last executing test programs: 20.140635486s ago: executing program 2 (id=2594): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xe2}}}}}}}, 0x0) 19.253366677s ago: executing program 2 (id=2597): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0xff000000}, 0x0) 18.706799245s ago: executing program 2 (id=2600): r0 = syz_open_dev$I2C(&(0x7f0000004300), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x9003, 0x0, 0x0}], 0x2}) 18.419152568s ago: executing program 3 (id=2601): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r4, &(0x7f00000009c0)="5538503e38a2591ab061acee829c348f4f193a916cdb62bc05c069146fd636f5c724aed4ab2f4d49862b66a4d2ea12e74bc497af68ab687c160d360830ba3eba5f", &(0x7f0000000d80)=@buf="9aaa803a4c03ad4f3f9506691ede52184c5c01883d7646215d17d0fa0dfa68bbe3274de5ce26073e63a6f45a1736a647e446714763824ab7ce39b874e0b16f54134a920f50187acaa03410acab5d1f3016503101583ef278b0c8dc1fb1fe19b9cbda2478ddd86cadb9a5bb5f5c08984e3906ad5fcaa0528bfe98b5981af51c52c546b2f16f97606db125d2fd360f614833264c21abed3851f8c23616bd1a4bd9e047a5012e44b4cabf", 0x4}, 0x20) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x8, 0x2, 0x3, 0x22, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x59e, 0x7, 0x5, 0x208, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x4) bind$alg(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x72, &(0x7f0000000340)=""/114, 0x40f00, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8, 0x800}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x10, 0xdf5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 18.207598443s ago: executing program 2 (id=2602): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x100400, 0x0) 17.092812499s ago: executing program 2 (id=2607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) unshare(0x24020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000006010000f8ffffffbfa400000000000007040000f0fffdffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000001fffffffb705000008000000850000000500000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 16.77720798s ago: executing program 3 (id=2609): pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x6}, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) 16.178011505s ago: executing program 3 (id=2611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x48}}, 0x0) 16.144044701s ago: executing program 4 (id=2612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18001fc6000000000000000000000000000018120000640b71e2b376079faef4f30f1af05d799a3f008535876940f3d11db44d3518e0e954017e37986859001f2673541760710ff0f6ce148d52a92dcf5dd28a3023b49e6d787427e4c933869c35a8e8db9a9e5c4e9cc501191edb4322c265261ff4ff64c1c95e87eb2d85b2fec8e50e0b5af6554cd506774bf80c022a9d00"/155, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}, 0x7, 0x11000000}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xcd, '\x00', 0x0, r2, 0x3, 0x0, 0x3}, 0x48) r3 = socket$netlink(0x10, 0x3, 0xf) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) 15.293129779s ago: executing program 4 (id=2614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000095100000000000"], 0x0}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x1c, 0x4, 0x400, 0x0, 0x0, 0x0, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="3f000000010003", 0x7) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000001ac0)={0x3, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000a80)=""/4096, 0x1000}], &(0x7f0000001a80)=[0x3, 0x0]}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000140000000004000038014000100626f6e643000000000000000000000001400010064756d6d793000000000000000000000140001006d6163767461703000000000000000eb070002"], 0xa8}}, 0x4010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@broadcast, @in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 14.787733016s ago: executing program 3 (id=2617): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x100400, 0x0) 13.773714275s ago: executing program 3 (id=2620): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) getpid() r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000300)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="290200000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="05000800090000000500070002"], 0x2c}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000000c0)={{0x8, 0x6}, 0x100, './file0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 13.585007943s ago: executing program 2 (id=2622): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) pipe(&(0x7f0000000640)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 11.473586435s ago: executing program 0 (id=2624): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000e00)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904ced3131219f4b7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000a40)={0x14, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0003"]}, 0x0) 11.438547936s ago: executing program 1 (id=2625): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) 11.389210285s ago: executing program 4 (id=2626): futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) 11.116027851s ago: executing program 1 (id=2627): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000740)=""/73, 0x49}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 10.994946928s ago: executing program 4 (id=2628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r0, @ANYBLOB="000000000000000014002b8008000300190000f5070001"], 0x3c}}, 0x0) 7.145769545s ago: executing program 1 (id=2629): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00'}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1ff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa00000000"], 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100001c00180007800c0001800800014000000000080008000000000005000500020000000500010006000000"], 0x64}}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1000, 0x8000002}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000003380)={{0x12, 0x1, 0x0, 0xbd, 0x66, 0x2a, 0x10, 0xd49, 0x7010, 0xc90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0x22, 0x88}}]}}]}}, 0x0) 5.89332634s ago: executing program 4 (id=2630): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 5.88325848s ago: executing program 3 (id=2631): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x100400, 0x0) 5.782809437s ago: executing program 0 (id=2632): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8) accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001540)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xd8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0xaa, 0x0, 0x43, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x0, 0x3b, 0x0, "5819f9e6b047ec2003b8892ff3889dcf134877503c8e12291d5f1d34e7b933aa1500cac85514b454ad6485d8ba26286d9bb88fa7887d95da6e6cc5f6e88372034cda51a10260c291dee9ed3a8b490de4"}, 0xd8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0xc3a0f000) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006c6f00000000000000000000000000001800348014"], 0x4c}}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000000c0)={0x2, @vbi={0xff, 0xd2}}) 3.129434423s ago: executing program 1 (id=2634): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r3, &(0x7f00000009c0)="5538503e38a2591ab061acee829c348f4f193a916cdb62bc05c069146fd636f5c724aed4ab2f4d49862b66a4d2ea12e74bc497af68ab687c160d360830ba3eba5f", &(0x7f0000000d80)=@buf="9aaa803a4c03ad4f3f9506691ede52184c5c01883d7646215d17d0fa0dfa68bbe3274de5ce26073e63a6f45a1736a647e446714763824ab7ce39b874e0b16f54134a920f50187acaa03410acab5d1f3016503101583ef278b0c8dc1fb1fe19b9cbda2478ddd86cadb9a5bb5f5c08984e3906ad5fcaa0528bfe98b5981af51c52c546b2f16f97606db125d2fd360f614833264c21abed3851f8c23616bd1a4bd9e047a5012e44b4cabf", 0x4}, 0x20) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x8, 0x2, 0x3, 0x22, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x59e, 0x7, 0x5, 0x208, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x4) bind$alg(r3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.108470591s ago: executing program 4 (id=2635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000095100000000000"], 0x0}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x1c, 0x4, 0x400, 0x0, 0x0, 0x0, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="3f000000010003", 0x7) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000001ac0)={0x3, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000a80)=""/4096, 0x1000}], &(0x7f0000001a80)=[0x3, 0x0]}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000140000000004000038014000100626f6e643000000000000000000000001400010064756d6d793000000000000000000000140001006d6163767461703000000000000000eb070002"], 0xa8}}, 0x4010) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 1.613786431s ago: executing program 0 (id=2636): socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) 1.501357501s ago: executing program 1 (id=2637): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 1.196773181s ago: executing program 0 (id=2638): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000100)={0x3, r2, 0x0, 0x7ffffe02, 0xb, 0x1fd, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000180)={r3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc}) close_range(r4, 0xffffffffffffffff, 0x0) 1.095479994s ago: executing program 1 (id=2639): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYRESHEX]) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)=""/214, 0xd6}, {&(0x7f0000000840)=""/138, 0x8a}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000500)=""/215, 0xd7}], 0x5}}], 0x1, 0x141, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000004c0)={0x0, 0x800, 0xff, 0x40}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x0, 0x80}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00000003c0)={0x154, @time={0x2a72, 0x1}, 0x7, {0x0, 0x63}, 0x5, 0x0, 0x5}) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000680)={0x0, 0x0, 0x2000}, &(0x7f0000000480), &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x4007, @fd_index=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x1, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) 568.514452ms ago: executing program 0 (id=2640): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=2641): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9) kernel console output (not intermixed with test programs): lave bond_slave_1): Enslaving as an active interface with an up link [ 1322.480154][T10727] Bluetooth: hci2: command tx timeout [ 1322.678110][T13500] team0: Port device team_slave_0 added [ 1322.745028][T13500] team0: Port device team_slave_1 added [ 1322.862051][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 1323.010364][ T3331] bridge_slave_1: left allmulticast mode [ 1323.016260][ T3331] bridge_slave_1: left promiscuous mode [ 1323.033606][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.136265][ T3331] bridge_slave_0: left allmulticast mode [ 1323.142353][ T3331] bridge_slave_0: left promiscuous mode [ 1323.148936][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.818298][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.930903][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1323.982872][ T3331] bond0 (unregistering): Released all slaves [ 1324.060664][T13500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.067837][T13500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.098779][T13500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.245018][T13500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.252986][T13500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.284165][T13500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.550884][T10727] Bluetooth: hci2: command tx timeout [ 1324.591906][T13500] hsr_slave_0: entered promiscuous mode [ 1324.651942][T13500] hsr_slave_1: entered promiscuous mode [ 1324.703847][T13500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1324.711759][T13500] Cannot create hsr debugfs directory [ 1324.973882][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 1324.980652][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 1325.133786][ T3331] hsr_slave_0: left promiscuous mode [ 1325.179448][ T3331] hsr_slave_1: left promiscuous mode [ 1325.237947][ T3331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.246249][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.290645][ T3331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.298332][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.354031][ T3331] veth1_macvtap: left promiscuous mode [ 1325.359951][ T3331] veth0_macvtap: left promiscuous mode [ 1325.365924][ T3331] veth1_vlan: left promiscuous mode [ 1325.371693][ T3331] veth0_vlan: left promiscuous mode [ 1325.990432][T13553] nfs4: Unknown parameter 'fscv/cpu/#/msr' [ 1326.347037][ T3331] team0 (unregistering): Port device team_slave_1 removed [ 1326.456415][ T3331] team0 (unregistering): Port device team_slave_0 removed [ 1326.629810][T10727] Bluetooth: hci2: command tx timeout [ 1326.834533][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 1327.052531][T13551] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 1327.060687][T13551] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 1327.068473][T13551] veth1_virt_wifi: entered allmulticast mode [ 1327.076499][T13551] veth1_virt_wifi: left allmulticast mode [ 1327.195381][T13565] loop3: detected capacity change from 0 to 2048 [ 1327.336590][T13565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1327.499018][T13565] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 1330.852452][T13500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1331.000353][T13500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1331.073465][T13500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1331.142573][T13500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1331.175960][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1332.311061][T13500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.491770][T13500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.605946][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.613737][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.700643][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.708414][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.461079][T13628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2353'. [ 1333.714565][T13635] bridge0: port 3(netdevsim2) entered blocking state [ 1333.725467][T13635] bridge0: port 3(netdevsim2) entered disabled state [ 1333.735207][T13635] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1333.748948][T13635] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1333.758960][T13635] bridge0: port 3(netdevsim2) entered blocking state [ 1333.766409][T13635] bridge0: port 3(netdevsim2) entered forwarding state [ 1334.205139][T13641] loop3: detected capacity change from 0 to 64 [ 1334.610596][T13500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.773716][T13670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2364'. [ 1336.864486][T13682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2367'. [ 1337.162869][T13686] loop3: detected capacity change from 0 to 64 [ 1339.166500][T13500] veth0_vlan: entered promiscuous mode [ 1339.483365][T13500] veth1_vlan: entered promiscuous mode [ 1339.856452][T13500] veth0_macvtap: entered promiscuous mode [ 1339.886346][T13500] veth1_macvtap: entered promiscuous mode [ 1340.060639][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.071546][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.081675][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.092462][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.102562][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.113323][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.123495][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.134335][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.144482][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.160243][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.176760][T13500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.221793][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.232560][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.242753][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.258997][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.270606][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.281430][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.291562][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.303823][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.314441][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.325230][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.340784][T13500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.401679][T13692] loop1: detected capacity change from 0 to 2048 [ 1340.466745][T13500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.475915][T13500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.485257][T13500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.494412][T13500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.552276][T13692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1340.729345][ T29] audit: type=1804 audit(1723854824.183:324): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2371" name="/newroot/31/file1/bus" dev="loop1" ino=19 res=1 errno=0 [ 1340.851997][T13692] loop1: detected capacity change from 2048 to 0 [ 1340.874349][T13691] bio_check_eod: 111 callbacks suppressed [ 1340.874427][T13691] syz.1.2371: attempt to access beyond end of device [ 1340.874427][T13691] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 1340.895837][T13691] syz.1.2371: attempt to access beyond end of device [ 1340.895837][T13691] loop1: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 1340.909734][T13691] syz.1.2371: attempt to access beyond end of device [ 1340.909734][T13691] loop1: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 1340.923636][T13691] syz.1.2371: attempt to access beyond end of device [ 1340.923636][T13691] loop1: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 1340.937369][T13691] syz.1.2371: attempt to access beyond end of device [ 1340.937369][T13691] loop1: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 1340.955075][T13691] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.1.2371: unable to read itable block [ 1340.973311][T13691] syz.1.2371: attempt to access beyond end of device [ 1340.973311][T13691] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1340.988319][T13691] buffer_io_error: 38 callbacks suppressed [ 1340.988389][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.003079][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.010614][T13691] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 1341.019773][T13691] syz.1.2371: attempt to access beyond end of device [ 1341.019773][T13691] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1341.033375][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.042367][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.049763][T13691] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #18: comm syz.1.2371: mark_inode_dirty error [ 1341.061485][T13691] syz.1.2371: attempt to access beyond end of device [ 1341.061485][T13691] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1341.079755][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.088231][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.096672][T13691] syz.1.2371: attempt to access beyond end of device [ 1341.096672][T13691] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 1341.110366][T13691] syz.1.2371: attempt to access beyond end of device [ 1341.110366][T13691] loop1: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 1341.124076][T13691] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.1.2371: unable to read itable block [ 1341.137286][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.145940][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.148390][T13711] sctp: [Deprecated]: syz.3.2375 (pid 13711) Use of int in maxseg socket option. [ 1341.148390][T13711] Use struct sctp_assoc_value instead [ 1341.152924][T13691] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 1341.153073][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.153169][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.153255][T13691] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #18: comm syz.1.2371: mark_inode_dirty error [ 1341.209923][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.218300][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.225499][T13691] EXT4-fs error (device loop1): ext4_wait_block_bitmap:584: comm syz.1.2371: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 1341.240061][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.248531][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.255971][T13691] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.1.2371: unable to read itable block [ 1341.269288][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.283281][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.291816][T13691] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 1341.300908][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.309590][T13691] EXT4-fs (loop1): I/O error while writing superblock [ 1341.316564][T13691] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #18: comm syz.1.2371: mark_inode_dirty error [ 1341.328287][T13691] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1341.857739][T13718] loop3: detected capacity change from 0 to 64 [ 1342.251243][ T7246] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.396358][ T7246] bridge0: port 3(netdevsim2) entered disabled state [ 1342.450550][ T7246] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode [ 1342.462007][ T7246] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 1342.471072][ T7246] bridge0: port 3(netdevsim2) entered disabled state [ 1342.538952][ T7246] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.655746][ T7246] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.800009][ T7246] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.001060][ T7246] bridge_slave_1: left allmulticast mode [ 1343.006952][ T7246] bridge_slave_1: left promiscuous mode [ 1343.013659][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.033717][ T7246] bridge_slave_0: left allmulticast mode [ 1343.039839][ T7246] bridge_slave_0: left promiscuous mode [ 1343.046408][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.553716][ T7246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.571521][ T7246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.618798][ T7246] bond0 (unregistering): Released all slaves [ 1344.365758][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1344.380211][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1344.389788][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1344.403200][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1344.414472][ T5182] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1344.424008][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1344.540449][ T7246] hsr_slave_0: left promiscuous mode [ 1344.556150][ T7246] hsr_slave_1: left promiscuous mode [ 1344.577126][ T7246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.585325][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.596289][ T7246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.604108][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.626681][ T7246] veth1_macvtap: left promiscuous mode [ 1344.632619][ T7246] veth0_macvtap: left promiscuous mode [ 1344.638502][ T7246] veth1_vlan: left promiscuous mode [ 1344.644522][ T7246] veth0_vlan: left promiscuous mode [ 1344.909934][T13737] loop3: detected capacity change from 0 to 2048 [ 1345.114729][T10727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1345.145311][T10727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1345.155731][T10727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1345.161125][T13737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.186119][T10727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1345.207941][T10727] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1345.219015][T10727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1345.352413][T13750] tipc: Failed to remove unknown binding: 66,1,1/0:178255812/178255814 [ 1345.380545][T13750] tipc: Failed to remove unknown binding: 66,1,1/0:178255812/178255814 [ 1345.389346][T13750] tipc: Failed to remove unknown binding: 66,1,1/0:178255812/178255814 [ 1345.398076][ T29] audit: type=1804 audit(1723854828.853:325): pid=13737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2386" name="/newroot/39/file1/bus" dev="loop3" ino=19 res=1 errno=0 [ 1345.662428][ T7246] team0 (unregistering): Port device team_slave_1 removed [ 1345.701275][T13737] loop3: detected capacity change from 2048 to 0 [ 1345.705304][ T7246] team0 (unregistering): Port device team_slave_0 removed [ 1345.727511][T13736] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.3.2386: unable to read itable block [ 1345.740779][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.747756][T13736] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 1345.756936][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.764041][T13736] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.2386: mark_inode_dirty error [ 1345.778077][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.788900][T13736] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.3.2386: unable to read itable block [ 1345.803272][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.810519][T13736] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 1345.820315][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.827299][T13736] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.2386: mark_inode_dirty error [ 1345.839531][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.846601][T13736] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm syz.3.2386: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 1345.861166][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.868365][T13736] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.3.2386: unable to read itable block [ 1345.881728][T13736] bio_check_eod: 107 callbacks suppressed [ 1345.881799][T13736] syz.3.2386: attempt to access beyond end of device [ 1345.881799][T13736] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1345.907099][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.914731][T13736] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 1345.923782][T13736] syz.3.2386: attempt to access beyond end of device [ 1345.923782][T13736] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1345.937347][T13736] EXT4-fs (loop3): I/O error while writing superblock [ 1345.944425][T13736] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.2386: mark_inode_dirty error [ 1345.956201][T13736] syz.3.2386: attempt to access beyond end of device [ 1345.956201][T13736] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1345.988911][T13736] syz.3.2386: attempt to access beyond end of device [ 1345.988911][T13736] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 1346.003230][T13736] syz.3.2386: attempt to access beyond end of device [ 1346.003230][T13736] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 1346.017410][T13736] syz.3.2386: attempt to access beyond end of device [ 1346.017410][T13736] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 1346.031243][T13736] syz.3.2386: attempt to access beyond end of device [ 1346.031243][T13736] loop3: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 1346.044897][T13736] syz.3.2386: attempt to access beyond end of device [ 1346.044897][T13736] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1346.058497][T13736] buffer_io_error: 37 callbacks suppressed [ 1346.058565][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.081992][T13736] syz.3.2386: attempt to access beyond end of device [ 1346.081992][T13736] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1346.099624][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.108155][T13736] syz.3.2386: attempt to access beyond end of device [ 1346.108155][T13736] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1346.122947][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.131804][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.140469][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.148996][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.157676][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.166706][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.175327][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.184279][T13736] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1346.578818][T13758] loop0: detected capacity change from 0 to 64 [ 1346.643209][T10727] Bluetooth: hci3: command tx timeout [ 1347.259712][T10727] Bluetooth: hci4: command tx timeout [ 1347.481012][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'. [ 1347.510302][T13745] chnl_net:caif_netlink_parms(): no params data found [ 1347.840624][ T7246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.882697][T13738] chnl_net:caif_netlink_parms(): no params data found [ 1347.987189][ T7246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.148758][ T7246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.254608][ T7246] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.273036][ T3226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.282225][ T3226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.466321][ T3226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.474595][ T3226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.632324][ T7246] bridge_slave_1: left allmulticast mode [ 1348.638215][ T7246] bridge_slave_1: left promiscuous mode [ 1348.645666][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.700943][T10727] Bluetooth: hci3: command tx timeout [ 1348.713595][ T7246] bridge_slave_0: left allmulticast mode [ 1348.719674][ T7246] bridge_slave_0: left promiscuous mode [ 1348.726242][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.258406][ T7246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.319418][ T7246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.338272][ T7246] bond0 (unregistering): Released all slaves [ 1349.356954][T10727] Bluetooth: hci4: command tx timeout [ 1349.696402][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.704238][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.712728][T13745] bridge_slave_0: entered allmulticast mode [ 1349.721836][T13745] bridge_slave_0: entered promiscuous mode [ 1349.852601][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1349.862205][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1349.871961][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1349.894466][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1349.905925][ T5182] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1349.915586][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1349.930950][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.938616][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.946518][T13745] bridge_slave_1: entered allmulticast mode [ 1349.955637][T13745] bridge_slave_1: entered promiscuous mode [ 1350.508401][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.584931][ T7246] hsr_slave_0: left promiscuous mode [ 1350.606692][ T7246] hsr_slave_1: left promiscuous mode [ 1350.640647][ T7246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.648349][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.679415][ T7246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.687103][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.739828][ T7246] veth1_macvtap: left promiscuous mode [ 1350.745658][ T7246] veth0_macvtap: left promiscuous mode [ 1350.751688][ T7246] veth1_vlan: left promiscuous mode [ 1350.757230][ T7246] veth0_vlan: left promiscuous mode [ 1350.781286][ T5182] Bluetooth: hci3: command tx timeout [ 1351.275605][T13788] loop0: detected capacity change from 0 to 2048 [ 1351.370217][T13788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.436297][ T5182] Bluetooth: hci4: command tx timeout [ 1351.581470][ T29] audit: type=1800 audit(1723854834.973:326): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2398" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1351.602482][ T29] audit: type=1804 audit(1723854834.993:327): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2398" name="/newroot/51/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 1351.671921][ T7246] team0 (unregistering): Port device team_slave_1 removed [ 1351.699438][T13788] loop0: detected capacity change from 2048 to 0 [ 1351.742890][ T7246] team0 (unregistering): Port device team_slave_0 removed [ 1351.982363][ T5182] Bluetooth: hci1: command tx timeout [ 1352.064646][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.072479][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.080328][T13738] bridge_slave_0: entered allmulticast mode [ 1352.089592][T13738] bridge_slave_0: entered promiscuous mode [ 1352.103632][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.111455][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.119333][T13738] bridge_slave_1: entered allmulticast mode [ 1352.128185][T13738] bridge_slave_1: entered promiscuous mode [ 1352.306716][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.672021][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.859398][ T5182] Bluetooth: hci3: command tx timeout [ 1352.891452][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.031338][T13745] team0: Port device team_slave_0 added [ 1353.266694][T13745] team0: Port device team_slave_1 added [ 1353.296536][T13738] team0: Port device team_slave_0 added [ 1353.468407][T13738] team0: Port device team_slave_1 added [ 1353.486258][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.494802][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.521474][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.533867][ T5182] Bluetooth: hci4: command tx timeout [ 1353.811294][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.818426][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.837981][T13797] loop4: detected capacity change from 0 to 64 [ 1353.844583][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.884981][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.892250][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.918662][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.931876][T13780] chnl_net:caif_netlink_parms(): no params data found [ 1354.132647][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.141356][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.168511][ T5182] Bluetooth: hci1: command tx timeout [ 1354.175933][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.285134][T13745] hsr_slave_0: entered promiscuous mode [ 1354.325827][T13745] hsr_slave_1: entered promiscuous mode [ 1354.364067][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1354.372000][T13745] Cannot create hsr debugfs directory [ 1354.780604][T13792] bio_check_eod: 56 callbacks suppressed [ 1354.780678][T13792] syz.0.2398: attempt to access beyond end of device [ 1354.780678][T13792] loop0: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 1354.805245][T13792] EXT4-fs error (device loop0): ext4_wait_block_bitmap:584: comm syz.0.2398: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 1354.821172][T13792] syz.0.2398: attempt to access beyond end of device [ 1354.821172][T13792] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1354.834788][T13792] buffer_io_error: 17 callbacks suppressed [ 1354.834858][T13792] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1354.849429][T13792] EXT4-fs (loop0): I/O error while writing superblock [ 1354.856425][T13792] EXT4-fs error (device loop0): ext4_discard_preallocations:5606: comm syz.0.2398: Error -5 reading block bitmap for 0 [ 1354.869372][T13792] syz.0.2398: attempt to access beyond end of device [ 1354.869372][T13792] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1354.882919][T13792] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1354.891748][T13792] EXT4-fs (loop0): I/O error while writing superblock [ 1354.949822][T13106] syz-executor: attempt to access beyond end of device [ 1354.949822][T13106] loop0: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 1354.956629][T13738] hsr_slave_0: entered promiscuous mode [ 1355.051771][T13738] hsr_slave_1: entered promiscuous mode [ 1355.075934][T13738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1355.084000][T13738] Cannot create hsr debugfs directory [ 1355.122827][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1355.122827][ T3533] loop0: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 1355.136956][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1355.136956][ T3533] loop0: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 1355.150935][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1355.150935][ T3533] loop0: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 1355.164990][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1355.164990][ T3533] loop0: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 1355.178872][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1355.178872][ T3533] loop0: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 1355.192739][ T3533] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #18: block 6: comm kworker/u8:21: unable to read itable block [ 1355.211101][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1355.211101][ T3533] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1355.226387][ T3533] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1355.234922][ T3533] EXT4-fs (loop0): I/O error while writing superblock [ 1355.241944][ T3533] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 1355.250897][ T3533] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1355.259510][ T3533] EXT4-fs (loop0): I/O error while writing superblock [ 1355.266485][ T3533] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #18: comm kworker/u8:21: mark_inode_dirty error [ 1355.278311][ T3533] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1355.286829][ T3533] EXT4-fs (loop0): I/O error while writing superblock [ 1355.293892][ T3533] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 5 [ 1355.310664][ T3533] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1355.310664][ T3533] [ 1355.322566][ T3533] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4559: inode #18: block 6: comm kworker/u8:21: unable to read itable block [ 1355.336726][ T3533] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1355.345290][ T3533] EXT4-fs (loop0): I/O error while writing superblock [ 1355.362377][ T3533] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #18: block 6: comm kworker/u8:21: unable to read itable block [ 1355.375875][ T3533] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1355.384458][ T3533] EXT4-fs (loop0): I/O error while writing superblock [ 1355.391501][ T3533] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 1355.401097][ T3533] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1355.415000][ T3533] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #18: comm kworker/u8:21: mark_inode_dirty error [ 1355.428191][ T3533] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1355.456596][T13106] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 1355.594387][T13780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.604572][T13780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.618459][T13780] bridge_slave_0: entered allmulticast mode [ 1355.627389][T13780] bridge_slave_0: entered promiscuous mode [ 1355.800697][T13780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.808423][T13780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.823463][T13780] bridge_slave_1: entered allmulticast mode [ 1355.832631][T13780] bridge_slave_1: entered promiscuous mode [ 1355.926030][T13806] loop4: detected capacity change from 0 to 1024 [ 1356.013733][T13806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.029732][T13806] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1356.103216][ T7246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.219439][ T5182] Bluetooth: hci1: command tx timeout [ 1356.231999][ T29] audit: type=1804 audit(1723854839.633:328): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2403" name="/newroot/4/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 1356.281480][T13780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.367111][ T7246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.447545][T13780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.471448][T13500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.562029][ T7246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.748702][T13745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.825994][ T7246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.932213][T13780] team0: Port device team_slave_0 added [ 1357.052673][T13745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.164784][T13780] team0: Port device team_slave_1 added [ 1357.445272][T13814] loop4: detected capacity change from 0 to 64 [ 1357.475644][T13745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.531446][T13780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.538601][T13780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1357.569600][T13780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.589770][T10727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1357.611632][T10727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1357.682251][T10727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1357.706554][T10727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1357.719825][T10727] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1357.731777][T10727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1357.753700][T13745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.813734][T13780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.821167][T13780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1357.847610][T13780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.977171][ T7246] bridge_slave_1: left allmulticast mode [ 1357.983252][ T7246] bridge_slave_1: left promiscuous mode [ 1357.989887][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.018278][T13818] input: syz0 as /devices/virtual/input/input11 [ 1358.027011][ T7246] bridge_slave_0: left allmulticast mode [ 1358.035548][ T7246] bridge_slave_0: left promiscuous mode [ 1358.041920][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.300693][T10727] Bluetooth: hci1: command tx timeout [ 1358.432666][T13820] loop4: detected capacity change from 0 to 2048 [ 1358.503551][T13820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.540360][ T7246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.564226][ T7246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.568972][ T29] audit: type=1800 audit(1723854842.013:329): pid=13820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2409" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1358.596064][ T29] audit: type=1804 audit(1723854842.023:330): pid=13820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2409" name="/newroot/8/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 1358.647659][ T7246] bond0 (unregistering): Released all slaves [ 1358.676203][T13820] loop4: detected capacity change from 2048 to 0 [ 1358.904586][T13780] hsr_slave_0: entered promiscuous mode [ 1358.925545][T13780] hsr_slave_1: entered promiscuous mode [ 1358.938207][T13780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1358.946220][T13780] Cannot create hsr debugfs directory [ 1359.431870][ T7246] hsr_slave_0: left promiscuous mode [ 1359.449850][ T7246] hsr_slave_1: left promiscuous mode [ 1359.470584][ T7246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.478380][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.488879][ T7246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.496765][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.524648][ T7246] veth1_macvtap: left promiscuous mode [ 1359.530967][ T7246] veth0_macvtap: left promiscuous mode [ 1359.536842][ T7246] veth1_vlan: left promiscuous mode [ 1359.542475][ T7246] veth0_vlan: left promiscuous mode [ 1359.819633][T10727] Bluetooth: hci0: command tx timeout [ 1360.288543][ T7246] team0 (unregistering): Port device team_slave_1 removed [ 1360.313527][ T7246] team0 (unregistering): Port device team_slave_0 removed [ 1360.968401][T13738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1360.991004][T13738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1361.123481][T13738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1361.288316][T13738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1361.314301][T13745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1361.350590][T13745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1361.471198][T13745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1361.527554][T13815] chnl_net:caif_netlink_parms(): no params data found [ 1361.547444][T13745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1361.900273][T10727] Bluetooth: hci0: command tx timeout [ 1362.265963][T13820] bio_check_eod: 18 callbacks suppressed [ 1362.266040][T13820] syz.4.2409: attempt to access beyond end of device [ 1362.266040][T13820] loop4: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 1362.289841][T13820] EXT4-fs error (device loop4): ext4_wait_block_bitmap:584: comm syz.4.2409: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 1362.304475][T13820] syz.4.2409: attempt to access beyond end of device [ 1362.304475][T13820] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1362.318057][T13820] buffer_io_error: 1 callbacks suppressed [ 1362.318124][T13820] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1362.332787][T13820] EXT4-fs (loop4): I/O error while writing superblock [ 1362.339877][T13820] EXT4-fs error (device loop4): ext4_discard_preallocations:5606: comm syz.4.2409: Error -5 reading block bitmap for 0 [ 1362.352793][T13820] syz.4.2409: attempt to access beyond end of device [ 1362.352793][T13820] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1362.366423][T13820] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1362.377997][T13820] EXT4-fs (loop4): I/O error while writing superblock [ 1362.475434][T13780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1362.504111][T13500] syz-executor: attempt to access beyond end of device [ 1362.504111][T13500] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 1362.585279][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.642809][T13780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1362.746386][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1362.746386][ T3533] loop4: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 1362.746953][T13780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1362.760451][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1362.760451][ T3533] loop4: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 1362.785289][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1362.785289][ T3533] loop4: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 1362.801691][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1362.801691][ T3533] loop4: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 1362.815966][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1362.815966][ T3533] loop4: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 1362.829769][ T3533] EXT4-fs error (device loop4): ext4_get_inode_loc:4574: inode #18: block 6: comm kworker/u8:21: unable to read itable block [ 1362.843099][ T3533] kworker/u8:21: attempt to access beyond end of device [ 1362.843099][ T3533] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1362.856920][ T3533] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1362.865463][ T3533] EXT4-fs (loop4): I/O error while writing superblock [ 1362.872532][ T3533] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: IO failure [ 1362.885215][ T3533] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1362.895028][ T3533] EXT4-fs (loop4): I/O error while writing superblock [ 1362.902030][ T3533] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm kworker/u8:21: mark_inode_dirty error [ 1362.913809][ T3533] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1362.922394][ T3533] EXT4-fs (loop4): I/O error while writing superblock [ 1362.929503][ T3533] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 5 [ 1362.941871][ T3533] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1362.941871][ T3533] [ 1362.952366][ T3533] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4559: inode #18: block 6: comm kworker/u8:21: unable to read itable block [ 1362.966525][ T3533] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1362.974951][ T3533] EXT4-fs (loop4): I/O error while writing superblock [ 1363.018237][ T3331] EXT4-fs error (device loop4): ext4_get_inode_loc:4574: inode #18: block 6: comm kworker/u8:17: unable to read itable block [ 1363.032356][ T3331] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1363.040946][ T3331] EXT4-fs (loop4): I/O error while writing superblock [ 1363.047918][ T3331] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: IO failure [ 1363.056961][ T3331] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1363.065519][ T3331] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm kworker/u8:17: mark_inode_dirty error [ 1363.077715][ T3331] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1363.136107][T13500] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1363.165420][T13780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1363.197278][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.267706][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.277834][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.287956][T13815] bridge_slave_0: entered allmulticast mode [ 1363.303945][T13815] bridge_slave_0: entered promiscuous mode [ 1363.349000][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.356726][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.423188][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.430964][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.459735][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.467401][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.475359][T13815] bridge_slave_1: entered allmulticast mode [ 1363.484434][T13815] bridge_slave_1: entered promiscuous mode [ 1363.546091][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.723667][ T3280] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.787308][T13815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.883755][ T3280] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.983357][T10727] Bluetooth: hci0: command tx timeout [ 1364.021004][ T3280] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.061980][T13815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.135702][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.179308][ T3280] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.363136][T13815] team0: Port device team_slave_0 added [ 1364.405636][ T3226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.413421][ T3226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.470065][T13815] team0: Port device team_slave_1 added [ 1364.504750][ T3226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.512501][ T3226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.787932][T13815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.796341][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1364.823007][T13815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.052077][T13815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.059374][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.086308][T13815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.107927][ T3280] bridge_slave_1: left allmulticast mode [ 1365.114628][ T3280] bridge_slave_1: left promiscuous mode [ 1365.121450][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.158005][ T3280] bridge_slave_0: left allmulticast mode [ 1365.164070][ T3280] bridge_slave_0: left promiscuous mode [ 1365.170768][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.658186][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1365.670281][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1365.682846][ T3280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.682983][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1365.724565][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1365.734212][ T3280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.751605][ T5182] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1365.764915][ T3280] bond0 (unregistering): Released all slaves [ 1365.788797][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1366.060835][ T5182] Bluetooth: hci0: command tx timeout [ 1366.111612][T13815] hsr_slave_0: entered promiscuous mode [ 1366.126376][T13815] hsr_slave_1: entered promiscuous mode [ 1366.707133][ T3280] hsr_slave_0: left promiscuous mode [ 1366.733186][ T3280] hsr_slave_1: left promiscuous mode [ 1366.748537][ T3280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.759405][ T3280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.778093][ T3280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.786053][ T3280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.802429][ T3280] veth1_macvtap: left promiscuous mode [ 1366.808106][ T3280] veth0_macvtap: left promiscuous mode [ 1366.815166][ T3280] veth1_vlan: left promiscuous mode [ 1366.820882][ T3280] veth0_vlan: left promiscuous mode [ 1367.446101][ T3280] team0 (unregistering): Port device team_slave_1 removed [ 1367.483779][ T3280] team0 (unregistering): Port device team_slave_0 removed [ 1367.897596][ T5182] Bluetooth: hci2: command tx timeout [ 1367.957197][T13780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.005349][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.044482][T13780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.135431][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.143182][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.358619][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.366364][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.629501][T13738] veth0_vlan: entered promiscuous mode [ 1368.860788][T13738] veth1_vlan: entered promiscuous mode [ 1368.931730][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.345979][T13738] veth0_macvtap: entered promiscuous mode [ 1369.482089][T13835] chnl_net:caif_netlink_parms(): no params data found [ 1369.548945][T13815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1369.598243][T13738] veth1_macvtap: entered promiscuous mode [ 1369.617944][T13815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1369.724275][T13745] veth0_vlan: entered promiscuous mode [ 1369.733967][T13815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1369.896597][T13815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1369.966827][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.979018][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.990446][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.990742][ T5182] Bluetooth: hci2: command tx timeout [ 1370.001110][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.005709][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.074063][T13745] veth1_vlan: entered promiscuous mode [ 1370.123458][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.134202][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.144417][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.157098][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.172484][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.332010][T13738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.342582][T13738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.352922][T13738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.365519][T13738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.417751][T13780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.651026][T13745] veth0_macvtap: entered promiscuous mode [ 1370.743920][T13745] veth1_macvtap: entered promiscuous mode [ 1370.976804][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.989313][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.999476][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.010230][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.023856][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.035879][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.053557][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.226081][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.234019][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.241869][T13835] bridge_slave_0: entered allmulticast mode [ 1371.251082][T13835] bridge_slave_0: entered promiscuous mode [ 1371.298411][T13780] veth0_vlan: entered promiscuous mode [ 1371.306497][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.316236][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.324048][T13835] bridge_slave_1: entered allmulticast mode [ 1371.333092][T13835] bridge_slave_1: entered promiscuous mode [ 1371.346433][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.358009][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.368148][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.378854][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.391067][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.402473][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.417229][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.641596][T13745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.652001][T13745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.664046][T13745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.674323][T13745] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.703009][T13780] veth1_vlan: entered promiscuous mode [ 1371.740991][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.841756][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.059421][ T5182] Bluetooth: hci2: command tx timeout [ 1372.112285][T13835] team0: Port device team_slave_0 added [ 1372.136802][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.162101][T13835] team0: Port device team_slave_1 added [ 1372.381395][T13780] veth0_macvtap: entered promiscuous mode [ 1372.414032][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.421409][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.447714][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.547542][T13780] veth1_macvtap: entered promiscuous mode [ 1372.562194][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.569513][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.596807][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.646781][T13815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.722607][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.730342][ T7246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.851888][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.859618][ T7246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.998791][T13835] hsr_slave_0: entered promiscuous mode [ 1373.030453][T13835] hsr_slave_1: entered promiscuous mode [ 1373.047300][T13835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.055269][T13835] Cannot create hsr debugfs directory [ 1373.082352][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.093158][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.103402][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.114178][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.126248][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.139694][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.149836][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.160567][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.175900][T13780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.381924][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.392967][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.403089][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.413800][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.423949][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.436715][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.447449][T13780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.458192][T13780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.473448][T13780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.707878][T13780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.717150][T13780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.726261][T13780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.737632][T13780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.141135][ T5182] Bluetooth: hci2: command tx timeout [ 1375.012045][T13835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1375.136988][T13835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1375.238678][T13835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1375.361283][T13835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1375.454408][T13815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.132513][T13815] veth0_vlan: entered promiscuous mode [ 1376.300026][T13815] veth1_vlan: entered promiscuous mode [ 1376.761005][T13815] veth0_macvtap: entered promiscuous mode [ 1376.847114][T13835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.878189][T13815] veth1_macvtap: entered promiscuous mode [ 1377.068075][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1377.079029][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.089295][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1377.101870][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.111983][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1377.124734][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.135444][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1377.146158][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.156287][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1377.167005][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.182582][T13815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.221711][T13835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.326670][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.334429][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.366983][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.375153][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.389621][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1377.400441][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.410524][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1377.427057][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.440620][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1377.451913][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.462074][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1377.472748][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.482771][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1377.493443][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.508749][T13815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.562130][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.569890][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.683804][T10472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.693352][T10472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.749877][T13815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.758915][T13815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.768275][T13815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.777393][T13815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.766104][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.775399][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.954242][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.964093][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.703921][T13835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.770871][T13927] loop1: detected capacity change from 0 to 64 [ 1383.070061][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.078121][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.269372][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.277441][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.653321][T13946] 9pnet_virtio: no channels available for device syz [ 1384.178037][T13835] veth0_vlan: entered promiscuous mode [ 1384.256893][T13835] veth1_vlan: entered promiscuous mode [ 1384.587330][T13835] veth0_macvtap: entered promiscuous mode [ 1384.670487][T13835] veth1_macvtap: entered promiscuous mode [ 1384.883595][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.894587][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.910407][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.922045][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.932202][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.942843][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.952825][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.963510][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.973501][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1384.984120][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.994135][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.007847][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.022799][T13835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.215828][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.228142][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.239395][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.250240][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.262437][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.273562][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.283673][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.294404][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.304512][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.321799][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.331928][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.342649][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.364513][T13835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.435342][T13835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.444550][T13835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.453686][T13835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.462912][T13835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.747722][T13975] loop2: detected capacity change from 0 to 64 [ 1385.867409][ T29] audit: type=1326 audit(1723854869.283:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.1.2422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b3779e79 code=0x0 [ 1385.937652][T13972] syz.1.2422 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1386.013767][T13972] loop1: detected capacity change from 0 to 256 [ 1386.432610][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.442543][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 1386.503262][T10472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.511431][T10472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.696341][T10472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.705538][T10472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.849438][T13997] loop0: detected capacity change from 0 to 1024 [ 1387.926324][T13997] hfsplus: request for non-existent node 3 in B*Tree [ 1387.933546][T13997] hfsplus: request for non-existent node 3 in B*Tree [ 1389.065228][T14008] loop0: detected capacity change from 0 to 64 [ 1390.539020][T14024] capability: warning: `syz.1.2437' uses deprecated v2 capabilities in a way that may be insecure [ 1391.477382][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.485683][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.718691][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.727274][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.233767][T14035] loop2: detected capacity change from 0 to 1764 [ 1392.537084][T14037] loop4: detected capacity change from 0 to 256 [ 1392.606155][T14039] loop1: detected capacity change from 0 to 256 [ 1392.740486][T14037] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1392.973051][T14039] FAT-fs (loop1): Directory bread(block 64) failed [ 1392.979951][T14039] FAT-fs (loop1): Directory bread(block 65) failed [ 1392.992943][T14039] FAT-fs (loop1): Directory bread(block 66) failed [ 1393.001408][T14039] FAT-fs (loop1): Directory bread(block 67) failed [ 1393.008304][T14039] FAT-fs (loop1): Directory bread(block 68) failed [ 1393.015319][T14039] FAT-fs (loop1): Directory bread(block 69) failed [ 1393.022316][T14039] FAT-fs (loop1): Directory bread(block 70) failed [ 1393.029214][T14039] FAT-fs (loop1): Directory bread(block 71) failed [ 1393.036100][T14039] FAT-fs (loop1): Directory bread(block 72) failed [ 1393.043007][T14039] FAT-fs (loop1): Directory bread(block 73) failed [ 1393.647405][T14043] dvmrp1: entered allmulticast mode [ 1398.896954][T14090] loop1: detected capacity change from 0 to 1764 [ 1399.215883][T14090] overlay: ./file0 is not a directory [ 1400.086425][T14098] loop0: detected capacity change from 0 to 512 [ 1400.138529][T14098] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1400.174851][T14098] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1400.189988][T14098] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1400.301660][T14098] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1400.320401][T14098] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.2463: casefold flag without casefold feature [ 1400.380039][T14098] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2463: couldn't read orphan inode 16 (err -117) [ 1400.428349][T14098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1400.794730][T10727] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1400.807958][T10727] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1400.817501][T10727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1400.843548][T10727] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1400.904498][T10727] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1400.916628][T10727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1401.049707][T13815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.977795][T14123] loop4: detected capacity change from 0 to 2048 [ 1403.035393][ T5182] Bluetooth: hci6: command tx timeout [ 1403.180132][T14123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1403.614216][T14109] chnl_net:caif_netlink_parms(): no params data found [ 1403.807345][ T3591] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1403.901408][ T3591] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 1403.914094][ T3591] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1403.914094][ T3591] [ 1403.924034][ T3591] EXT4-fs (loop4): Total free blocks count 0 [ 1403.930388][ T3591] EXT4-fs (loop4): Free/Dirty block details [ 1403.936504][ T3591] EXT4-fs (loop4): free_blocks=2415919104 [ 1403.942633][ T3591] EXT4-fs (loop4): dirty_blocks=32 [ 1403.953404][ T3591] EXT4-fs (loop4): Block reservation details [ 1403.961432][ T3591] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1404.009451][ T5235] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1404.063718][T13835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.239339][ T5235] usb 1-1: Using ep0 maxpacket: 8 [ 1404.281015][ T5235] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1404.290758][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.391596][ T5235] usb 1-1: config 0 descriptor?? [ 1405.110896][ T5182] Bluetooth: hci6: command tx timeout [ 1405.328751][ T5235] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1405.339344][ T5235] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1405.446881][ T5235] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1405.504271][ T5235] usb 1-1: USB disconnect, device number 11 [ 1405.554136][T14109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.563702][T14109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.572053][T14109] bridge_slave_0: entered allmulticast mode [ 1405.594616][T14109] bridge_slave_0: entered promiscuous mode [ 1405.649630][T14109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.657056][T14109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.666191][T14109] bridge_slave_1: entered allmulticast mode [ 1405.674479][T14109] bridge_slave_1: entered promiscuous mode [ 1405.803083][T14109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.886579][T14109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.152446][T14109] team0: Port device team_slave_0 added [ 1406.232671][T14109] team0: Port device team_slave_1 added [ 1406.521044][T14109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.528182][T14109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.554363][T14109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.715428][T14109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.724115][T14109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.750284][T14109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.210549][ T5182] Bluetooth: hci6: command tx timeout [ 1407.291609][T14109] hsr_slave_0: entered promiscuous mode [ 1407.402085][T14109] hsr_slave_1: entered promiscuous mode [ 1407.556195][T14109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1407.564270][T14109] Cannot create hsr debugfs directory [ 1408.492778][T14162] loop0: detected capacity change from 0 to 2048 [ 1408.720323][T14162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.031964][T14109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.224018][T14109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.279245][ T5182] Bluetooth: hci6: command tx timeout [ 1409.483643][ T3280] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1409.572476][ T3280] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 1409.590462][ T3280] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1409.590462][ T3280] [ 1409.601919][ T3280] EXT4-fs (loop0): Total free blocks count 0 [ 1409.608087][ T3280] EXT4-fs (loop0): Free/Dirty block details [ 1409.614177][ T3280] EXT4-fs (loop0): free_blocks=2415919104 [ 1409.620055][ T3280] EXT4-fs (loop0): dirty_blocks=32 [ 1409.625276][ T3280] EXT4-fs (loop0): Block reservation details [ 1409.631469][ T3280] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 1409.720639][T14109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.893878][T14109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.940982][T14168] binder: 14159:14168 ioctl c0306201 20000380 returned -14 [ 1410.053729][T13815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.404639][T14109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1410.423188][T14109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1410.441527][T14109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1410.582258][T14109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1411.989439][T14109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.582236][T14109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.867173][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.874719][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.998330][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.005897][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.335196][T14109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1415.815970][T10727] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1415.832998][T10727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1415.842375][T10727] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1415.881465][T10727] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1415.969275][T10727] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1415.978055][T10727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1416.417567][T14109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.917216][T14109] veth0_vlan: entered promiscuous mode [ 1417.382429][T14109] veth1_vlan: entered promiscuous mode [ 1417.675890][T14207] loop1: detected capacity change from 0 to 16 [ 1417.755417][T14207] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 1418.222127][ T5182] Bluetooth: hci7: command tx timeout [ 1418.300858][T14109] veth0_macvtap: entered promiscuous mode [ 1418.429711][T14109] veth1_macvtap: entered promiscuous mode [ 1418.491358][ T34] bridge_slave_1: left allmulticast mode [ 1418.497145][ T34] bridge_slave_1: left promiscuous mode [ 1418.503507][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.661702][ T34] bridge_slave_0: left allmulticast mode [ 1418.667595][ T34] bridge_slave_0: left promiscuous mode [ 1418.674376][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.751852][T14213] loop2: detected capacity change from 0 to 1024 [ 1419.184679][ T5182] Bluetooth: hci5: command 0x0406 tx timeout [ 1419.427713][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.500694][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.501624][T10472] hfsplus: b-tree write err: -5, ino 8 [ 1419.594375][ T34] bond0 (unregistering): Released all slaves [ 1419.800165][T14197] chnl_net:caif_netlink_parms(): no params data found [ 1419.981768][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.992819][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.003247][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.013889][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.032197][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.045535][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.056640][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.067455][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.080259][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.091504][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.101861][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.113681][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.132376][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.145868][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.162564][T14109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.301980][T10727] Bluetooth: hci7: command tx timeout [ 1420.722218][T14223] Cannot find del_set index 4 as target [ 1420.799984][T14221] netlink: 'syz.1.2503': attribute type 4 has an invalid length. [ 1420.807947][T14221] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2503'. [ 1421.002284][ T34] hsr_slave_0: left promiscuous mode [ 1421.080075][ T34] hsr_slave_1: left promiscuous mode [ 1421.125076][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.133005][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.201302][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.209170][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.339878][ T34] veth1_macvtap: left promiscuous mode [ 1421.345638][ T34] veth0_macvtap: left promiscuous mode [ 1421.355645][ T34] veth1_vlan: left promiscuous mode [ 1421.361272][ T34] veth0_vlan: left promiscuous mode [ 1422.251918][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1422.384573][T10727] Bluetooth: hci7: command tx timeout [ 1422.409717][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1422.811174][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.822015][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.832154][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.842852][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.852862][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.866275][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.876707][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.893699][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.905118][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.915712][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.925703][T14109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.936293][T14109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.949592][T14109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.209941][T14109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.218997][T14109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.228149][T14109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.237243][T14109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.460304][T10727] Bluetooth: hci7: command tx timeout [ 1424.504267][T14197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.512616][T14197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.520216][T14197] bridge_slave_0: entered allmulticast mode [ 1424.535835][T14197] bridge_slave_0: entered promiscuous mode [ 1424.618989][T14197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.627099][T14197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.641504][T14197] bridge_slave_1: entered allmulticast mode [ 1424.649562][T14197] bridge_slave_1: entered promiscuous mode [ 1425.070328][T14197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.188538][T14197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.648541][T14197] team0: Port device team_slave_0 added [ 1425.720367][T14197] team0: Port device team_slave_1 added [ 1425.746943][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1425.780959][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1425.791835][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1425.850139][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1425.884864][ T5182] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1425.923104][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1426.132503][T14197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.140060][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.170149][T14197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.394072][T14197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.401321][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.428172][T14197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.053242][T14197] hsr_slave_0: entered promiscuous mode [ 1427.135264][T14197] hsr_slave_1: entered promiscuous mode [ 1427.155406][T14197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1427.163303][T14197] Cannot create hsr debugfs directory [ 1428.000198][T10727] Bluetooth: hci1: command tx timeout [ 1428.588302][T14248] chnl_net:caif_netlink_parms(): no params data found [ 1428.881250][T14197] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.208976][T14197] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.277679][T14278] loop2: detected capacity change from 0 to 512 [ 1429.405336][T14278] EXT4-fs (loop2): blocks per group (64) and clusters per group (20800) inconsistent [ 1429.439000][T14197] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.693162][T14197] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.060570][T10727] Bluetooth: hci1: command tx timeout [ 1430.514097][T14197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1430.589478][ T3591] bridge_slave_1: left allmulticast mode [ 1430.595369][ T3591] bridge_slave_1: left promiscuous mode [ 1430.601996][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.300609][ T3591] bridge_slave_0: left allmulticast mode [ 1431.306492][ T3591] bridge_slave_0: left promiscuous mode [ 1431.313780][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.139582][T10727] Bluetooth: hci1: command tx timeout [ 1434.219337][T10727] Bluetooth: hci1: command tx timeout [ 1437.355348][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.410789][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.484402][ T3591] bond0 (unregistering): Released all slaves [ 1437.530176][T14197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1437.964214][T14248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.972603][T14248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.980566][T14248] bridge_slave_0: entered allmulticast mode [ 1437.989842][T14248] bridge_slave_0: entered promiscuous mode [ 1438.002843][T14197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1438.292935][T14197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1438.347103][T14248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.358620][T14248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.366651][T14248] bridge_slave_1: entered allmulticast mode [ 1438.375763][T14248] bridge_slave_1: entered promiscuous mode [ 1438.840467][T14317] loop1: detected capacity change from 0 to 16 [ 1438.882582][T14317] erofs: (device loop1): mounted with root inode @ nid 36. [ 1438.929444][ T3591] hsr_slave_0: left promiscuous mode [ 1439.433996][ T3591] hsr_slave_1: left promiscuous mode [ 1439.451783][ T3591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.460081][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.496838][ T3591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.509645][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.525323][T14320] bio_check_eod: 18 callbacks suppressed [ 1439.525400][T14320] syz.1.2525: attempt to access beyond end of device [ 1439.525400][T14320] loop1: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 1439.545662][T14320] syz.1.2525: attempt to access beyond end of device [ 1439.545662][T14320] loop1: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 1439.561535][T14320] syz.1.2525: attempt to access beyond end of device [ 1439.561535][T14320] loop1: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 1439.575816][T14320] syz.1.2525: attempt to access beyond end of device [ 1439.575816][T14320] loop1: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 1440.979733][ T3591] veth1_macvtap: left promiscuous mode [ 1440.985486][ T3591] veth0_macvtap: left promiscuous mode [ 1440.992135][ T3591] veth1_vlan: left promiscuous mode [ 1441.002961][ T3591] veth0_vlan: left promiscuous mode [ 1442.193548][ T3591] team0 (unregistering): Port device team_slave_1 removed [ 1442.296478][ T3591] team0 (unregistering): Port device team_slave_0 removed [ 1442.673867][T14248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.868536][T14293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.876723][T14293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.903094][T14248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.953761][ T3280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.967824][ T3280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.350869][T14248] team0: Port device team_slave_0 added [ 1443.393621][ T5235] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1443.446666][T14248] team0: Port device team_slave_1 added [ 1443.611700][ T5235] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1443.668358][ T5235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1443.684219][ T5235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1443.697580][ T5235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1443.759566][T14248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.766833][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.798328][T14248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.870763][ T5235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1443.886650][ T5235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1443.900085][ T5235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1443.974625][ T5235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1443.990381][ T5235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1444.003767][ T5235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1444.067153][T14248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.067549][ T5235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1444.074625][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.083484][ T5235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1444.113185][T14248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1444.140757][ T5235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1444.183235][ T5235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1444.196560][ T5235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1444.209014][ T5235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1444.223119][ T5235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1444.232988][ T5235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1444.244252][ T5235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1444.314211][ T5235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1444.318414][T14197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.323559][ T5235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1444.341464][ T5235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1444.488571][ T5235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1444.504324][ T5235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1444.517679][ T5235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1444.612711][T14248] hsr_slave_0: entered promiscuous mode [ 1444.615788][ T5235] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1444.631332][ T5235] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1444.641020][ T5235] usb 2-1: Product: syz [ 1444.645314][ T5235] usb 2-1: Manufacturer: syz [ 1444.650119][ T5235] usb 2-1: SerialNumber: syz [ 1444.676265][ T5235] usb 2-1: config 0 descriptor?? [ 1444.715126][ T5235] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1444.733868][T14248] hsr_slave_1: entered promiscuous mode [ 1444.743886][T14248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1444.752332][T14248] Cannot create hsr debugfs directory [ 1445.135004][T14197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.203130][ T5244] usb 2-1: USB disconnect, device number 8 [ 1445.223075][ T5244] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1445.340072][T14294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.347717][T14294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.510715][T14294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.518394][T14294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.756427][T14248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.985022][T14248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.210185][T14248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.507346][T14248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.942928][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.949731][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.082609][T14248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1448.150888][T14248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1448.245793][T14248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1448.320728][T14248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1448.745061][T14197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.687670][T14248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.956948][T14248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.057501][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.065227][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.178836][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.186627][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.039138][T14197] veth0_vlan: entered promiscuous mode [ 1452.249842][T14197] veth1_vlan: entered promiscuous mode [ 1452.730242][T14293] bridge_slave_1: left allmulticast mode [ 1452.736138][T14293] bridge_slave_1: left promiscuous mode [ 1452.742834][T14293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.820156][T14293] bridge_slave_0: left allmulticast mode [ 1452.826119][T14293] bridge_slave_0: left promiscuous mode [ 1452.832875][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.744936][T14293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.865764][T14293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.994509][T14293] bond0 (unregistering): Released all slaves [ 1454.126771][T14197] veth0_macvtap: entered promiscuous mode [ 1454.145693][T14248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.311181][T14197] veth1_macvtap: entered promiscuous mode [ 1454.730910][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.749320][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.761147][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.771859][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.782102][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.792829][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.803005][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.813731][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.823865][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.834599][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.851260][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.864513][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.880094][T14197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.122854][T14293] hsr_slave_0: left promiscuous mode [ 1455.136650][T14293] hsr_slave_1: left promiscuous mode [ 1455.175008][T14293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1455.184871][T14293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.208259][T14293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1455.216163][T14293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.289942][T14293] veth1_macvtap: left promiscuous mode [ 1455.295773][T14293] veth0_macvtap: left promiscuous mode [ 1455.301843][T14293] veth1_vlan: left promiscuous mode [ 1455.307401][T14293] veth0_vlan: left promiscuous mode [ 1455.734693][T14422] loop2: detected capacity change from 0 to 512 [ 1455.781502][T14422] ext4: Unknown parameter 'smackfshat' [ 1456.401824][T14293] team0 (unregistering): Port device team_slave_1 removed [ 1456.437551][T14293] team0 (unregistering): Port device team_slave_0 removed [ 1456.802905][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.814010][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.824097][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.834815][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.844940][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.855666][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.865749][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.876533][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.892620][T14197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.904936][T14197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.919749][T14197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.985839][T14248] veth0_vlan: entered promiscuous mode [ 1457.130653][T14197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.139888][T14197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.148910][T14197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.158103][T14197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.204410][T14248] veth1_vlan: entered promiscuous mode [ 1457.281300][T14433] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1457.457077][T14248] veth0_macvtap: entered promiscuous mode [ 1457.516170][T14248] veth1_macvtap: entered promiscuous mode [ 1457.762824][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.774761][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.785864][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.797763][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.813851][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.826379][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.836553][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.847308][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.857419][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.868151][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.878238][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.889340][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.904375][T14248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.138177][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.150630][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.161273][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.172006][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.183564][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.195690][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.205759][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.223417][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.235427][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.246180][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.256290][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.266996][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.281907][T14248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.656542][T14248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.666088][T14248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.675250][T14248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.684404][T14248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.710688][T14472] delete_channel: no stack [ 1464.560942][ T5243] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1464.739788][ T5235] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1464.789405][ T5243] usb 4-1: Using ep0 maxpacket: 16 [ 1464.841460][ T5243] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1464.852079][ T5243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.861439][ T5243] usb 4-1: Product: syz [ 1464.865828][ T5243] usb 4-1: Manufacturer: syz [ 1464.871584][ T5243] usb 4-1: SerialNumber: syz [ 1464.919206][ T5243] usb 4-1: config 0 descriptor?? [ 1464.962331][ T5243] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1464.989863][ T5235] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1464.999459][ T5235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.046762][ T5235] usb 3-1: config 0 descriptor?? [ 1465.068316][ T5235] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 1465.172037][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.186001][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.204993][ T5243] usb 4-1: USB disconnect, device number 13 [ 1465.397666][ T5235] usb 3-1: USB disconnect, device number 9 [ 1465.402006][T10472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.412569][T10472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.966051][T14537] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2494'. [ 1466.530485][ T5235] IPVS: starting estimator thread 0... [ 1466.629481][T14546] IPVS: using max 240 ests per chain, 12000 per kthread [ 1466.873145][T14293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.881220][T14293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.974033][T14293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.982842][T14293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.056592][T14555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1467.372322][ T5244] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1467.579888][ T5244] usb 4-1: Using ep0 maxpacket: 32 [ 1467.629325][ T5244] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1467.644509][ T5244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.654588][ T5244] usb 4-1: Product: syz [ 1467.658990][ T5244] usb 4-1: Manufacturer: syz [ 1467.666639][ T5244] usb 4-1: SerialNumber: syz [ 1467.669428][ T5243] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1467.687103][ T5244] usb 4-1: config 0 descriptor?? [ 1467.710023][ T5244] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1467.929448][ T5243] usb 3-1: Using ep0 maxpacket: 8 [ 1467.966933][ T5243] usb 3-1: config 0 has no interfaces? [ 1467.972945][ T5243] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1467.982614][ T5243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.040374][ T5243] usb 3-1: config 0 descriptor?? [ 1468.339461][T14559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.386517][T14559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.475451][ T5235] usb 3-1: USB disconnect, device number 10 [ 1468.798861][ T5244] gspca_ov534_9: reg_w failed -71 [ 1468.803718][T14573] x_tables: unsorted underflow at hook 3 [ 1468.933780][T14573] netlink: 'syz.4.2593': attribute type 2 has an invalid length. [ 1469.411756][ T5244] gspca_ov534_9: Unknown sensor 0000 [ 1469.412136][ T5244] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1469.463237][ T5244] usb 4-1: USB disconnect, device number 14 [ 1470.459831][ T5182] Bluetooth: hci3: command 0x0406 tx timeout [ 1470.466291][ T5182] Bluetooth: hci4: command 0x0406 tx timeout [ 1470.826989][ T5244] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1471.080416][ T5244] usb 1-1: Using ep0 maxpacket: 16 [ 1471.152233][ T5244] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1471.161860][ T5244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.170497][ T5244] usb 1-1: Product: syz [ 1471.174883][ T5244] usb 1-1: Manufacturer: syz [ 1471.179898][ T5244] usb 1-1: SerialNumber: syz [ 1471.239601][ T5244] usb 1-1: config 0 descriptor?? [ 1471.258978][ T5244] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1471.497155][T14598] loop2: detected capacity change from 0 to 512 [ 1471.515747][ T5244] usb 1-1: USB disconnect, device number 12 [ 1471.611246][T14598] EXT4-fs: Ignoring removed orlov option [ 1471.617328][T14598] EXT4-fs: Ignoring removed i_version option [ 1471.624838][T14598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1471.695958][T14598] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1471.704594][T14598] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1471.741750][T14598] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1471.748467][T14598] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1471.758324][T14598] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1471.773182][T14598] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1471.853990][T14598] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2602: bg 0: block 40: padding at end of block bitmap is not set [ 1471.897127][T14598] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1471.932771][T14598] EXT4-fs (loop2): 1 truncate cleaned up [ 1471.946982][T14598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1472.073040][T14598] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.2602: bad symlink. [ 1472.713731][ T3280] bond0: (slave bond_slave_0): interface is now down [ 1472.721150][ T3280] bond0: (slave bond_slave_1): interface is now down [ 1472.730153][ T3280] bond0: now running without any active interface! [ 1473.999711][T14631] loop0: detected capacity change from 0 to 1024 [ 1474.162875][T14631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1474.310014][T14631] EXT4-fs (loop0): shut down requested (1) [ 1474.359746][ T29] audit: type=1804 audit(1723854957.773:332): pid=14631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2613" name="/newroot/5/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 1474.381296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.490888][T14638] x_tables: unsorted underflow at hook 3 [ 1474.570405][T14638] netlink: 'syz.4.2614': attribute type 2 has an invalid length. [ 1474.679696][T14248] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.936916][T14643] loop3: detected capacity change from 0 to 512 [ 1474.981509][T14643] EXT4-fs: Ignoring removed orlov option [ 1474.987497][T14643] EXT4-fs: Ignoring removed i_version option [ 1474.994073][T14643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1475.055282][T14643] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1475.063854][T14643] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1475.152246][T14643] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1475.158888][T14643] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1475.168666][T14643] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1475.185944][T14643] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1475.235554][T14643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2617: bg 0: block 40: padding at end of block bitmap is not set [ 1475.259693][T14643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1475.269940][T14643] EXT4-fs (loop3): 1 truncate cleaned up [ 1475.277433][T14643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1475.306258][T14643] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.2617: bad symlink. [ 1475.514421][T14648] netlink: 'syz.1.2618': attribute type 30 has an invalid length. [ 1475.744447][ T2959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.821461][T13745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.977294][ T2959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.164065][ T2959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.259544][ T2959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.680319][ T2959] bridge_slave_1: left allmulticast mode [ 1476.686303][ T2959] bridge_slave_1: left promiscuous mode [ 1476.693372][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.836185][ T2959] bridge_slave_0: left allmulticast mode [ 1476.842347][ T2959] bridge_slave_0: left promiscuous mode [ 1476.848985][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.357981][ T2959] dvmrp1 (unregistering): left allmulticast mode [ 1477.578617][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.620597][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.647172][ T2959] bond0 (unregistering): Released all slaves [ 1478.380070][ T2959] hsr_slave_0: left promiscuous mode [ 1478.419424][ T1824] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1478.421270][ T2959] hsr_slave_1: left promiscuous mode [ 1478.487689][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.501844][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.579537][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1478.587298][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.657744][ T2959] veth1_macvtap: left promiscuous mode [ 1478.664061][ T2959] veth0_macvtap: left promiscuous mode [ 1478.670340][ T2959] veth1_vlan: left promiscuous mode [ 1478.675888][ T2959] veth0_vlan: left promiscuous mode [ 1478.693251][ T1824] usb 1-1: config 0 has an invalid interface number: 206 but max is 0 [ 1478.706954][ T1824] usb 1-1: config 0 has no interface number 0 [ 1478.714945][ T1824] usb 1-1: config 0 interface 206 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1478.728798][ T1824] usb 1-1: config 0 interface 206 has no altsetting 0 [ 1478.735978][ T1824] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1478.745442][ T1824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.891355][ T1824] usb 1-1: config 0 descriptor?? [ 1478.936077][T10727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1479.391370][T10727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1479.547548][T10727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1480.310526][T10727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1480.598060][T10727] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1480.760976][T10727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1482.412202][ T1824] usb 1-1: string descriptor 0 read error: -22 [ 1482.723882][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 1482.748189][ T1824] usb 1-1: Cannot read MAC address [ 1482.753919][ T1824] MOSCHIP usb-ethernet driver 1-1:0.206: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1482.773396][ T1824] usb 1-1: USB disconnect, device number 13 [ 1482.810608][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 1483.004774][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 1483.014080][T14669] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 1483.260909][ T5182] Bluetooth: hci0: command tx timeout [ 1483.542590][T14109] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.680492][ T5244] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1483.699857][ T2959] IPVS: stop unused estimator thread 0... [ 1483.899644][ T5244] usb 2-1: Using ep0 maxpacket: 16 [ 1484.098078][ T5244] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1484.108217][ T5244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.117216][ T5244] usb 2-1: Product: syz [ 1484.121720][ T5244] usb 2-1: Manufacturer: syz [ 1484.131491][ T5244] usb 2-1: SerialNumber: syz [ 1484.239391][T10174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1484.272272][ T5244] usb 2-1: config 0 descriptor?? [ 1484.298146][ T5244] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1484.318623][ T2959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.470847][T10174] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1484.481108][T10174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.501130][ T2959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.523979][ T5244] usb 2-1: USB disconnect, device number 9 [ 1484.566259][T10174] usb 5-1: config 0 descriptor?? [ 1484.601849][T10174] pwc: Creative Labs Webcam Pro Ex detected. [ 1484.710739][ T2959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.862230][ T2959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.904952][T14671] chnl_net:caif_netlink_parms(): no params data found [ 1485.277729][ T2959] bridge_slave_1: left allmulticast mode [ 1485.284047][ T2959] bridge_slave_1: left promiscuous mode [ 1485.291699][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.339690][T10174] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1485.369569][ T5182] Bluetooth: hci0: command tx timeout [ 1485.392236][T10174] pwc: recv_control_msg error -71 req 02 val 2700 [ 1485.400233][T10174] pwc: recv_control_msg error -71 req 04 val 1600 [ 1485.407812][T10174] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1485.415618][ T2959] bridge_slave_0: left allmulticast mode [ 1485.419716][T10174] pwc: recv_control_msg error -71 req 04 val 1000 [ 1485.421765][ T2959] bridge_slave_0: left promiscuous mode [ 1485.428759][T10174] pwc: recv_control_msg error -71 req 04 val 1300 [ 1485.434434][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.441099][T10174] pwc: recv_control_msg error -71 req 04 val 1400 [ 1485.469694][T10174] pwc: recv_control_msg error -71 req 02 val 2000 [ 1485.477082][T10174] pwc: recv_control_msg error -71 req 02 val 2100 [ 1485.484569][T10174] pwc: recv_control_msg error -71 req 06 val 0600 [ 1485.503963][T10174] pwc: recv_control_msg error -71 req 04 val 1500 [ 1485.528958][T10174] pwc: recv_control_msg error -71 req 02 val 2500 [ 1485.551799][T10174] pwc: recv_control_msg error -71 req 02 val 2400 [ 1485.599511][T10174] pwc: recv_control_msg error -71 req 02 val 2600 [ 1485.748430][T10174] pwc: recv_control_msg error -71 req 02 val 2900 [ 1485.792115][T10174] pwc: recv_control_msg error -71 req 02 val 2800 [ 1485.820879][T10174] pwc: recv_control_msg error -71 req 04 val 1100 [ 1485.930243][T10174] pwc: recv_control_msg error -71 req 04 val 1200 [ 1486.018880][T10174] pwc: Registered as video71. [ 1486.026893][T10174] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 1486.067764][T10174] usb 5-1: USB disconnect, device number 5 [ 1486.130882][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.230988][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.252934][ T2959] bond0 (unregistering): Released all slaves [ 1486.617945][T14697] x_tables: unsorted underflow at hook 3 [ 1486.672932][T14697] Bluetooth: MGMT ver 1.23 [ 1486.734463][T14697] netlink: 'syz.4.2635': attribute type 2 has an invalid length. [ 1487.188919][ T2959] hsr_slave_0: left promiscuous mode [ 1487.211578][ T2959] hsr_slave_1: left promiscuous mode [ 1487.252181][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.260252][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.322487][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.330354][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.419484][T10727] Bluetooth: hci0: command tx timeout [ 1487.430030][ T2959] veth1_macvtap: left promiscuous mode [ 1487.435751][ T2959] veth0_macvtap: left promiscuous mode [ 1487.442100][ T2959] veth1_vlan: left promiscuous mode [ 1487.447645][ T2959] veth0_vlan: left promiscuous mode [ 1487.455428][T10727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1487.540004][T10727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1487.591610][T10727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1487.610683][T10727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1487.664035][T10727] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1487.673277][T10727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1488.457605][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 1488.519627][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 1489.500793][ T5182] Bluetooth: hci0: command tx timeout [ 1489.766823][ T5182] Bluetooth: hci2: command tx timeout [ 1489.768102][T10727] ===================================================== [ 1489.780870][T10727] BUG: KMSAN: uninit-value in l2cap_recv_frame+0xc9c5/0x18b10 [ 1489.788451][T10727] l2cap_recv_frame+0xc9c5/0x18b10 [ 1489.793799][T10727] l2cap_recv_acldata+0xdd9/0x2ac0 [ 1489.799218][T10727] hci_rx_work+0xb38/0x1130 [ 1489.803980][T10727] process_scheduled_works+0xae0/0x1c40 [ 1489.809920][T10727] worker_thread+0xea5/0x1520 [ 1489.814793][T10727] kthread+0x3dd/0x540 [ 1489.819131][T10727] ret_from_fork+0x6d/0x90 [ 1489.823687][T10727] ret_from_fork_asm+0x1a/0x30 [ 1489.828587][T10727] [ 1489.831008][T10727] Uninit was created at: [ 1489.835401][T10727] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 1489.841636][T10727] kmalloc_reserve+0x13d/0x4a0 [ 1489.846589][T10727] __alloc_skb+0x363/0x7b0 [ 1489.851170][T10727] vhci_write+0x128/0x910 [ 1489.855601][T10727] vfs_write+0xb2f/0x1550 [ 1489.864182][T10727] ksys_write+0x20f/0x4c0 [ 1489.868606][T10727] __x64_sys_write+0x93/0xe0 [ 1489.874709][T10727] x64_sys_call+0x306a/0x3ba0 [ 1489.879630][T10727] do_syscall_64+0xcd/0x1e0 [ 1489.884289][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.890431][T10727] [ 1489.892870][T10727] CPU: 0 UID: 0 PID: 10727 Comm: kworker/u9:0 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 1489.903962][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1489.914217][T10727] Workqueue: hci1 hci_rx_work [ 1489.919100][T10727] ===================================================== [ 1489.926144][T10727] Disabling lock debugging due to kernel taint [ 1489.932453][T10727] Kernel panic - not syncing: kmsan.panic set ... [ 1489.938931][T10727] CPU: 0 UID: 0 PID: 10727 Comm: kworker/u9:0 Tainted: G B 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 1489.951498][T10727] Tainted: [B]=BAD_PAGE [ 1489.955692][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1489.965830][T10727] Workqueue: hci1 hci_rx_work [ 1489.970650][T10727] Call Trace: [ 1489.973983][T10727] [ 1489.976966][T10727] dump_stack_lvl+0x216/0x2d0 [ 1489.981785][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1489.987819][T10727] dump_stack+0x1e/0x30 [ 1489.992166][T10727] panic+0x4e2/0xcd0 [ 1489.996295][T10727] ? kmsan_get_metadata+0xe1/0x1c0 [ 1490.001636][T10727] kmsan_report+0x2c7/0x2d0 [ 1490.006326][T10727] ? __msan_warning+0x95/0x120 [ 1490.011192][T10727] ? l2cap_recv_frame+0xc9c5/0x18b10 [ 1490.016604][T10727] ? l2cap_recv_acldata+0xdd9/0x2ac0 [ 1490.022007][T10727] ? hci_rx_work+0xb38/0x1130 [ 1490.026810][T10727] ? process_scheduled_works+0xae0/0x1c40 [ 1490.032643][T10727] ? worker_thread+0xea5/0x1520 [ 1490.037602][T10727] ? kthread+0x3dd/0x540 [ 1490.041955][T10727] ? ret_from_fork+0x6d/0x90 [ 1490.046628][T10727] ? ret_from_fork_asm+0x1a/0x30 [ 1490.051684][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.057619][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.062961][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.068347][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.074275][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.079591][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.085514][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.090824][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.096134][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.102060][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.107370][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.112680][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.118612][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.123953][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.129882][T10727] __msan_warning+0x95/0x120 [ 1490.134573][T10727] l2cap_recv_frame+0xc9c5/0x18b10 [ 1490.139851][T10727] ? __update_load_avg_cfs_rq+0x121/0x10e0 [ 1490.145783][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.151094][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.156404][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.162329][T10727] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 1490.167877][T10727] ? filter_irq_stacks+0x60/0x1a0 [ 1490.173056][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.178366][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.183677][T10727] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1490.190121][T10727] ? kmsan_get_metadata+0x13e/0x1c0 [ 1490.195431][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.201388][T10727] l2cap_recv_acldata+0xdd9/0x2ac0 [ 1490.206736][T10727] hci_rx_work+0xb38/0x1130 [ 1490.211476][T10727] ? __pfx_hci_rx_work+0x10/0x10 [ 1490.216628][T10727] process_scheduled_works+0xae0/0x1c40 [ 1490.222381][T10727] worker_thread+0xea5/0x1520 [ 1490.227167][T10727] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1490.233109][T10727] kthread+0x3dd/0x540 [ 1490.237291][T10727] ? __pfx_worker_thread+0x10/0x10 [ 1490.242514][T10727] ? __pfx_kthread+0x10/0x10 [ 1490.247212][T10727] ret_from_fork+0x6d/0x90 [ 1490.251714][T10727] ? __pfx_kthread+0x10/0x10 [ 1490.256420][T10727] ret_from_fork_asm+0x1a/0x30 [ 1490.261304][T10727] [ 1490.264603][T10727] Kernel Offset: disabled [ 1490.268984][T10727] Rebooting in 86400 seconds..