_rx_work [ 566.220292][ T4307] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 566.222379][ T4307] pc : do_raw_spin_lock+0x80/0x358 [ 566.223832][ T4307] lr : _raw_spin_lock_bh+0x5c/0x6c [ 566.225234][ T4307] sp : ffff800021277240 [ 566.226373][ T4307] x29: ffff8000212772d0 x28: ffff800021277260 x27: 1fffe0001eb41206 [ 566.228580][ T4307] x26: 1fffe0001eb41200 x25: ffff70000424ee84 x24: dfff800000000000 [ 566.230907][ T4307] x23: dfff800000000000 x22: 0000000000000130 x21: 0000000000000000 [ 566.233066][ T4307] x20: 0000000000000098 x19: 000000000000009c x18: 1fffe0003679cb76 [ 566.235161][ T4307] x17: 203a657079742074 x16: ffff80000831ac50 x15: 0000000000000002 [ 566.237454][ T4307] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000100000 [ 566.239740][ T4307] x11: ffff80000831ac50 x10: 1ffff0000424ee4c x9 : 0000000000000013 [ 566.241919][ T4307] x8 : f3f3f304f1f1f1f1 x7 : 0000000000000000 x6 : ffff800010594dd4 [ 566.244094][ T4307] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 566.246464][ T4307] x2 : 0000000000000000 x1 : ffff800012976f20 x0 : 0000000000000098 [ 566.248781][ T4307] Call trace: [ 566.249690][ T4307] do_raw_spin_lock+0x80/0x358 [ 566.251066][ T4307] _raw_spin_lock_bh+0x5c/0x6c [ 566.252350][ T4307] lock_sock_nested+0x90/0x138 [ 566.253620][ T4307] l2cap_sock_ready_cb+0x4c/0x130 [ 566.255008][ T4307] l2cap_le_start+0xa80/0x13a8 [ 566.256276][ T4307] l2cap_connect_cfm+0x5ac/0xe10 [ 566.257626][ T4307] hci_connect_cfm+0x120/0x1d0 [ 566.258964][ T4307] le_conn_complete_evt+0xab8/0xff4 [ 566.260356][ T4307] hci_le_conn_complete_evt+0x114/0x404 [ 566.261841][ T4307] hci_le_meta_evt+0x2b8/0x47c [ 566.263083][ T4307] hci_event_packet+0x6f8/0x109c [ 566.264435][ T4307] hci_rx_work+0x310/0xa84 [ 566.265641][ T4307] process_one_work+0x804/0x1484 [ 566.266953][ T4307] worker_thread+0x8e4/0xfec [ 566.268152][ T4307] kthread+0x250/0x2d8 [ 566.269256][ T4307] ret_from_fork+0x10/0x20 [ 566.270505][ T4307] Code: d343fe69 f9001beb f8376948 aa0003f4 (38f76928) [ 566.272423][ T4307] ---[ end trace 0000000000000000 ]--- [ 566.783461][ T4307] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 566.785686][ T4307] SMP: stopping secondary CPUs [ 566.786993][ T4307] Kernel Offset: disabled [ 566.788181][ T4307] CPU features: 0x080000,02070084,26017203 [ 566.789812][ T4307] Memory Limit: none [ 567.293468][ T4307] Rebooting in 86400 seconds..