last executing test programs: 10.034800296s ago: executing program 2 (id=544): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 9.757082428s ago: executing program 2 (id=545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x5e, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x28, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x2, '\x00', [@generic={0x0, 0x12, "58090e541b64f22a8982d3f5aaacd21a0ca1"}]}]}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f00000000000000000", 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x20, 0x8, 0x5b}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 7.429698407s ago: executing program 2 (id=551): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 7.357054503s ago: executing program 3 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) 7.159817569s ago: executing program 3 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x80800}) listen(r3, 0x5) io_uring_enter(r4, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000000c0)=""/19) 5.976597105s ago: executing program 3 (id=556): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$cgroup_pressure(r0, &(0x7f00000001c0)={'full', 0x20, 0x6, 0x20, 0x4}, 0x2f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.757900543s ago: executing program 4 (id=559): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.823382859s ago: executing program 1 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}}, 0x0) 4.620959475s ago: executing program 4 (id=563): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400), 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) sendto$inet6(r4, &(0x7f0000000040)="cb", 0x1, 0x24004090, 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.848905808s ago: executing program 4 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) 3.81439406s ago: executing program 2 (id=566): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001002dbd7000ffdbdf2500000000", @ANYRES32=r3], 0x20}}, 0x40040) 3.788330213s ago: executing program 1 (id=567): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 3.760668185s ago: executing program 3 (id=568): socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0xfffffff9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff}, 0x18) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x803, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80, 0x8000, 0x2000001, 0x1}}) syslog(0x4, &(0x7f0000000500)=""/210, 0xd2) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 3.714920048s ago: executing program 4 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x80800}) listen(r3, 0x5) io_uring_enter(r4, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 3.69805717s ago: executing program 0 (id=570): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1fd, &(0x7f0000000040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.440970881s ago: executing program 0 (id=571): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000a80)=ANY=[@ANYBLOB='force,decompose,nls=cp857,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c706172743d3078303030303030303030303030303030342c0029da224046557ecb65ded5c50ad3a6a30bc9ff1a3ebc851290177bba8d57fc514869fde9ff0cd99031aef2250bd32f6fe7dffcc4d843c5398f85b2162d81bd51c7ad5d6c6ec22b4391379123720a07da3c987a8779b03b21db3c6542040ee5b3167521a1f384b80673a5e56ff56bf5523200000000079a42c04c9e8f94e57cdc0e3adfa978c6d4d7f05fa88ead40f3ec2bf6239d4c40d4496fb2ded06d4900"/206], 0x20, 0x6fe, &(0x7f0000002100)="$eJzs3U9sG1kZAPBvJrYTd6Wsd9nuFoTUaCsq2EKbxCwtEhIFIZTDCipx2Wto021UJ1slWZRWiHqBBW5wQj3sYREKhz0hDkiLOCCWGxISEvfeK3HgVnHAaMYzie0kTtzGTSm/nzSeN57355vPb8b2pJUD+L+18GZU25HEwrk3NrPt+1vN1v2t5kpZjojJiEgjKt1VJKsRyccRl6O7xCezJ4vukv3Gef3BR++fvfdhs7tVKZa8fjqs3Y7OkBHaxRIzETFRrEdU2a+/q3v0d3ekrpPtuLOEnSkTB8ets0t7lOaHOG+Bp93diInqHs83Ik5ExFTxOSCKq0P6hMM7ciNd5QAAAODY7fWtPb8HPtTzD+NhbMb0WEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ1TS/c3ApFjSsjwTSfH7/98uquVqteMN9wCfP2D/e9efUCAAAAAAAAAAcPSqO8XTD+NhbMZ0ud1J8r/5v5pvvJQ/PhfvxHosxVqcj81YjI3YiLWYi6hO9/RZ21zc2Fib293yl5G17HQ6d4uW8xHR2NVyfszHDAAAAAAAAADPth/GQkwfdxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAriZjorvLlpbLciLQSEVMRUcvqtSP+WJafBo1HbPenI44DAAAAnkL1Yj2d/Kdb6CT5d/6X8+/9U/FOrMZGLMdGtGIpruX3Arrf+tO/t5ut+1vNlWzZ3fHX/jlSHHmPETER7+4z8mxe4+R2i4X4ZnwnzsVMXIm1WI7vxWJsxFLMRD07iFiMJBr17t2LRhlnf7wTRVeX+0K5Mhjb6YHtU3kk9bgey3ls5+NqrewtzWskcapntN/XIgYy9G6WneSrhUPm6FrP6/WL4r5MofP8IfsYj0Z+5NXtjMxmuS+y8cLeuS+NOE8GR5qLdPse1Es7o2SbgyOVOf/uKDk/UayzXP+kP+dHbcRbaYOZmI+0mH0RL/fn/NZn7r3Y3/hz//jzlRvp6s0b19fPjfGQxqpaFgYz0ezJxCvDZ1+RiVaWifZgJqoHD12aesxjOSK1IhvdC9vhrpbfyEuL8WrPFHw7rsVSXIzZmItLMRtfjvlo9s2wk315rTRX+nOSn2vp7utbfUjwZz7bU+mnB1Qeh/3Hy/LyQk9ee690jXxf8czln8dsT5ZeHD77HuVdoPKpopCN8aPtd5ynQV8mimtzGV35BrVPJn7VyR7XW6s3124s3jrkeGeLdXbavtd/bf71Yx/MY8nmS3bFreRbeU7q5XzJ9n1iO9r+fNWKv7h026W79p3c3teI6ViOb+17ptaKz3C7e+rue2XPfc1836mefX2fcuLtaOWfQgbMPJmsAnBoJ147Uas/qP+t/kH9x/Ub9Temvj55afLTtaj+pfKHid+mv0m/krwWH8QPYvq4IwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfB+u07NxdbraW1MRZqjzhWpAfW2XrucB1GI2L4WElRqI07G7fvZPkYodXPit8rPLow/jU1NBv1GNOx/274UdQee4hk/PM5eyWOpMPyh9PyZzoTB7b664WI7jOV4fOnEutT1X3yPLnzukfj5mLr352+OvXoOWWAZ9yFjZVbF9Zv3/nC8sriW0tvLa3OX7p46WLzS3NfvHB9ubU023087iiBcVi/fWfiuGMAAAAAAAAAAAAARlP86/+NtTQrJKP/L53KAXVqa+t7j3z6SR8qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D9q4c2otiOJudnzs9n2/a1mK1vK8k7NSkSkEZF8PyL5OOJydJdo9HSX7DfO6w8+ev/svQ+bO31VyvrpsHaH0y6WmImIiWJ9sMk9utnd39We/tqPFF6yfYRZws6UiYPj9t8AAAD//ycX7eY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 3.440610301s ago: executing program 1 (id=572): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x100000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x1d0, 0x1d0, 0xffffffff, 0x1d0, 0x0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x1, 0x2, 0x0, 0x9}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @loopback, @port=0x4e22, @gre_key=0x6c}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "77cc", 0x1}}, @common=@ttl={{0x28}, {0x4, 0x72}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @multicast1, @gre_key=0x1, @icmp_id=0x64}}}}, {{@ip={@loopback, @local, 0xffffffff, 0xffffffff, 'veth1_to_batadv\x00', 'pim6reg\x00', {}, {0xff}, 0x13, 0x3, 0x27}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010100, @multicast1, @port=0x4e23, @port=0x4e21}}}}, {{@ip={@loopback, @private=0xa010102, 0x0, 0xffffffff, 'pim6reg0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x4, 0x0, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x11, @ipv6=@private1, @ipv6=@empty, @port=0x4e24, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r7, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) 2.226405239s ago: executing program 4 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000180)=@buf) 1.992919068s ago: executing program 0 (id=574): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x442e, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x1001f0) open(&(0x7f0000000040)='./file1\x00', 0x20142, 0x10) 1.540599815s ago: executing program 0 (id=575): syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) 1.244414639s ago: executing program 4 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=@secondary) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1.22974652s ago: executing program 3 (id=577): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.177317845s ago: executing program 1 (id=578): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r1, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40186e8d, 0x0) 1.024990167s ago: executing program 3 (id=579): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 1.011263738s ago: executing program 2 (id=580): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 549.816785ms ago: executing program 0 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 336.945812ms ago: executing program 2 (id=582): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) 168.432556ms ago: executing program 1 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 24.432698ms ago: executing program 1 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000003000000000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000e0a070600000000000000000a00000a0900020073797a31000000000900010073797a310000000014000380100000800800034000008000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 0s ago: executing program 0 (id=585): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d9, &(0x7f0000000580)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 35.967726][ T4297] cgroup: Unknown subsys name 'net' [ 36.218700][ T4297] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.537371][ T4297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.182577][ T4316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.186263][ T4317] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.188850][ T4317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.192716][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.195989][ T4320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.198423][ T4320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.199564][ T4322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.201240][ T4320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.204304][ T4322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.206542][ T4320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.207915][ T4322] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.209544][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.212293][ T4322] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.215140][ T4320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.216220][ T4322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.218091][ T4320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.220105][ T4322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.221807][ T4320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.223963][ T4322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.226001][ T4320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.230049][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.234378][ T4320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.238245][ T4320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.241140][ T4320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.264242][ T4309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.267393][ T4309] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.270022][ T4309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.274186][ T4309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.277862][ T4309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 38.280341][ T4309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 38.505647][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 38.539589][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 38.556317][ T4312] chnl_net:caif_netlink_parms(): no params data found [ 38.599652][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.601897][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.605148][ T4307] device bridge_slave_0 entered promiscuous mode [ 38.611578][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.613873][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.616658][ T4307] device bridge_slave_1 entered promiscuous mode [ 38.641821][ T4315] chnl_net:caif_netlink_parms(): no params data found [ 38.677849][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.679977][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.682572][ T4312] device bridge_slave_0 entered promiscuous mode [ 38.691992][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.703725][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.718599][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.720582][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.723373][ T4312] device bridge_slave_1 entered promiscuous mode [ 38.725972][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.727932][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.730553][ T4308] device bridge_slave_0 entered promiscuous mode [ 38.752183][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.754265][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.756949][ T4308] device bridge_slave_1 entered promiscuous mode [ 38.763542][ T4307] team0: Port device team_slave_0 added [ 38.787727][ T4307] team0: Port device team_slave_1 added [ 38.798510][ T4312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.821391][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.824195][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.831309][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.836924][ T4312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.850398][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.853487][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.855592][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.858331][ T4315] device bridge_slave_0 entered promiscuous mode [ 38.861477][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.863890][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.871168][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.874980][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 38.887445][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.890390][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.892477][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.895462][ T4315] device bridge_slave_1 entered promiscuous mode [ 38.905425][ T4312] team0: Port device team_slave_0 added [ 38.942965][ T4312] team0: Port device team_slave_1 added [ 38.947146][ T4308] team0: Port device team_slave_0 added [ 38.950445][ T4308] team0: Port device team_slave_1 added [ 38.961033][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.988451][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.017092][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.019107][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.026694][ T4312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.075430][ T4307] device hsr_slave_0 entered promiscuous mode [ 39.113639][ T4307] device hsr_slave_1 entered promiscuous mode [ 39.154044][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.156059][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.163353][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.182615][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.184814][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.191989][ T4312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.197202][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.199267][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.206775][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.210321][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.212345][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.215440][ T4319] device bridge_slave_0 entered promiscuous mode [ 39.218694][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.220661][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.223743][ T4319] device bridge_slave_1 entered promiscuous mode [ 39.228028][ T4315] team0: Port device team_slave_0 added [ 39.252098][ T4315] team0: Port device team_slave_1 added [ 39.279442][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.335290][ T4312] device hsr_slave_0 entered promiscuous mode [ 39.373691][ T4312] device hsr_slave_1 entered promiscuous mode [ 39.433374][ T4312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.435862][ T4312] Cannot create hsr debugfs directory [ 39.445155][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.450795][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.452698][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.460503][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.544952][ T4308] device hsr_slave_0 entered promiscuous mode [ 39.593675][ T4308] device hsr_slave_1 entered promiscuous mode [ 39.633775][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.636220][ T4308] Cannot create hsr debugfs directory [ 39.640643][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.642661][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.650684][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.665576][ T4319] team0: Port device team_slave_0 added [ 39.669385][ T4319] team0: Port device team_slave_1 added [ 39.712766][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.715148][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.722290][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.726864][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.728909][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.736305][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.844992][ T4315] device hsr_slave_0 entered promiscuous mode [ 39.883680][ T4315] device hsr_slave_1 entered promiscuous mode [ 39.923294][ T4315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.925360][ T4315] Cannot create hsr debugfs directory [ 39.985008][ T4319] device hsr_slave_0 entered promiscuous mode [ 40.023654][ T4319] device hsr_slave_1 entered promiscuous mode [ 40.063488][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.065711][ T4319] Cannot create hsr debugfs directory [ 40.220976][ T4307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.264039][ T4317] Bluetooth: hci3: command 0x0409 tx timeout [ 40.264046][ T4309] Bluetooth: hci1: command 0x0409 tx timeout [ 40.264221][ T4317] Bluetooth: hci0: command 0x0409 tx timeout [ 40.265960][ T4309] Bluetooth: hci2: command 0x0409 tx timeout [ 40.275220][ T4307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.327362][ T4307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.343414][ T4316] Bluetooth: hci4: command 0x0409 tx timeout [ 40.366986][ T4307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.441687][ T4312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.466951][ T4312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.514821][ T4312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.566117][ T4312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.652016][ T4308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.696073][ T4308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.739805][ T4308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.785890][ T4308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.846524][ T4315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.904462][ T4315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.945096][ T4315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.005217][ T4315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.072502][ T4319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.111394][ T4319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.157501][ T4319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.209300][ T4319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.257319][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.282418][ T4312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.300489][ T4312] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.306805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.310346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.322790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.327362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.338565][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.341026][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.345360][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.348462][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.350715][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.354706][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.361179][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.365514][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.368291][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.370403][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.381065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.385186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.387939][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.390115][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.404884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.407655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.410635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.418799][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.420862][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.426027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.428991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.447407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.459003][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.467092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.487497][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.491172][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.499590][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.502716][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.507167][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.509733][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.522897][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.526196][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.529023][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.531989][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.535648][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.538931][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.551298][ T4312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.555834][ T4312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.560862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.564628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.568441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.571354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.588992][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.591565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.594402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.597222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.623365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.626253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.628762][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.630904][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.642769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.647591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.650363][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.652757][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.664832][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.680726][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.687777][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.692903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.701334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.704883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.707762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.710513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.729862][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.732695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.748108][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.751239][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.754635][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.757244][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.760439][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.763026][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.765187][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.767767][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.770683][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.774671][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.777241][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.799475][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.802494][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.805845][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.809247][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.812323][ T1647] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.814399][ T1647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.825379][ T4315] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.830203][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.833084][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.837183][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.839413][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.841574][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.851641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.856561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.860151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.866942][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.876122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.878921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.881671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.885152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.888005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.890734][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.892739][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.900780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.905219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.908384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.913044][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.933967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.936840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.939657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.942820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.946174][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.948168][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.950614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.959816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.965741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.972650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.982988][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.994311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.996595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.008519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.014259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.019045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.032186][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.041022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.044403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.048417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.052003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.060962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.065433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.090734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.098776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.105678][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.119958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.122827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.132835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.140978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.149051][ T4312] device veth0_vlan entered promiscuous mode [ 42.161315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.164995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.192605][ T4312] device veth1_vlan entered promiscuous mode [ 42.205445][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.207997][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.210257][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.227211][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.240327][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.244142][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.247261][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.262544][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.266158][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.268860][ T4307] device veth0_vlan entered promiscuous mode [ 42.297616][ T4307] device veth1_vlan entered promiscuous mode [ 42.317605][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.320302][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.324509][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.327797][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.330654][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.333059][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.342421][ T4312] device veth0_macvtap entered promiscuous mode [ 42.344747][ T4309] Bluetooth: hci0: command 0x041b tx timeout [ 42.344773][ T4316] Bluetooth: hci1: command 0x041b tx timeout [ 42.346324][ T4309] Bluetooth: hci3: command 0x041b tx timeout [ 42.353494][ T4317] Bluetooth: hci2: command 0x041b tx timeout [ 42.363587][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.366234][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.368962][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.371849][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.384861][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.387186][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.401537][ T4315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.421686][ T4312] device veth1_macvtap entered promiscuous mode [ 42.424116][ T4317] Bluetooth: hci4: command 0x041b tx timeout [ 42.453758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.457080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.459879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.471642][ T4307] device veth0_macvtap entered promiscuous mode [ 42.480983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.484558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.487375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.490266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.492838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.501229][ T4307] device veth1_macvtap entered promiscuous mode [ 42.510917][ T4308] device veth0_vlan entered promiscuous mode [ 42.521086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.523937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.527203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.545337][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.549323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.552151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.560641][ T4308] device veth1_vlan entered promiscuous mode [ 42.575728][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.578884][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.584892][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.589868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.592664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.597399][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.610205][ T4315] device veth0_vlan entered promiscuous mode [ 42.612857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.615819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.618757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.621532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.626008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.628665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.632360][ T4312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.637146][ T4312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.639547][ T4312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.642014][ T4312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.651436][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.659492][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.664362][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.670179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.673025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.688792][ T4307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.691419][ T4307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.695274][ T4307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.697792][ T4307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.726929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.729878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.732551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.740816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.747739][ T4315] device veth1_vlan entered promiscuous mode [ 42.760882][ T4308] device veth0_macvtap entered promiscuous mode [ 42.787614][ T4308] device veth1_macvtap entered promiscuous mode [ 42.830946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.835242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.838096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.841980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.846186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.849240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.852153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.857010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.876953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.880122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.882914][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.890370][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.893588][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.896541][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.901100][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.904566][ T4319] device veth0_vlan entered promiscuous mode [ 42.915316][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.918295][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.921074][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.926190][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.929984][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.933040][ T4315] device veth0_macvtap entered promiscuous mode [ 42.953102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.956186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.959077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.961966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.965370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.975761][ T4308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.978167][ T4308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.980688][ T4308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.985426][ T4308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.991878][ T4315] device veth1_macvtap entered promiscuous mode [ 43.005789][ T1675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.009639][ T1675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.019705][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.022618][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.027145][ T4319] device veth1_vlan entered promiscuous mode [ 43.038677][ T1675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.041490][ T1675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.055593][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.058541][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.061410][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.087817][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.090805][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.094206][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.097226][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.100053][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.102987][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.107987][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.127515][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.128032][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.130605][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.132265][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.142245][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.148981][ T1647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.151277][ T1647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.162023][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.177395][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.181648][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.187122][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.189961][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.192690][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.199060][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.206008][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.211944][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.216526][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.219926][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.223006][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.229851][ T4319] device veth0_macvtap entered promiscuous mode [ 43.255645][ T4319] device veth1_macvtap entered promiscuous mode [ 43.275991][ T4315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.278653][ T4315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.281350][ T4315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.287881][ T4315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.319567][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.322666][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.327265][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.330209][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.341063][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.345206][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.347947][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.351006][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.360789][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.368356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.371680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.379918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.392970][ T4418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.403931][ T4418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.406865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.424097][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.426530][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.446986][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.451745][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.458260][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.461277][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.467494][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.470477][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.476834][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.479877][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.486867][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.497162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.499814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.506117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.577122][ T4319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.590885][ T4319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.599604][ T4319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.602322][ T4319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.662228][ T1675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.665081][ T1675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.668286][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.443288][ T4316] Bluetooth: hci2: command 0x040f tx timeout [ 44.445116][ T4316] Bluetooth: hci3: command 0x040f tx timeout [ 44.447056][ T4316] Bluetooth: hci1: command 0x040f tx timeout [ 44.448794][ T4316] Bluetooth: hci0: command 0x040f tx timeout [ 44.504735][ T4317] Bluetooth: hci4: command 0x040f tx timeout [ 44.599297][ T1647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.601704][ T1647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.616732][ T1647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.620768][ T1647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.644482][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.657391][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.659804][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.662918][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.681411][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.701319][ T4428] loop0: detected capacity change from 0 to 4096 [ 44.707768][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.716796][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.719776][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.495871][ T4428] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 47.225358][ T4316] Bluetooth: hci0: command 0x0419 tx timeout [ 47.227004][ T4316] Bluetooth: hci1: command 0x0419 tx timeout [ 47.228729][ T4316] Bluetooth: hci3: command 0x0419 tx timeout [ 47.233345][ T4316] Bluetooth: hci2: command 0x0419 tx timeout [ 47.235113][ T4316] Bluetooth: hci4: command 0x0419 tx timeout [ 47.415644][ T4307] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 48.653574][ T4465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 48.753423][ T4465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 48.853307][ T4464] Zero length message leads to an empty skb [ 50.433181][ C1] sched: RT throttling activated [ 51.470800][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 51.474357][ T4485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 51.503264][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.837641][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 51.844938][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 51.847542][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.849688][ T7] usb 1-1: Product: syz [ 51.863296][ T7] usb 1-1: Manufacturer: syz [ 51.873542][ T7] usb 1-1: SerialNumber: syz [ 52.555897][ T7] usb 1-1: config 0 descriptor?? [ 52.626649][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 52.780101][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 52.997829][ T4495] loop2: detected capacity change from 0 to 32768 [ 53.065867][ T4301] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.092385][ T4503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.263454][ T4503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.762106][ T4506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'. [ 53.767512][ T4506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'. [ 55.271532][ T7] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 55.290720][ T7] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 55.315273][ T7] usb 1-1: media controller created [ 55.345713][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 55.352287][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 55.360491][ T4529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 55.523355][ T7] dvb_usb_rtl28xxu 1-1:0.0: unknown tuner MAX3543 [ 56.352917][ T7] usb 1-1: USB disconnect, device number 2 [ 59.110090][ T4563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'. [ 59.119491][ T4563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'. [ 59.709506][ T4568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.724100][ T4568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.856320][ T4567] loop3: detected capacity change from 0 to 4096 [ 59.967773][ T4567] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 61.235832][ T4578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.238484][ T4578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.306305][ T4308] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 61.315994][ T4570] loop0: detected capacity change from 0 to 32768 [ 62.289322][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.305832][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.443108][ T4544] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.939706][ T4595] loop1: detected capacity change from 0 to 2048 [ 63.507666][ T4603] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.633060][ T4608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 63.640170][ T4608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 64.506943][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.509006][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.251530][ T4596] loop4: detected capacity change from 0 to 32768 [ 65.338875][ T4596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.49 (4596) [ 65.415174][ T4596] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.431106][ T4623] loop2: detected capacity change from 0 to 1024 [ 65.433841][ T4596] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 65.434243][ T4623] ======================================================= [ 65.434243][ T4623] WARNING: The mand mount option has been deprecated and [ 65.434243][ T4623] and is ignored by this kernel. Remove the mand [ 65.434243][ T4623] option from the mount to silence this warning. [ 65.434243][ T4623] ======================================================= [ 65.436173][ T4596] BTRFS info (device loop4): using free space tree [ 65.475256][ T4623] hfsplus: session requires an argument [ 65.476963][ T4623] hfsplus: unable to parse mount options [ 65.822750][ T4299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4299) [ 65.826379][ T4596] BTRFS error (device loop4): open_ctree failed: -12 [ 66.265140][ T4618] loop3: detected capacity change from 0 to 32768 [ 66.273693][ T4616] loop1: detected capacity change from 0 to 32768 [ 66.292110][ T4616] XFS: ikeep mount option is deprecated. [ 66.312159][ T4618] [ 66.312159][ T4618] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.312159][ T4618] [ 66.420540][ T4308] [ 66.420540][ T4308] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.420540][ T4308] [ 66.425676][ T4308] [ 66.425676][ T4308] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.425676][ T4308] [ 66.430970][ T4616] XFS (loop1): Mounting V5 Filesystem [ 66.463487][ T4544] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.631544][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.639102][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.727122][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 66.825887][ T4616] XFS (loop1): Ending clean mount [ 67.504475][ T4678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.510683][ T4678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.682488][ T4616] XFS (loop1): Quotacheck needed: Please wait. [ 67.720204][ T4687] loop4: detected capacity change from 0 to 512 [ 67.734496][ T4687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.738402][ T4687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.098867][ T4616] XFS (loop1): Quotacheck: Done. [ 68.687218][ T4687] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 68.691262][ T4687] EXT4-fs (loop4): 1 truncate cleaned up [ 68.735907][ T4687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.865070][ T4315] XFS (loop1): Unmounting Filesystem [ 68.999458][ T4319] EXT4-fs (loop4): unmounting filesystem. [ 69.542017][ T4703] loop2: detected capacity change from 0 to 1024 [ 69.553358][ T4309] Bluetooth: hci4: command 0x2021 tx timeout [ 69.561438][ T4704] loop4: detected capacity change from 0 to 1024 [ 69.613307][ T4703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.941795][ T4526] hfsplus: b-tree write err: -5, ino 4 [ 69.955074][ T1964] cfg80211: failed to load regulatory.db [ 70.021293][ T4707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.044988][ T4707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.086601][ T4696] loop3: detected capacity change from 0 to 32768 [ 70.140195][ T4696] (syz.3.71,4696,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.154863][ T4696] (syz.3.71,4696,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.912495][ T4696] JBD2: Ignoring recovery information on journal [ 71.086035][ T4696] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 71.259408][ T4308] ocfs2: Unmounting device (7,3) on (node local) [ 72.450892][ T4718] loop4: detected capacity change from 0 to 32768 [ 72.479807][ T4723] loop2: detected capacity change from 0 to 32768 [ 72.508593][ T4723] XFS: ikeep mount option is deprecated. [ 72.552293][ T4718] XFS (loop4): Mounting V5 Filesystem [ 72.611618][ T4723] XFS (loop2): Mounting V5 Filesystem [ 72.661157][ T4718] XFS (loop4): Ending clean mount [ 72.666461][ T4718] XFS (loop4): Quotacheck needed: Please wait. [ 72.725874][ T4723] XFS (loop2): Ending clean mount [ 72.735220][ T4718] XFS (loop4): Quotacheck: Done. [ 72.739978][ T4723] XFS (loop2): Quotacheck needed: Please wait. [ 72.757967][ T4723] XFS (loop2): Quotacheck: Done. [ 73.058928][ T4312] XFS (loop2): Unmounting Filesystem [ 73.084172][ T4319] XFS (loop4): Unmounting Filesystem [ 74.935501][ T4783] loop3: detected capacity change from 0 to 128 [ 74.950357][ T4783] zonefs (loop3) ERROR: Not a zoned block device [ 75.528589][ T4782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 75.991374][ T4773] loop0: detected capacity change from 0 to 32768 [ 75.999390][ T4773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.94 (4773) [ 76.030519][ T4773] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.039917][ T4773] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 76.042523][ T4773] BTRFS info (device loop0): ignoring data csums [ 76.062269][ T4773] BTRFS info (device loop0): allowing degraded mounts [ 76.068413][ T4773] BTRFS info (device loop0): force zlib compression, level 3 [ 76.078127][ T4773] BTRFS info (device loop0): force clearing of disk cache [ 76.080146][ T4773] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 76.108335][ T4773] BTRFS info (device loop0): use zstd compression, level 3 [ 76.110390][ T4773] BTRFS info (device loop0): enabling ssd optimizations [ 76.112346][ T4773] BTRFS info (device loop0): using spread ssd allocation scheme [ 76.129829][ T4773] BTRFS info (device loop0): max_inline at 0 [ 76.131566][ T4773] BTRFS info (device loop0): using free space tree [ 76.354497][ T4307] BTRFS info (device loop0: state C): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.572668][ T4790] loop4: detected capacity change from 0 to 32768 [ 76.598335][ T4790] XFS: ikeep mount option is deprecated. [ 76.680467][ T4796] loop1: detected capacity change from 0 to 40427 [ 76.689874][ T4790] XFS (loop4): Mounting V5 Filesystem [ 76.692028][ T4511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4511) [ 76.703374][ T4796] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 76.705863][ T4796] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 76.729614][ T4796] F2FS-fs (loop1): invalid crc value [ 76.780569][ T4796] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.846184][ T4790] XFS (loop4): Ending clean mount [ 76.876429][ T4790] XFS (loop4): Quotacheck needed: Please wait. [ 76.893737][ T4796] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 76.895762][ T4796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 76.902505][ T4790] XFS (loop4): Quotacheck: Done. [ 77.082892][ T4319] XFS (loop4): Unmounting Filesystem [ 77.647927][ T4856] loop3: detected capacity change from 0 to 1764 [ 77.804642][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 77.833316][ T4862] loop3: detected capacity change from 0 to 256 [ 78.877344][ T4858] loop1: detected capacity change from 0 to 32768 [ 78.891284][ T4858] (syz.1.117,4858,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.902580][ T4858] (syz.1.117,4858,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.961872][ T4858] JBD2: Ignoring recovery information on journal [ 78.978515][ T4868] loop3: detected capacity change from 0 to 4096 [ 79.059242][ T4868] syz.3.122 sent an empty control message without MSG_MORE. [ 79.215995][ T4858] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 79.334497][ T4883] process 'syz.3.122' launched '/dev/fd/-1' with NULL argv: empty string added [ 79.667019][ T4315] ocfs2: Unmounting device (7,1) on (node local) [ 79.964679][ T4902] loop4: detected capacity change from 0 to 16 [ 79.977033][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 79.987216][ T4902] erofs: (device loop4): mounted with root inode @ nid 36. [ 80.009737][ T4902] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 80.449072][ T4893] loop1: detected capacity change from 0 to 32768 [ 80.614547][ T4893] XFS (loop1): Mounting V5 Filesystem [ 80.833445][ T4893] XFS (loop1): Ending clean mount [ 80.861259][ T4893] XFS (loop1): Quotacheck needed: Please wait. [ 80.935711][ T4926] loop0: detected capacity change from 0 to 2048 [ 80.987929][ T4893] XFS (loop1): Quotacheck: Done. [ 81.069073][ T4926] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.106714][ T4926] EXT4-fs (loop0): unmounting filesystem. [ 81.170091][ T4914] loop3: detected capacity change from 0 to 32768 [ 81.198091][ T4315] XFS (loop1): Unmounting Filesystem [ 81.222283][ T4930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.140'. [ 81.253556][ T4930] ksmbd: Unknown IPC event: 1, ignore. [ 81.276463][ T4916] loop2: detected capacity change from 0 to 32768 [ 81.285829][ T4914] XFS (loop3): Mounting V5 Filesystem [ 81.319635][ T4916] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.322637][ T4916] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 81.356519][ T4914] XFS (loop3): Ending clean mount [ 81.374490][ T4916] BTRFS info (device loop2): using free space tree [ 81.516886][ T4918] loop4: detected capacity change from 0 to 32768 [ 81.520781][ T4918] (syz.4.139,4918,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.532976][ T4308] XFS (loop3): Unmounting Filesystem [ 81.540470][ T4939] [U] ³•¯ [ 81.587045][ T4918] (syz.4.139,4918,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.612484][ T4918] JBD2: Ignoring recovery information on journal [ 81.629731][ T4916] BTRFS info (device loop2): enabling ssd optimizations [ 81.779996][ T4918] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 81.830692][ T4312] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.924754][ T4319] ocfs2: Unmounting device (7,4) on (node local) [ 82.080410][ T4979] netlink: 'syz.0.145': attribute type 21 has an invalid length. [ 82.082997][ T4979] netlink: 156 bytes leftover after parsing attributes in process `syz.0.145'. [ 82.804666][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 83.768185][ T5002] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.835767][ T5002] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.375620][ T5016] loop3: detected capacity change from 0 to 128 [ 84.380476][ T5016] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 84.391714][ T5016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.489119][ T5020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.491923][ T5020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.556195][ T5021] netlink: 'syz.3.157': attribute type 22 has an invalid length. [ 84.558474][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 84.603943][ T5021] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.606887][ T5021] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.609678][ T5021] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.612119][ T5021] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.684123][ T5021] netlink: 'syz.3.157': attribute type 22 has an invalid length. [ 84.686662][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 84.832997][ T4511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4511) [ 84.906629][ T4989] loop0: detected capacity change from 0 to 32768 [ 85.123709][ T4989] XFS (loop0): Mounting V5 Filesystem [ 85.218153][ T4989] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 85.305476][ T4989] XFS (loop0): Starting recovery (logdev: internal) [ 85.365917][ T4989] XFS (loop0): Ending recovery (logdev: internal) [ 85.380740][ T4989] XFS (loop0): Quotacheck needed: Please wait. [ 85.427203][ T4989] XFS (loop0): Quotacheck: Done. [ 85.533676][ T4307] XFS (loop0): Unmounting Filesystem [ 85.669844][ T5018] loop1: detected capacity change from 0 to 32768 [ 85.709999][ T5018] XFS (loop1): Mounting V5 Filesystem [ 85.784721][ T5018] XFS (loop1): Ending clean mount [ 85.787625][ T5018] XFS (loop1): Quotacheck needed: Please wait. [ 85.830985][ T5018] XFS (loop1): Quotacheck: Done. [ 85.931401][ T4315] XFS (loop1): Unmounting Filesystem [ 87.551829][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.567590][ T5052] loop4: detected capacity change from 0 to 32768 [ 87.569981][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.710914][ T5052] XFS (loop4): Mounting V5 Filesystem [ 87.797992][ T5052] XFS (loop4): Ending clean mount [ 87.800887][ T5052] XFS (loop4): Quotacheck needed: Please wait. [ 87.841278][ T5052] XFS (loop4): Quotacheck: Done. [ 87.972402][ T4319] XFS (loop4): Unmounting Filesystem [ 88.426974][ T5086] tmpfs: Bad value for 'mpol' [ 89.360854][ T5090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.376373][ T5090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.200292][ T5092] loop4: detected capacity change from 0 to 32768 [ 90.261642][ T5092] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 90.429192][ T4319] ocfs2: Unmounting device (7,4) on (node local) [ 90.643327][ T4978] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.834833][ T4978] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.837119][ T4978] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.839989][ T4978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.847571][ T4978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.864261][ T4978] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.866994][ T4978] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.869321][ T4978] usb 1-1: Product: syz [ 90.870565][ T4978] usb 1-1: Manufacturer: syz [ 90.903851][ T4978] cdc_wdm 1-1:1.0: skipping garbage [ 90.908998][ T4978] cdc_wdm 1-1:1.0: skipping garbage [ 90.931015][ T4978] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 90.932826][ T4978] cdc_wdm 1-1:1.0: Unknown control protocol [ 92.057620][ T5106] loop3: detected capacity change from 0 to 32768 [ 92.089515][ T5106] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.092488][ T5106] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 92.097641][ T5106] BTRFS info (device loop3): max_inline at 0 [ 92.100446][ T5106] BTRFS info (device loop3): enabling disk space caching [ 92.102604][ T5106] BTRFS info (device loop3): setting nodatasum [ 92.105635][ T5106] BTRFS info (device loop3): turning off barriers [ 92.107560][ T5106] BTRFS info (device loop3): turning on flush-on-commit [ 92.109646][ T5106] BTRFS info (device loop3): doing ref verification [ 92.112514][ T5106] BTRFS info (device loop3): force clearing of disk cache [ 92.116409][ T5106] BTRFS info (device loop3): enabling ssd optimizations [ 92.118581][ T5106] BTRFS info (device loop3): max_inline at 4096 [ 92.120364][ T5106] BTRFS info (device loop3): disk space caching is enabled [ 92.239296][ T5106] BTRFS info (device loop3): rebuilding free space tree [ 92.282554][ T5106] BTRFS info (device loop3): disabling free space tree [ 92.288382][ T5106] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.291255][ T5106] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.715973][ T4308] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.763496][ T4978] usb 1-1: USB disconnect, device number 3 [ 94.041546][ T4317] Bluetooth: Unexpected continuation frame (len 4) [ 94.390578][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.393599][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.639098][ T5150] loop4: detected capacity change from 0 to 32768 [ 94.665558][ T5150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.187 (5150) [ 94.701559][ T5150] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.704782][ T5150] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 94.707299][ T5150] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.709961][ T5150] BTRFS info (device loop4): use zstd compression, level 3 [ 94.719255][ T5150] BTRFS info (device loop4): using free space tree [ 95.081898][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 95.761788][ T5150] BTRFS info (device loop4): enabling ssd optimizations [ 95.958240][ T5195] loop3: detected capacity change from 0 to 2048 [ 96.003309][ T5195] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.006804][ T5195] NILFS (loop3): mounting unchecked fs [ 96.097249][ T4319] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.117610][ T5195] NILFS (loop3): recovery complete [ 96.770406][ T5200] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.469910][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.472504][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.590985][ T5252] loop1: detected capacity change from 0 to 1024 [ 99.617413][ T5252] EXT4-fs: Ignoring removed oldalloc option [ 99.619463][ T5252] EXT4-fs: Ignoring removed bh option [ 99.622461][ T5252] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.665952][ T5252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.809706][ T5248] loop0: detected capacity change from 0 to 32768 [ 99.812276][ T5248] XFS: ikeep mount option is deprecated. [ 99.831554][ T4315] EXT4-fs (loop1): unmounting filesystem. [ 99.894320][ T5248] XFS (loop0): Mounting V5 Filesystem [ 99.999661][ T5244] loop3: detected capacity change from 0 to 32768 [ 100.141626][ T5248] XFS (loop0): Ending clean mount [ 100.146986][ T5248] XFS (loop0): Quotacheck needed: Please wait. [ 100.228881][ T4317] Bluetooth: Unexpected continuation frame (len 4) [ 100.249282][ T5248] XFS (loop0): Quotacheck: Done. [ 101.107073][ T4307] XFS (loop0): Unmounting Filesystem [ 102.225125][ T5164] Set syz1 is full, maxelem 65536 reached [ 102.225601][ T5276] loop3: detected capacity change from 0 to 32768 [ 102.302504][ T5276] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.312021][ T5276] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.365468][ T5276] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 102.372936][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.380378][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.403360][ T5296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.405994][ T5296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.454530][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms [ 102.457787][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.460208][ T5276] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.695918][ T4317] Bluetooth: Unexpected continuation frame (len 4) [ 102.967841][ T5307] loop0: detected capacity change from 0 to 32768 [ 102.986707][ T5307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.236 (5307) [ 102.994446][ T5299] loop1: detected capacity change from 0 to 32768 [ 102.998653][ T5307] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.018377][ T5299] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.232 (5299) [ 103.022076][ T5307] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 103.031115][ T5307] BTRFS info (device loop0): using free space tree [ 103.218324][ T5307] BTRFS info (device loop0): enabling ssd optimizations [ 103.563633][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 103.795809][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.801833][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.872307][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.157282][ T5317] loop2: detected capacity change from 0 to 32768 [ 104.184903][ T7] usb 1-1: config 0 descriptor?? [ 104.194559][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 104.196291][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 104.206618][ T5317] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.239 (5317) [ 104.254198][ T5317] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.262214][ T5317] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 104.283719][ T5317] BTRFS info (device loop2): using free space tree [ 104.486004][ T5317] BTRFS info (device loop2): enabling ssd optimizations [ 104.537178][ T5370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.557768][ T5370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.644937][ T4312] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.743522][ T4368] usb 1-1: USB disconnect, device number 4 [ 104.801078][ T5374] loop3: detected capacity change from 0 to 4096 [ 104.811159][ T5374] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 105.243746][ T4307] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.910291][ T5376] loop1: detected capacity change from 0 to 32768 [ 106.127498][ T5380] loop2: detected capacity change from 0 to 32768 [ 106.170438][ T5380] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 106.379999][ T4312] ocfs2: Unmounting device (7,2) on (node local) [ 106.673742][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 106.749301][ T5400] loop0: detected capacity change from 0 to 32768 [ 107.536444][ T5400] XFS (loop0): Mounting V5 Filesystem [ 107.749832][ T5427] loop3: detected capacity change from 0 to 1024 [ 107.752244][ T5427] EXT4-fs: Ignoring removed orlov option [ 107.754174][ T5427] EXT4-fs: Ignoring removed nobh option [ 107.755791][ T5427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.902894][ T5427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.533757][ T5400] XFS (loop0): Ending clean mount [ 108.622997][ T5403] loop1: detected capacity change from 0 to 32768 [ 108.655027][ T4307] XFS (loop0): Unmounting Filesystem [ 108.708258][ T5403] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.741609][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 108.795421][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.273'. [ 108.798803][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.273'. [ 108.801533][ T5443] netlink: 'syz.4.273': attribute type 6 has an invalid length. [ 108.811179][ T4315] (syz-executor,4315,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 108.830297][ T4315] ocfs2: Unmounting device (7,1) on (node local) [ 108.952957][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 109.226404][ T5464] loop4: detected capacity change from 0 to 1024 [ 110.532349][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.959776][ T1574] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 15) [ 111.006595][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 112.037320][ T5504] loop0: detected capacity change from 0 to 512 [ 112.236788][ T5504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.025886][ T1574] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 113.029413][ T1574] EXT4-fs (loop4): This should not happen!! Data will be lost [ 113.029413][ T1574] [ 113.087895][ T4319] EXT4-fs (loop4): unmounting filesystem. [ 113.180001][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 113.209737][ T4307] EXT4-fs (loop0): unmounting filesystem. [ 113.230795][ T5521] loop1: detected capacity change from 0 to 512 [ 114.095473][ T5521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.280972][ T4315] EXT4-fs (loop1): unmounting filesystem. [ 115.390235][ T5565] loop1: detected capacity change from 0 to 512 [ 115.423430][ T5565] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.313: corrupted in-inode xattr [ 115.480420][ T5565] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.313: couldn't read orphan inode 15 (err -117) [ 115.519167][ T5565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.554857][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 115.564671][ T5575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.613454][ T5575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.660526][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 116.583298][ T5539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 118.806104][ T4315] EXT4-fs (loop1): unmounting filesystem. [ 120.144043][ T27] audit: type=1326 audit(120.110:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe55ce28 code=0x7ffc0000 [ 120.150202][ T27] audit: type=1326 audit(120.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe55ce28 code=0x7ffc0000 [ 120.185438][ T27] audit: type=1326 audit(120.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffbe55ce28 code=0x7ffc0000 [ 120.191604][ T27] audit: type=1326 audit(120.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe55ce28 code=0x7ffc0000 [ 120.293320][ T27] audit: type=1326 audit(120.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe55ce28 code=0x7ffc0000 [ 120.312709][ T27] audit: type=1326 audit(120.160:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=137 compat=0 ip=0xffffbe55ce28 code=0x7ffc0000 [ 120.327803][ T27] audit: type=1326 audit(120.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe55ce28 code=0x7ffc0000 [ 120.341464][ T27] audit: type=1326 audit(120.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe55ce28 code=0x7ffc0000 [ 120.383526][ T5617] capability: warning: `syz.0.328' uses deprecated v2 capabilities in a way that may be insecure [ 120.402908][ T27] audit: type=1326 audit(120.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5ce28 code=0x7ffc0000 [ 120.423653][ T27] audit: type=1326 audit(120.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b5ce28 code=0x7ffc0000 [ 120.500031][ T5620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.502480][ T5620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.334729][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.337426][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.259048][ T5679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 124.291025][ T5682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.294689][ T5682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.374340][ T5664] loop2: detected capacity change from 0 to 32768 [ 124.428911][ T5664] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 124.442193][ T5686] hub 6-0:1.0: USB hub found [ 124.444261][ T5686] hub 6-0:1.0: 8 ports detected [ 124.521393][ T4312] ocfs2: Unmounting device (7,2) on (node local) [ 126.545532][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.547423][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.632386][ T5712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 126.646867][ T5712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 126.673686][ T5713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'. [ 126.998830][ T5721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 128.112356][ T5744] netlink: 'syz.1.375': attribute type 2 has an invalid length. [ 128.117373][ T5744] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 128.119775][ T5744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.375'. [ 128.173241][ T5743] loop4: detected capacity change from 0 to 2048 [ 128.256496][ T5743] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.260485][ T5743] NILFS (loop4): mounting unchecked fs [ 128.352898][ T5743] NILFS (loop4): recovery complete [ 128.371311][ T5748] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.116252][ T5752] loop2: detected capacity change from 0 to 1024 [ 129.151042][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 129.165207][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 129.332776][ T4544] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.329466][ T5766] loop4: detected capacity change from 0 to 8 [ 131.699431][ T5752] loop2: detected capacity change from 0 to 32768 [ 131.713275][ T5752] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.378 (5752) [ 131.718566][ T5752] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.721471][ T5752] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 131.773317][ T5752] BTRFS info (device loop2): metadata ratio 2 [ 131.775053][ T5752] BTRFS info (device loop2): allowing degraded mounts [ 131.776906][ T5752] BTRFS info (device loop2): force zlib compression, level 3 [ 131.778852][ T5752] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.781476][ T5752] BTRFS info (device loop2): use zstd compression, level 3 [ 131.832773][ T5752] BTRFS info (device loop2): force clearing of disk cache [ 131.837803][ T5752] BTRFS info (device loop2): max_inline at 0 [ 131.839771][ T5752] BTRFS info (device loop2): using free space tree [ 131.971783][ T5804] usb usb8: usbfs: process 5804 (syz.1.392) did not claim interface 0 before use [ 132.277829][ T5817] loop4: detected capacity change from 0 to 2048 [ 132.304167][ T5817] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.311680][ T5817] NILFS (loop4): mounting unchecked fs [ 132.359617][ T5752] BTRFS error (device loop2): open_ctree failed: -22 [ 133.086072][ T5817] NILFS (loop4): recovery complete [ 133.139404][ T5825] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.949998][ T5852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.404'. [ 135.592011][ T78] block nbd0: Attempted send on invalid socket [ 135.594041][ T78] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 135.637520][ T78] block nbd0: Attempted send on invalid socket [ 135.639428][ T78] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 135.660000][ T5875] Mount JFS Failure: -5 [ 136.173898][ T5883] loop3: detected capacity change from 0 to 2048 [ 136.205312][ T5883] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.208051][ T5883] NILFS (loop3): mounting unchecked fs [ 136.237934][ T5883] NILFS (loop3): recovery complete [ 136.256686][ T5884] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.667292][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 137.667304][ T27] audit: type=1326 audit(137.640:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9855ce28 code=0x7fc00000 [ 138.023773][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 138.275406][ T27] audit: type=1326 audit(138.250:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9855ce28 code=0x7fc00000 [ 139.618245][ T5937] loop4: detected capacity change from 0 to 2048 [ 139.665412][ T5937] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 139.668287][ T5937] NILFS (loop4): mounting unchecked fs [ 139.875406][ T5937] NILFS (loop4): recovery complete [ 139.883675][ T5942] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.681601][ T5945] loop3: detected capacity change from 0 to 1024 [ 140.688038][ T5945] hfsplus: session requires an argument [ 140.689699][ T5945] hfsplus: unable to parse mount options [ 141.109815][ T5954] loop3: detected capacity change from 0 to 512 [ 141.129417][ T5954] EXT4-fs: Ignoring removed bh option [ 141.166377][ T5954] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 141.267417][ T5954] EXT4-fs (loop3): 1 truncate cleaned up [ 141.277651][ T5954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.506648][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 141.601599][ T5947] loop2: detected capacity change from 0 to 32768 [ 141.879732][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.436'. [ 142.518060][ T5964] loop4: detected capacity change from 0 to 2048 [ 142.551076][ T5947] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 142.551076][ T5947] [ 142.558240][ T5947] ERROR: (device loop2): remounting filesystem as read-only [ 142.560273][ T5947] ialloc: diAlloc returned -5! [ 142.633439][ T4317] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 143.810034][ T5989] loop3: detected capacity change from 0 to 2048 [ 143.875577][ T5989] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.878354][ T5989] NILFS (loop3): mounting unchecked fs [ 143.947368][ T5989] NILFS (loop3): recovery complete [ 143.952499][ T5997] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.998824][ T6018] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 147.288250][ T6009] loop1: detected capacity change from 0 to 32768 [ 147.291128][ T6009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.453 (6009) [ 147.299289][ T6009] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.302263][ T6009] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 147.423303][ T6009] BTRFS info (device loop1): metadata ratio 2 [ 147.426159][ T6009] BTRFS info (device loop1): allowing degraded mounts [ 147.476957][ T6009] BTRFS info (device loop1): force zlib compression, level 3 [ 147.647795][ T6009] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 147.845211][ T6009] BTRFS info (device loop1): use zstd compression, level 3 [ 147.929574][ T6009] BTRFS info (device loop1): doing ref verification [ 147.939455][ T6009] BTRFS info (device loop1): max_inline at 0 [ 147.944785][ T6009] BTRFS info (device loop1): using free space tree [ 148.109723][ T6009] BTRFS error (device loop1): open_ctree failed: -12 [ 148.246995][ T6023] loop2: detected capacity change from 0 to 32768 [ 148.261030][ T6023] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 148.271010][ T6023] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 148.325028][ T6063] loop0: detected capacity change from 0 to 64 [ 148.432974][ T6023] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 148.938530][ T4643] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 148.940755][ T4643] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 150.355080][ T4643] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1414ms [ 150.357304][ T4643] gfs2: fsid=syz:syz.0: jid=0: Done [ 150.358824][ T6023] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 150.373638][ T6023] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 150.464043][ T6085] loop3: detected capacity change from 0 to 4096 [ 150.467988][ T6085] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 150.476924][ T4299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4299) [ 150.538810][ T6085] ntfs3: loop3: Failed to load $Extend. [ 150.649273][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.658026][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.080087][ T6100] tmpfs: Bad value for 'mpol' [ 151.980009][ T6082] loop0: detected capacity change from 0 to 32768 [ 152.003297][ T6082] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 152.006031][ T6082] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 152.023301][ T6082] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 152.029883][ T4643] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 152.031918][ T4643] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 152.078671][ T4643] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 152.082943][ T6109] loop3: detected capacity change from 0 to 4096 [ 152.085181][ T4643] gfs2: fsid=syz:syz.0: jid=0: Done [ 152.086761][ T6082] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 152.204500][ T6109] ntfs3: loop3: no free space to extend mft [ 152.538622][ T6121] loop4: detected capacity change from 0 to 512 [ 152.562757][ T6121] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.486: casefold flag without casefold feature [ 152.601264][ T6121] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.486: couldn't read orphan inode 15 (err -117) [ 152.628883][ T6121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.741595][ T4319] EXT4-fs (loop4): unmounting filesystem. [ 152.989015][ T6118] loop3: detected capacity change from 0 to 32768 [ 152.992357][ T6118] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.484 (6118) [ 153.091016][ T6118] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.107900][ T6118] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 153.119895][ T6118] BTRFS info (device loop3): using free space tree [ 153.877069][ T6142] netlink: 'syz.1.492': attribute type 4 has an invalid length. [ 153.968200][ T6151] loop0: detected capacity change from 0 to 1024 [ 154.023415][ T6147] loop4: detected capacity change from 0 to 2048 [ 154.032839][ T5284] hfsplus: b-tree write err: -5, ino 4 [ 154.150062][ T6147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 154.880311][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.883019][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.920193][ T6147] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 154.921285][ T6177] loop0: detected capacity change from 0 to 256 [ 154.927459][ T6177] exfat: Unknown parameter 'zero_size_dir' [ 154.937392][ T6118] BTRFS info (device loop3): enabling ssd optimizations [ 154.959000][ T6147] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 210 with error 28 [ 154.973582][ T6147] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.973582][ T6147] [ 154.976331][ T6147] EXT4-fs (loop4): Total free blocks count 0 [ 154.978016][ T6147] EXT4-fs (loop4): Free/Dirty block details [ 154.979719][ T6147] EXT4-fs (loop4): free_blocks=2415919104 [ 154.990656][ T6147] EXT4-fs (loop4): dirty_blocks=224 [ 154.992314][ T6147] EXT4-fs (loop4): Block reservation details [ 155.001048][ T6147] EXT4-fs (loop4): i_reserved_data_blocks=14 [ 155.038596][ T6170] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 210 with max blocks 1 with error 28 [ 155.058832][ T4308] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.618612][ T6183] loop2: detected capacity change from 0 to 40427 [ 155.652979][ T6183] F2FS-fs (loop2): invalid crc value [ 155.688550][ T6183] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.721322][ T6183] F2FS-fs (loop2): Start checkpoint disabled! [ 156.543643][ T6183] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 156.568898][ T6183] syz.2.504: attempt to access beyond end of device [ 156.568898][ T6183] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 156.600783][ T6183] syz.2.504: attempt to access beyond end of device [ 156.600783][ T6183] loop2: rw=0, sector=77952, nr_sectors = 8 limit=40427 [ 156.662501][ T6207] loop4: detected capacity change from 0 to 256 [ 156.724983][ T4446] kworker/u4:8: attempt to access beyond end of device [ 156.724983][ T4446] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 156.725661][ T6209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3 [ 157.102715][ T6220] loop3: detected capacity change from 0 to 2048 [ 157.125145][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.131371][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.141503][ T6220] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.147933][ T6220] EXT4-fs: Ignoring removed nobh option [ 157.192470][ T6220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.211173][ T6220] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 157.287317][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 157.856623][ T6220] overlayfs: fs on './file0/../file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.188449][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 158.956837][ T6241] loop0: detected capacity change from 0 to 1024 [ 158.960928][ T6241] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 158.967568][ T6241] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 158.970594][ T6241] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 158.981221][ T6241] EXT4-fs error (device loop0): ext4_get_journal_inode:5735: inode #17: comm syz.0.523: iget: bad i_size value: 4398046511204 [ 159.046458][ T6241] EXT4-fs (loop0): no journal found [ 159.106392][ T6249] loop1: detected capacity change from 0 to 8 [ 159.108943][ T6249] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 159.118761][ T6249] cramfs: root is not a directory [ 159.329163][ T4544] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.630128][ T6264] loop2: detected capacity change from 0 to 2048 [ 161.701809][ T6264] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.671659][ T6285] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 162.683003][ T6285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.731406][ T6260] loop4: detected capacity change from 0 to 32768 [ 162.789424][ T6260] (syz.4.527,6260,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.793884][ T6260] (syz.4.527,6260,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.811312][ T6260] JBD2: Ignoring recovery information on journal [ 163.601950][ T6260] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 163.649391][ T6295] sctp: [Deprecated]: syz.0.538 (pid 6295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.649391][ T6295] Use struct sctp_sack_info instead [ 163.870838][ T4319] ocfs2: Unmounting device (7,4) on (node local) [ 164.733468][ T4309] Bluetooth: hci3: command 0x0406 tx timeout [ 164.736893][ T4309] Bluetooth: hci1: command 0x0406 tx timeout [ 165.163314][ T4316] Bluetooth: hci2: command 0x0406 tx timeout [ 165.214820][ T6305] loop2: detected capacity change from 0 to 2048 [ 165.272401][ T6305] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.388394][ T6305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.407781][ T6305] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 520 with error 28 [ 165.420529][ T6305] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.420529][ T6305] [ 165.423959][ T4317] Bluetooth: hci0: command 0x0406 tx timeout [ 165.448880][ T6305] EXT4-fs (loop2): Total free blocks count 0 [ 165.450907][ T6305] EXT4-fs (loop2): Free/Dirty block details [ 165.452479][ T6305] EXT4-fs (loop2): free_blocks=2415919104 [ 165.549084][ T6305] EXT4-fs (loop2): dirty_blocks=528 [ 165.550596][ T6305] EXT4-fs (loop2): Block reservation details [ 165.552289][ T6305] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 165.772733][ T6312] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 520 with max blocks 1 with error 28 [ 166.039431][ T6285] bond1 (unregistering): Released all slaves [ 166.109467][ T6318] Bluetooth: MGMT ver 1.22 [ 166.112335][ T6318] Bluetooth: hci0: service_discovery: too big uuid_count value 14336 [ 167.371889][ T6327] loop0: detected capacity change from 0 to 512 [ 168.764925][ T6327] EXT4-fs (loop0): Test dummy encryption mode enabled [ 168.767018][ T6327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.846329][ T6327] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.546: corrupted in-inode xattr [ 168.863127][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.554'. [ 168.877637][ T6327] EXT4-fs (loop0): 1 orphan inode deleted [ 168.895869][ T6327] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 170.057446][ T4307] EXT4-fs (loop0): unmounting filesystem. [ 170.108808][ T6365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.557'. [ 170.114802][ T6364] loop3: detected capacity change from 0 to 2048 [ 170.201049][ T6364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.581676][ T6373] sctp: [Deprecated]: syz.1.560 (pid 6373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.581676][ T6373] Use struct sctp_sack_info instead [ 170.852632][ T6364] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.888084][ T6364] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 582 with error 28 [ 170.949894][ T6364] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.949894][ T6364] [ 170.968098][ T6364] EXT4-fs (loop3): Total free blocks count 0 [ 170.978004][ T6364] EXT4-fs (loop3): Free/Dirty block details [ 170.979971][ T6364] EXT4-fs (loop3): free_blocks=2415919104 [ 171.013456][ T6364] EXT4-fs (loop3): dirty_blocks=592 [ 171.016446][ T6364] EXT4-fs (loop3): Block reservation details [ 171.036525][ T6364] EXT4-fs (loop3): i_reserved_data_blocks=37 [ 171.286829][ T6379] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 582 with max blocks 1 with error 28 [ 172.175094][ T6396] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 172.252854][ T6396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.269537][ T6400] loop0: detected capacity change from 0 to 16 [ 172.285878][ T6400] erofs: (device loop0): mounted with root inode @ nid 36. [ 173.838795][ T6419] loop0: detected capacity change from 0 to 1024 [ 173.966002][ T11] hfsplus: b-tree write err: -5, ino 4 [ 174.232342][ T6424] loop0: detected capacity change from 0 to 32768 [ 174.251800][ T6424] JBD2: Ignoring recovery information on journal [ 174.308082][ T6424] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.382776][ T4307] ocfs2: Unmounting device (7,0) on (node local) [ 174.635714][ T6398] bond1 (unregistering): Released all slaves [ 174.828206][ T6428] loop0: detected capacity change from 0 to 32768 [ 174.842802][ T6428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.575 (6428) [ 174.931303][ T6428] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.958597][ T6428] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 174.961847][ T6428] BTRFS info (device loop0): using free space tree [ 175.026873][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.029612][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.302502][ T6428] BTRFS info (device loop0): enabling ssd optimizations [ 175.428775][ T4307] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.998545][ T6473] loop0: detected capacity change from 0 to 64 [ 176.043052][ T6473] Unable to handle kernel paging request at virtual address dfff800000000008 [ 176.051253][ T6473] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 176.061388][ T6473] Mem abort info: [ 176.062473][ T6473] ESR = 0x0000000096000006 [ 176.069527][ T6473] EC = 0x25: DABT (current EL), IL = 32 bits [ 176.071250][ T6473] SET = 0, FnV = 0 [ 176.072468][ T6473] EA = 0, S1PTW = 0 [ 176.082598][ T6473] FSC = 0x06: level 2 translation fault [ 176.089510][ T6473] Data abort info: [ 176.091661][ T6473] ISV = 0, ISS = 0x00000006 [ 176.093039][ T6473] CM = 0, WnR = 0 [ 176.102282][ T6473] [dfff800000000008] address between user and kernel address ranges [ 176.113842][ T6473] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 176.115950][ T6473] Modules linked in: [ 176.116998][ T6473] CPU: 0 PID: 6473 Comm: syz.0.585 Not tainted 6.1.147-syzkaller #0 [ 176.119333][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.122070][ T6473] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 176.124419][ T6473] pc : hfs_find_init+0x6c/0x1c8 [ 176.125752][ T6473] lr : hfs_find_init+0x30/0x1c8 [ 176.127120][ T6473] sp : ffff800022b470b0 [ 176.128494][ T6473] x29: ffff800022b470b0 x28: ffff700004568e2c x27: 0000000000000000 [ 176.130690][ T6473] x26: ffff0000f6da0180 x25: 0000000000000008 x24: dfff800000000000 [ 176.132982][ T6473] x23: 0000000000000000 x22: ffff800022b47198 x21: 0000000000000040 [ 176.135228][ T6473] x20: ffff800022b47180 x19: 0000000000000000 x18: ffff800011aabce0 [ 176.137368][ T6473] x17: ffff8000181e7000 x16: ffff8000082ca1d0 x15: ffff800017cc7fc0 [ 176.139548][ T6473] x14: ffff0000d7400a98 x13: ffff0000d7400ac0 x12: 0000000000080000 [ 176.141782][ T6473] x11: 000000000002bbea x10: ffff800021b2c000 x9 : ffff800008f7dc0c [ 176.144091][ T6473] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 176.146288][ T6473] x5 : ffff80001850e068 x4 : 0000000000000000 x3 : 0000000000000030 [ 176.148592][ T6473] x2 : 0000000000000008 x1 : ffff800022b47180 x0 : ffff800022b47190 [ 176.150859][ T6473] Call trace: [ 176.151807][ T6473] hfs_find_init+0x6c/0x1c8 [ 176.153102][ T6473] hfs_get_block+0x3d4/0x9cc [ 176.154398][ T6473] block_read_full_folio+0x2e4/0x97c [ 176.155967][ T6473] hfs_read_folio+0x28/0x38 [ 176.157205][ T6473] filemap_read_folio+0x130/0x37c [ 176.158682][ T6473] do_read_cache_folio+0x24c/0x544 [ 176.160265][ T6473] read_cache_page+0x6c/0x184 [ 176.161589][ T6473] hfs_btree_open+0x404/0xfd4 [ 176.162933][ T6473] hfs_mdb_get+0xe78/0x19d0 [ 176.164161][ T6473] hfs_fill_super+0xc0c/0x1188 [ 176.165529][ T6473] mount_bdev+0x264/0x358 [ 176.166720][ T6473] hfs_mount+0x44/0x58 [ 176.167844][ T6473] legacy_get_tree+0xd4/0x16c [ 176.169171][ T6473] vfs_get_tree+0x90/0x274 [ 176.170409][ T6473] do_new_mount+0x228/0x810 [ 176.171664][ T6473] path_mount+0x5b4/0xe78 [ 176.172846][ T6473] __arm64_sys_mount+0x49c/0x584 [ 176.174251][ T6473] invoke_syscall+0x98/0x2bc [ 176.175529][ T6473] el0_svc_common+0x138/0x258 [ 176.176842][ T6473] do_el0_svc+0x58/0x13c [ 176.178032][ T6473] el0_svc+0x58/0x138 [ 176.179169][ T6473] el0t_64_sync_handler+0x84/0xf0 [ 176.180542][ T6473] el0t_64_sync+0x18c/0x190 [ 176.181814][ T6473] Code: 97e562ee 91010275 f90002df d343feb9 (38f86b28) [ 176.183845][ T6473] ---[ end trace 0000000000000000 ]--- [ 176.210201][ T6473] Kernel panic - not syncing: Oops: Fatal exception [ 176.212078][ T6473] SMP: stopping secondary CPUs [ 176.213475][ T6473] Kernel Offset: disabled [ 176.214654][ T6473] CPU features: 0x080000,02070084,26017203 [ 176.216312][ T6473] Memory Limit: none [ 176.240485][ T6473] Rebooting in 86400 seconds..