last executing test programs: 1m15.397116883s ago: executing program 3 (id=279): r0 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) 1m15.166869801s ago: executing program 3 (id=282): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0xda2, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x1ff, 0x1f9, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3, 0x1, 0x6}) close_range(r1, 0xffffffffffffffff, 0x0) 1m14.338522046s ago: executing program 3 (id=283): socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x40800) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x12, 0x4}, {0x2006, 0x3}}]}}, 0x11) 1m13.716406166s ago: executing program 3 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) acct(&(0x7f0000000240)='./file0\x00') mount(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2244840, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, 0x0) 1m13.715809946s ago: executing program 3 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40004) 1m12.778076236s ago: executing program 3 (id=296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) 1m12.455350416s ago: executing program 32 (id=296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) 6.581984562s ago: executing program 0 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 5.970829522s ago: executing program 2 (id=610): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fsopen(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x90001) syz_open_dev$vim2m(&(0x7f0000000040), 0xffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5.673549491s ago: executing program 4 (id=613): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='autogroup\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='+5', 0x2}], 0x1) 5.641660082s ago: executing program 4 (id=614): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x0, 0x52c, &(0x7f0000002dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x2) sendfile(r0, r0, 0x0, 0x1000000000007) 5.624664513s ago: executing program 0 (id=615): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) 5.553523405s ago: executing program 1 (id=616): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/fscaps', 0x101000, 0x40) 4.551659036s ago: executing program 0 (id=618): io_uring_setup(0x717c, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1, 0x103fc, 0x159}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0xa, 0x8000005, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xa0400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0xda2, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x1ff, 0x1f9, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x10001}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xb631, 0x5, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x80, 0x18}) 4.551443367s ago: executing program 1 (id=619): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_LK(r2, &(0x7f0000004280)={0x28, 0x0, 0x0, {{0x1, 0x3}}}, 0x28) 4.541944717s ago: executing program 2 (id=620): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_io_uring_setup(0x3d2, 0x0, &(0x7f00000002c0), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x0, 0x0, 0x3b4}]) 4.313887074s ago: executing program 5 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 4.158448379s ago: executing program 4 (id=622): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 3.906061497s ago: executing program 1 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) acct(&(0x7f0000000240)='./file0\x00') mount(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2244840, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, 0x0) 3.682184674s ago: executing program 5 (id=624): unshare(0x26020480) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x2b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003b00)={r0, 0xf3, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x8, 0x0, 0x0}}, 0x10) 3.630138476s ago: executing program 1 (id=625): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40040, 0x9c8d7dee35ed7df2) 3.629804486s ago: executing program 5 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, 0x0, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 3.611892456s ago: executing program 0 (id=627): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 3.426496842s ago: executing program 5 (id=628): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8e) mknodat$loop(r3, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) 3.374064314s ago: executing program 4 (id=629): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) 3.373412114s ago: executing program 1 (id=630): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/fscaps', 0x101000, 0x40) 3.16938619s ago: executing program 2 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x140, 0x24, 0xd0f, 0x1ffffe, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x5}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}]}}]}, 0x140}}, 0x24008004) 1.28330108s ago: executing program 5 (id=632): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x0, 0x52c, &(0x7f0000002dc0)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x2) sendfile(r0, r0, 0x0, 0x1000000000007) 1.28312712s ago: executing program 4 (id=633): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 1.202196522s ago: executing program 2 (id=634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.161060354s ago: executing program 2 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) acct(&(0x7f0000000240)='./file0\x00') mount(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x2244840, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, 0x0) 1.148294024s ago: executing program 4 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) unshare(0x4020400) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") 887.612442ms ago: executing program 2 (id=637): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa003, &(0x7f0000000740)={[{@journal_async_commit}, {@bh}, {@stripe={'stripe', 0x3d, 0xffffffffffffffff}}, {@lazytime}, {@nojournal_checksum}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'nogrpid'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@uid_eq}]}, 0x0, 0x62c, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x13) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8804) mount$9p_unix(&(0x7f0000000000)='\x00', 0x0, 0x0, 0x2000, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x0, 0x1, 0x3}, 0x10) write(r5, &(0x7f0000000000)='$\x00', 0x2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c", @ANYRES16, @ANYBLOB="000000000804040000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004041) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) io_uring_enter(0xffffffffffffffff, 0x1ab3, 0x68f6, 0x16, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, 0x0) io_uring_setup(0x1b7b, 0x0) 680.354939ms ago: executing program 1 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, 0x0, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 335.405869ms ago: executing program 0 (id=639): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 333.5621ms ago: executing program 5 (id=640): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x73}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3b}}}], 0x30}, 0x1400c0c0) 0s ago: executing program 0 (id=641): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_io_uring_setup(0x3d2, 0x0, &(0x7f00000002c0), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x0, 0x0, 0x3b4}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 48.539883][ T4175] cgroup: Unknown subsys name 'net' [ 48.667095][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.860395][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.486912][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.578851][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 51.616463][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.628201][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 51.637145][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.674384][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.681458][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.689913][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.704442][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.711494][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.719622][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.820578][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.829910][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.837521][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.845328][ T4199] device bridge_slave_0 entered promiscuous mode [ 51.860570][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.867732][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.875893][ T4198] device bridge_slave_0 entered promiscuous mode [ 51.887220][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.896512][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.903810][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.911506][ T4199] device bridge_slave_1 entered promiscuous mode [ 51.923821][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.930870][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.939492][ T4198] device bridge_slave_1 entered promiscuous mode [ 51.965614][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.972900][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.980480][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.017460][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.024704][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.033011][ T4190] device bridge_slave_0 entered promiscuous mode [ 52.040174][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.047625][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.055724][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.064681][ T4188] team0: Port device team_slave_0 added [ 52.078587][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.091297][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.100547][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.107846][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.115529][ T4190] device bridge_slave_1 entered promiscuous mode [ 52.135879][ T4188] team0: Port device team_slave_1 added [ 52.149192][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.160672][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.172062][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.182853][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.223720][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.234414][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.244723][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.251666][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.277938][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.291828][ T4198] team0: Port device team_slave_0 added [ 52.298114][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.305188][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.331341][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.372236][ T4198] team0: Port device team_slave_1 added [ 52.386277][ T4189] team0: Port device team_slave_0 added [ 52.394175][ T4199] team0: Port device team_slave_0 added [ 52.402312][ T4190] team0: Port device team_slave_0 added [ 52.423896][ T4189] team0: Port device team_slave_1 added [ 52.437591][ T4199] team0: Port device team_slave_1 added [ 52.443925][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.450859][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.476822][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.489536][ T4190] team0: Port device team_slave_1 added [ 52.522795][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.529409][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.544330][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.551277][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.578064][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.614577][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.621539][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.647658][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.663757][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.670703][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.696756][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.708627][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.715759][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.741852][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.753613][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.760537][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.786426][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.798077][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.805320][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.831604][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.858006][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.865042][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.891014][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.923763][ T4198] device hsr_slave_0 entered promiscuous mode [ 52.930733][ T4198] device hsr_slave_1 entered promiscuous mode [ 52.937831][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.945909][ T4198] Cannot create hsr debugfs directory [ 52.995179][ T4190] device hsr_slave_0 entered promiscuous mode [ 53.002058][ T4190] device hsr_slave_1 entered promiscuous mode [ 53.008529][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.016185][ T4190] Cannot create hsr debugfs directory [ 53.043362][ T4199] device hsr_slave_0 entered promiscuous mode [ 53.049965][ T4199] device hsr_slave_1 entered promiscuous mode [ 53.057021][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.064759][ T4199] Cannot create hsr debugfs directory [ 53.073963][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.080618][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.087332][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.094968][ T4189] Cannot create hsr debugfs directory [ 53.192516][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 53.192516][ T4201] Bluetooth: hci0: command 0x0409 tx timeout [ 53.206769][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 53.272270][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 53.287108][ T4201] Bluetooth: hci3: command 0x0409 tx timeout [ 53.399195][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.410076][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.425445][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.437477][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.464098][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.485245][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.493883][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.514193][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.553283][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.578187][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.587525][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.599002][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.662806][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.686823][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.700559][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.711201][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.744541][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.760468][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.769190][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.779036][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.788357][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.795570][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.804092][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.813108][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.821571][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.828680][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.853188][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.865244][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.874473][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.886701][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.903297][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.914993][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.931263][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.943910][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.955070][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.967172][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.976020][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.985953][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.994633][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.010205][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.028260][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.039901][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.052886][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.063121][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.070846][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.079570][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.087935][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.097037][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.105770][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.119669][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.140672][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.188070][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.197513][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.209318][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.216425][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.225965][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.234772][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.243444][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.250484][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.259791][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.282496][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.290269][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.299986][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.309877][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.320105][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.351047][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.361075][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.372065][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.380481][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.390038][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.398507][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.407151][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.415567][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.452929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.461266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.470056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.482585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.490864][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.497928][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.505605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.514915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.523470][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.530540][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.538372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.548722][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.573393][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.580434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.588652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.598703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.607342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.616027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.624153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.631803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.648722][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.670165][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.677909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.694725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.711601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.720417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.735233][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.757235][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.766549][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.783308][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.791944][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.800295][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.807370][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.818682][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.827071][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.840790][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.849040][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.858083][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.874101][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.892768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.901924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.910258][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.917328][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.927576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.935513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.945872][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.965717][ T4198] device veth0_vlan entered promiscuous mode [ 54.973947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.982534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.991428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.999532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.008319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.016395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.024172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.038470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.047598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.056612][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.063693][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.079391][ T4198] device veth1_vlan entered promiscuous mode [ 55.109096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.117542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.132248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.140806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.150281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.159304][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.166447][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.174700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.184007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.193404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.203020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.211406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.224628][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.268414][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.276391][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 55.276714][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 55.289038][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 55.297240][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.308863][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.317720][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.327134][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.335991][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.344798][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.352225][ T4244] Bluetooth: hci4: command 0x041b tx timeout [ 55.353090][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 55.359695][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.373189][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.381381][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.392407][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.400693][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.409456][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.417639][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.426111][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.436974][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.448571][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.461232][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.470353][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.482480][ T4198] device veth0_macvtap entered promiscuous mode [ 55.492660][ T4198] device veth1_macvtap entered promiscuous mode [ 55.517346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.530429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.539788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.548992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.578117][ T4189] device veth0_vlan entered promiscuous mode [ 55.591298][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.605520][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.616164][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.628002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.635719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.644019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.652928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.661087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.669925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.724860][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.763415][ T4189] device veth1_vlan entered promiscuous mode [ 55.771658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.780337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.788259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.797696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.815023][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.824284][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.833598][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.843278][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.867049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.875962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.906329][ T4188] device veth0_vlan entered promiscuous mode [ 55.928039][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.952539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.960821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.974353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.984289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.014684][ T4188] device veth1_vlan entered promiscuous mode [ 56.026081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.035207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.044051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.052655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.060961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.078354][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.092280][ T4189] device veth0_macvtap entered promiscuous mode [ 56.107201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.119175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.127907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.136796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.152737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.161547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.191460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.203864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.214161][ T4189] device veth1_macvtap entered promiscuous mode [ 56.226387][ T4188] device veth0_macvtap entered promiscuous mode [ 56.257730][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.271603][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.282876][ T4188] device veth1_macvtap entered promiscuous mode [ 56.306454][ T4190] device veth0_vlan entered promiscuous mode [ 56.317866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.328512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.337913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.347635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.355799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.364393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.373157][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.384255][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.395978][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.406559][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.417164][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.429599][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.445152][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.456232][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.466387][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.479056][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.490157][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.500191][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.510944][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.521567][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.532717][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.544271][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.552064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.560498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.569629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.578649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.587798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.596618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.605312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.614306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.623280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.632312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.655268][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.664901][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.673945][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.684809][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.697876][ T4190] device veth1_vlan entered promiscuous mode [ 56.708054][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.718007][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.726783][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.735953][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.751247][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.767384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.777017][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.777840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.814974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.822819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.835169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.864733][ T4190] device veth0_macvtap entered promiscuous mode [ 56.923605][ T4190] device veth1_macvtap entered promiscuous mode [ 56.936686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.945031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.980753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.996711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.008267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.019641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.046995][ T4199] device veth0_vlan entered promiscuous mode [ 57.100365][ T4199] device veth1_vlan entered promiscuous mode [ 57.144984][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.157364][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.167563][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.181141][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.195579][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.210030][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.225131][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.238928][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.257963][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.266779][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.274717][ T4199] device veth0_macvtap entered promiscuous mode [ 57.277934][ T4199] device veth1_macvtap entered promiscuous mode [ 57.291117][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.305186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.314253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.324006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.344139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.358254][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 57.365017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.377876][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 57.384387][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 57.391145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.414162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.428345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.429348][ T4283] Zero length message leads to an empty skb [ 57.437124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.451324][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 57.463172][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 57.469885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.530934][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.551908][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.567195][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.577917][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.587818][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.599334][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.610712][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.629519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.632094][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.641333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.656112][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.658388][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.684933][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.698462][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.714967][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.725895][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.736562][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.746563][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.758061][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.769717][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.782645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.791008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.800306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.812509][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.822242][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.830942][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.840295][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.859463][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.909683][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.937093][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.947799][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.958681][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.969239][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.979249][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.990823][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.001577][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.012069][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.023363][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.030690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.041091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.083904][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.117984][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.139887][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.148953][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.223052][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.248449][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.278009][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.286573][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.338153][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.347179][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.358939][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.372522][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.380239][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.562722][ T4193] Bluetooth: Wrong link type (-22) [ 59.817308][ T4306] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET) [ 60.101708][ C0] sched: RT throttling activated [ 60.108494][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 60.125155][ T4261] Bluetooth: hci1: command 0x0419 tx timeout [ 60.132138][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 60.138482][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 60.214583][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 60.538106][ T4314] loop3: detected capacity change from 0 to 128 [ 61.540357][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.951490][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.000264][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.051167][ T1460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.087177][ T1460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.798612][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.851204][ T4329] loop1: detected capacity change from 0 to 256 [ 62.879851][ T4314] FAT-fs (loop3): bogus number of reserved sectors [ 62.895007][ T4314] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 62.941138][ T4331] loop0: detected capacity change from 0 to 256 [ 62.947530][ T4314] FAT-fs (loop3): Can't find a valid FAT filesystem [ 63.023106][ T4329] ======================================================= [ 63.023106][ T4329] WARNING: The mand mount option has been deprecated and [ 63.023106][ T4329] and is ignored by this kernel. Remove the mand [ 63.023106][ T4329] option from the mount to silence this warning. [ 63.023106][ T4329] ======================================================= [ 63.168732][ T4331] FAT-fs (loop0): Directory bread(block 64) failed [ 63.170516][ T4338] loop2: detected capacity change from 0 to 128 [ 63.179780][ T4331] FAT-fs (loop0): Directory bread(block 65) failed [ 63.189499][ T4331] FAT-fs (loop0): Directory bread(block 66) failed [ 63.235942][ T4331] FAT-fs (loop0): Directory bread(block 67) failed [ 63.272632][ T4331] FAT-fs (loop0): Directory bread(block 68) failed [ 63.281540][ T4331] FAT-fs (loop0): Directory bread(block 69) failed [ 63.305630][ T4331] FAT-fs (loop0): Directory bread(block 70) failed [ 63.320631][ T4331] FAT-fs (loop0): Directory bread(block 71) failed [ 63.335909][ T4331] FAT-fs (loop0): Directory bread(block 72) failed [ 63.352749][ T4331] FAT-fs (loop0): Directory bread(block 73) failed [ 63.991233][ T4338] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.019026][ T4347] loop4: detected capacity change from 0 to 1024 [ 64.067686][ T4338] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.116150][ T4341] loop1: detected capacity change from 0 to 8192 [ 64.187622][ T4338] fscrypt (loop2, inode 12): Reserved bits set in encryption policy [ 64.192328][ T144] attempt to access beyond end of device [ 64.192328][ T144] loop0: rw=1, want=1228, limit=256 [ 64.197248][ T4338] syz.2.21 (pid 4338) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 64.460001][ T4347] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 64.502982][ T4341] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 64.590776][ T4341] REISERFS (device loop1): using ordered data mode [ 64.697226][ T4341] reiserfs: using flush barriers [ 64.719817][ T4347] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.843332][ T4353] block nbd3: NBD_DISCONNECT [ 64.848324][ T4353] block nbd3: Send disconnect failed -32 [ 64.854244][ T4353] block nbd3: Disconnected due to user request. [ 64.860634][ T4353] block nbd3: shutting down sockets [ 64.883312][ T4341] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.924999][ T4347] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.23: lblock 0 mapped to illegal pblock 0 (length 6) [ 64.949976][ T4341] REISERFS (device loop1): checking transaction log (loop1) [ 64.962945][ T4341] REISERFS (device loop1): Using r5 hash to sort names [ 64.971393][ T4341] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 64.996516][ T4347] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 65.009441][ T4347] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.009441][ T4347] [ 65.111418][ T4214] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 65.161481][ T4362] loop0: detected capacity change from 0 to 256 [ 65.421861][ T4214] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 65.720801][ T25] audit: type=1800 audit(1780641832.577:2): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 66.033486][ T4374] device syzkaller0 entered promiscuous mode [ 66.037887][ T4362] FAT-fs (loop0): Directory bread(block 64) failed [ 66.049571][ T4214] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.049571][ T4214] [ 66.061574][ T4362] FAT-fs (loop0): Directory bread(block 65) failed [ 66.077049][ T4362] FAT-fs (loop0): Directory bread(block 66) failed [ 66.113835][ T4362] FAT-fs (loop0): Directory bread(block 67) failed [ 66.173791][ T4362] FAT-fs (loop0): Directory bread(block 68) failed [ 66.206506][ T4362] FAT-fs (loop0): Directory bread(block 69) failed [ 66.247220][ T4362] FAT-fs (loop0): Directory bread(block 70) failed [ 66.291907][ T4362] FAT-fs (loop0): Directory bread(block 71) failed [ 66.319777][ T4362] FAT-fs (loop0): Directory bread(block 72) failed [ 66.336709][ T4362] FAT-fs (loop0): Directory bread(block 73) failed [ 67.140247][ T4389] loop2: detected capacity change from 0 to 512 [ 67.173592][ T4389] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.185713][ T4389] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.238104][ T4389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.387472][ T4389] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.33: Invalid block bitmap block 0 in block_group 0 [ 67.497407][ T4389] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 67.526952][ T4389] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.33: attempt to clear invalid blocks 983261 len 1 [ 68.178975][ T4389] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.33: Invalid inode table block 0 in block_group 0 [ 68.240364][ T4389] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 68.283711][ T4389] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 68.317155][ T4389] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.33: Invalid inode table block 0 in block_group 0 [ 68.346007][ T4389] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 68.517289][ T4389] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.33: mark_inode_dirty error [ 68.666938][ T4389] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 68.830254][ T4389] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.33: Invalid inode table block 0 in block_group 0 [ 69.527816][ T4389] EXT4-fs (loop2): 1 truncate cleaned up [ 69.534287][ T4389] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 69.904832][ T146] Bluetooth: hci5: sending frame failed (-49) [ 70.796806][ T4427] loop4: detected capacity change from 0 to 512 [ 70.857253][ T4427] EXT4-fs (loop4): #blocks per group too big: 466944 [ 70.968096][ T4431] loop1: detected capacity change from 0 to 512 [ 71.047628][ T4431] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 71.166394][ T4440] loop0: detected capacity change from 0 to 256 [ 71.202883][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.209848][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.308048][ T4447] loop2: detected capacity change from 0 to 1024 [ 71.346372][ T4447] EXT4-fs (loop2): Ignoring removed bh option [ 71.440160][ T4447] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,dioread_lock,debug_want_extra_isize=0x0000000000000008,usrquota,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,errors=continue,bh,nogrpid,. Quota mode: writeback. [ 71.615125][ T4447] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.911941][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 71.912217][ T4466] tmpfs: Unknown parameter 'usrquota' [ 71.920808][ T146] Bluetooth: hci5: sending frame failed (-49) [ 71.971378][ T4465] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 72.039960][ T4474] loop2: detected capacity change from 0 to 256 [ 72.050558][ T4475] netlink: 'syz.1.62': attribute type 3 has an invalid length. [ 72.475335][ T4474] FAT-fs (loop2): Directory bread(block 64) failed [ 72.568528][ T4474] FAT-fs (loop2): Directory bread(block 65) failed [ 72.712618][ T4474] FAT-fs (loop2): Directory bread(block 66) failed [ 72.830284][ T4474] FAT-fs (loop2): Directory bread(block 67) failed [ 72.961508][ T4474] FAT-fs (loop2): Directory bread(block 68) failed [ 72.984016][ T4474] FAT-fs (loop2): Directory bread(block 69) failed [ 72.990636][ T4474] FAT-fs (loop2): Directory bread(block 70) failed [ 73.061867][ T4474] FAT-fs (loop2): Directory bread(block 71) failed [ 73.099141][ T4474] FAT-fs (loop2): Directory bread(block 72) failed [ 73.116067][ T4474] FAT-fs (loop2): Directory bread(block 73) failed [ 74.108195][ T25] audit: type=1326 audit(1780641840.577:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 74.132124][ T4307] Bluetooth: hci5: command 0x1001 tx timeout [ 74.138594][ T146] Bluetooth: hci5: sending frame failed (-49) [ 74.622173][ T25] audit: type=1326 audit(1780641840.577:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 74.701920][ T25] audit: type=1326 audit(1780641840.587:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 74.737942][ T4490] loop0: detected capacity change from 0 to 1024 [ 74.798967][ T4490] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.826978][ T25] audit: type=1326 audit(1780641840.637:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 74.858300][ T4490] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.929016][ T4490] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.68: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.951267][ T25] audit: type=1326 audit(1780641840.637:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 75.010339][ T4490] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 75.047334][ T4490] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.047334][ T4490] [ 75.061408][ T25] audit: type=1326 audit(1780641840.657:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 75.106207][ T25] audit: type=1326 audit(1780641840.657:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 75.130160][ T25] audit: type=1326 audit(1780641840.657:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 75.168043][ T25] audit: type=1326 audit(1780641840.657:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 75.209628][ T25] audit: type=1326 audit(1780641840.677:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.63" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28328d2e59 code=0x7ffc0000 [ 76.460175][ T4516] loop1: detected capacity change from 0 to 512 [ 76.519627][ T4516] EXT4-fs (loop1): Ignoring removed bh option [ 76.580547][ T4516] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 76.632269][ T4230] Bluetooth: hci5: command 0x1009 tx timeout [ 76.687455][ T4516] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.814578][ T4515] syz.1.77 (4515) used greatest stack depth: 21112 bytes left [ 77.076955][ T4530] loop0: detected capacity change from 0 to 128 [ 77.109022][ T1111] cfg80211: failed to load regulatory.db [ 77.339468][ T4536] capability: warning: `syz.1.80' uses 32-bit capabilities (legacy support in use) [ 77.518231][ T4538] loop1: detected capacity change from 0 to 512 [ 77.642809][ T4538] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: comm syz.1.84: inode #2147418112: comm syz.1.84: iget: illegal inode # [ 77.742567][ T4538] EXT4-fs (loop1): no journal found [ 77.747810][ T4538] EXT4-fs (loop1): can't get journal size [ 77.784577][ T4545] loop4: detected capacity change from 0 to 8192 [ 78.159361][ T4545] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 78.226005][ T4538] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 78.394274][ T4545] REISERFS (device loop4): using ordered data mode [ 78.447993][ T4545] reiserfs: using flush barriers [ 78.538151][ T4545] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.558318][ T4538] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 78.592277][ T4545] REISERFS (device loop4): checking transaction log (loop4) [ 78.592791][ T4538] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 78.641663][ T4557] loop2: detected capacity change from 0 to 512 [ 78.653056][ T4545] REISERFS (device loop4): Using r5 hash to sort names [ 78.707609][ T4545] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 78.727939][ T4538] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 78.828272][ T4557] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.90: invalid indirect mapped block 4294967295 (level 1) [ 78.862680][ T4538] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.84: Invalid inode bitmap blk 4 in block_group 0 [ 78.947402][ T4557] EXT4-fs (loop2): Remounting filesystem read-only [ 78.954189][ T4538] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 78.969787][ T4557] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.90: invalid indirect mapped block 4294967295 (level 1) [ 79.011921][ T4557] EXT4-fs (loop2): Remounting filesystem read-only [ 79.019424][ T4557] EXT4-fs (loop2): 2 truncates cleaned up [ 79.038766][ T4557] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 79.344158][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 79.344264][ T25] audit: type=1800 audit(1780641846.247:20): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.86" name="file1" dev="loop4" ino=3 res=0 errno=0 [ 80.026152][ T4595] vivid-001: disconnect [ 80.041487][ T4593] vivid-001: reconnect [ 80.067221][ T4600] loop2: detected capacity change from 0 to 128 [ 80.148310][ T4600] EXT4-fs (loop2): Test dummy encryption mode enabled [ 80.350766][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 80.413619][ T4600] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.424881][ T4641] loop4: detected capacity change from 0 to 2048 [ 81.502743][ T4641] loop4: AHDI p3 [ 81.665927][ T4663] tipc: Started in network mode [ 81.671363][ T4663] tipc: Node identity 4246, cluster identity 4711 [ 81.681854][ T4663] tipc: Node number set to 16966 [ 81.695231][ T4666] loop3: detected capacity change from 0 to 128 [ 81.824052][ T4666] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.931882][ T4666] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.005014][ T4666] EXT4-fs (loop3): shut down requested (1) [ 82.144270][ T4683] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 82.997121][ T4694] loop2: detected capacity change from 0 to 128 [ 83.267054][ T4694] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: none. [ 83.378809][ T4703] loop0: detected capacity change from 0 to 8192 [ 83.430702][ T4703] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 83.440406][ T4703] REISERFS (device loop0): using ordered data mode [ 83.447074][ T4703] reiserfs: using flush barriers [ 83.459866][ T4703] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.477631][ T4703] REISERFS (device loop0): checking transaction log (loop0) [ 83.490720][ T4703] REISERFS (device loop0): Using r5 hash to sort names [ 83.499980][ T4703] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 83.558462][ T4694] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.156684][ T4710] loop4: detected capacity change from 0 to 512 [ 84.165306][ T4708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.309961][ T4710] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.418601][ T4710] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 84.541601][ T4710] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 84.799245][ T4728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.850157][ T4710] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.125: attempt to clear invalid blocks 2 len 1 [ 85.144382][ T4710] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.125: invalid indirect mapped block 1819239214 (level 0) [ 85.350983][ T4710] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.125: invalid indirect mapped block 1819239214 (level 1) [ 85.400028][ T4710] EXT4-fs (loop4): 1 truncate cleaned up [ 85.405845][ T4710] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 85.524444][ T4710] EXT4-fs (loop4): Ignoring removed oldalloc option [ 85.561197][ T4710] EXT4-fs (loop4): user quota file already specified [ 86.916954][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 87.675519][ T4767] loop2: detected capacity change from 0 to 8 [ 88.709385][ T4806] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.045311][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 90.200004][ T4854] syz.0.178 (4854) used greatest stack depth: 20792 bytes left [ 91.335795][ T4193] Bluetooth: Wrong link type (-71) [ 91.843321][ T4880] loop1: detected capacity change from 0 to 2048 [ 91.853551][ T4876] batman_adv: batadv0: Adding interface: dummy0 [ 91.860190][ T4876] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.917404][ T4888] loop2: detected capacity change from 0 to 512 [ 91.960175][ T4876] batman_adv: batadv0: Interface activated: dummy0 [ 91.993854][ T4888] EXT4-fs (loop2): Unrecognized mount option "context=user_u" or missing value [ 92.004136][ T4883] batadv0: mtu less than device minimum [ 92.012301][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.024999][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.037494][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.050016][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.062140][ T4880] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,max_dir_size_kb=0x000000000000f2a5,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none. [ 92.062399][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.091187][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.103550][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.115895][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.122883][ T4876] loop4: detected capacity change from 0 to 512 [ 92.128266][ T4883] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.589598][ T4876] EXT4-fs (loop4): inline encryption not supported [ 92.818278][ T4876] EXT4-fs (loop4): inline encryption not supported [ 93.065397][ T4888] fuse: Bad value for 'fd' [ 93.081830][ T4876] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.356710][ T4876] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 93.503729][ T4912] 9pnet: p9_fd_create_unix (4912): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.586180][ T4876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.184: bg 0: block 248: padding at end of block bitmap is not set [ 93.708163][ T4915] loop1: detected capacity change from 0 to 256 [ 94.126275][ T4876] Quota error (device loop4): write_blk: dquota write failed [ 94.139107][ T4876] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 94.172068][ T4876] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.184: Failed to acquire dquot type 1 [ 94.221906][ T4923] netlink: 'syz.0.197': attribute type 12 has an invalid length. [ 94.251768][ T4923] netlink: 'syz.0.197': attribute type 29 has an invalid length. [ 94.259511][ T4923] netlink: 148 bytes leftover after parsing attributes in process `syz.0.197'. [ 94.268156][ T4876] EXT4-fs (loop4): 1 truncate cleaned up [ 94.280232][ T4876] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,inlinecrypt,bsddf,,errors=continue. Quota mode: writeback. [ 94.311907][ T4924] netlink: 'syz.0.197': attribute type 12 has an invalid length. [ 94.331905][ T4924] netlink: 'syz.0.197': attribute type 29 has an invalid length. [ 94.339658][ T4924] netlink: 148 bytes leftover after parsing attributes in process `syz.0.197'. [ 94.359888][ T4876] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 94.393054][ T4876] syz.4.184 (4876) used greatest stack depth: 20720 bytes left [ 94.439571][ T4926] loop0: detected capacity change from 0 to 256 [ 94.895897][ T4940] loop3: detected capacity change from 0 to 512 [ 94.970664][ T4940] FAT-fs (loop3): Directory bread(block 199916) failed [ 95.061816][ T4940] FAT-fs (loop3): Directory bread(block 199917) failed [ 95.068717][ T4940] FAT-fs (loop3): Directory bread(block 199918) failed [ 95.460523][ T4940] FAT-fs (loop3): Directory bread(block 199919) failed [ 95.851467][ T4940] FAT-fs (loop3): Directory bread(block 199920) failed [ 95.881871][ T4940] FAT-fs (loop3): Directory bread(block 199921) failed [ 95.888854][ T4940] FAT-fs (loop3): Directory bread(block 199922) failed [ 96.042707][ T4940] FAT-fs (loop3): Directory bread(block 199923) failed [ 96.070863][ T4940] FAT-fs (loop3): FAT read failed (blocknr 2080) [ 96.574347][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 98.440120][ T4991] loop0: detected capacity change from 0 to 128 [ 98.589060][ T4991] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.659610][ T4991] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 98.728937][ T4991] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.052401][ T4991] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 99.786896][ T5027] loop3: detected capacity change from 0 to 512 [ 99.909900][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.931437][ T5027] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.120773][ T5041] capability: warning: `syz.2.232' uses deprecated v2 capabilities in a way that may be insecure [ 100.914503][ T5053] loop4: detected capacity change from 0 to 256 [ 101.264213][ T5077] loop2: detected capacity change from 0 to 512 [ 101.322903][ T5083] loop3: detected capacity change from 0 to 1024 [ 101.329987][ T5085] loop0: detected capacity change from 0 to 256 [ 101.330735][ T5082] kernel read not supported for file /file0 (pid: 5082 comm: syz.1.249) [ 101.359722][ T25] audit: type=1800 audit(1780641868.267:21): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.249" name="file0" dev="mqueue" ino=34347 res=0 errno=0 [ 101.390861][ T5077] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.245: iget: bad i_size value: 38620345925642 [ 101.409277][ T5077] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.245: couldn't read orphan inode 15 (err -117) [ 101.424117][ T5077] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.508482][ T5083] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 101.526675][ T5090] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.245: bg 0: block 5: invalid block bitmap [ 101.549766][ T5083] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 101.571821][ T5083] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.250: Failed to acquire dquot type 0 [ 101.819800][ T5095] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 101.829341][ T5095] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 101.838882][ T5095] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 101.850869][ T5095] syz.4.247 (5095) used greatest stack depth: 17752 bytes left [ 101.873112][ T25] audit: type=1800 audit(1780641868.727:22): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.247" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 101.912830][ T5083] EXT4-fs (loop3): 1 truncate cleaned up [ 101.940738][ T5083] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.953573][ T5090] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 102.057796][ T5090] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.057796][ T5090] [ 102.125763][ T5090] EXT4-fs (loop2): Total free blocks count 0 [ 102.160228][ T5090] EXT4-fs (loop2): Free/Dirty block details [ 102.196911][ T5090] EXT4-fs (loop2): free_blocks=0 [ 102.227273][ T5090] EXT4-fs (loop2): dirty_blocks=680 [ 102.269807][ T5090] EXT4-fs (loop2): Block reservation details [ 102.292737][ T5090] EXT4-fs (loop2): i_reserved_data_blocks=680 [ 102.356458][ T4298] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 672 with error 28 [ 102.395092][ T5100] loop0: detected capacity change from 0 to 8192 [ 102.412515][ T4298] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.412515][ T4298] [ 103.246354][ T5120] kernel read not supported for file /file0 (pid: 5120 comm: syz.4.261) [ 103.264726][ T5122] loop1: detected capacity change from 0 to 512 [ 103.304616][ T25] audit: type=1800 audit(1780641870.177:23): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.261" name="file0" dev="mqueue" ino=35209 res=0 errno=0 [ 103.419049][ T5122] EXT4-fs (loop1): Ignoring removed oldalloc option [ 103.431871][ T5122] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.194024][ T5122] EXT4-fs (loop1): 1 truncate cleaned up [ 104.199703][ T5122] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 104.454359][ T5140] loop2: detected capacity change from 0 to 512 [ 104.539896][ T5140] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.268: inode has both inline data and extents flags [ 104.565440][ T5140] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.268: couldn't read orphan inode 15 (err -117) [ 104.578168][ T5140] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 104.672628][ T5147] netlink: 'syz.1.270': attribute type 4 has an invalid length. [ 104.943625][ T5153] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 106.256081][ T5166] loop2: detected capacity change from 0 to 256 [ 106.296564][ T5171] kernel read not supported for file /file0 (pid: 5171 comm: syz.0.277) [ 106.320305][ T25] audit: type=1800 audit(1780641873.227:24): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.277" name="file0" dev="mqueue" ino=35262 res=0 errno=0 [ 106.350511][ T5166] FAT-fs (loop2): Directory bread(block 1285) failed [ 106.381928][ T5166] FAT-fs (loop2): Directory bread(block 1286) failed [ 106.422901][ T5166] FAT-fs (loop2): Directory bread(block 1287) failed [ 106.430090][ T5166] FAT-fs (loop2): Directory bread(block 1288) failed [ 106.485643][ T5166] FAT-fs (loop2): Directory bread(block 1285) failed [ 106.509115][ T5166] FAT-fs (loop2): Directory bread(block 1286) failed [ 106.525586][ T5166] FAT-fs (loop2): Directory bread(block 1287) failed [ 106.538919][ T5166] FAT-fs (loop2): Directory bread(block 1288) failed [ 106.546556][ T5178] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 106.558914][ T5166] FAT-fs (loop2): Directory bread(block 1285) failed [ 107.651417][ T5188] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.957663][ T5195] loop2: detected capacity change from 0 to 2048 [ 108.049037][ T5195] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 108.136184][ T5195] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.287: inline data xattr refers to an external xattr inode [ 108.548834][ T4232] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 108.561174][ T4232] Bluetooth: hci3: Injecting HCI hardware error event [ 108.569018][ T4193] Bluetooth: hci3: hardware error 0x00 [ 108.770348][ T5208] loop2: detected capacity change from 0 to 1024 [ 108.897040][ T5210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.294'. [ 108.935561][ T5208] EXT4-fs (loop2): Ignoring removed bh option [ 108.979176][ T5208] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000002,bh,init_itable,. Quota mode: none. [ 109.068654][ T4298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.131364][ T5208] overlayfs: conflicting lowerdir path [ 109.148836][ T4298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.275313][ T4298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.380676][ T4298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.628074][ T5248] loop1: detected capacity change from 0 to 1024 [ 110.831499][ T5248] EXT4-fs (loop1): Ignoring removed orlov option [ 111.010116][ T5248] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 111.643039][ T5248] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.305: unexpected EA_INODE flag [ 111.690687][ T5265] netlink: 76 bytes leftover after parsing attributes in process `syz.2.310'. [ 111.750936][ T5268] loop0: detected capacity change from 0 to 512 [ 111.792774][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 111.890812][ T5268] EXT4-fs (loop0): Mount option "journal_path=./file0" incompatible with ext2 [ 112.157808][ T5292] loop0: detected capacity change from 0 to 256 [ 112.230981][ T5292] FAT-fs (loop0): Directory bread(block 64) failed [ 112.472938][ T4684] Bluetooth: hci0: command 0x0409 tx timeout [ 112.914786][ T5292] FAT-fs (loop0): Directory bread(block 65) failed [ 112.921412][ T5292] FAT-fs (loop0): Directory bread(block 66) failed [ 112.948750][ T5292] FAT-fs (loop0): Directory bread(block 67) failed [ 112.985787][ T5292] FAT-fs (loop0): Directory bread(block 68) failed [ 112.992472][ T5292] FAT-fs (loop0): Directory bread(block 69) failed [ 112.999232][ T5292] FAT-fs (loop0): Directory bread(block 70) failed [ 113.006250][ T5292] FAT-fs (loop0): Directory bread(block 71) failed [ 113.014723][ T5292] FAT-fs (loop0): Directory bread(block 72) failed [ 113.016945][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 113.021255][ T5292] FAT-fs (loop0): Directory bread(block 73) failed [ 113.116645][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 113.149610][ T5307] loop4: detected capacity change from 0 to 512 [ 113.181638][ T5307] EXT4-fs (loop4): 1 truncate cleaned up [ 113.192207][ T5307] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 113.254920][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.262909][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.271145][ T5241] device bridge_slave_0 entered promiscuous mode [ 113.344134][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.361163][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.371866][ T5241] device bridge_slave_1 entered promiscuous mode [ 113.426100][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.473774][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.488138][ T5316] loop0: detected capacity change from 0 to 512 [ 113.527095][ T5241] team0: Port device team_slave_0 added [ 113.548156][ T5241] team0: Port device team_slave_1 added [ 113.631654][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.638755][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.668626][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.683592][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.694936][ T5316] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.698434][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.721785][ T5316] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.789634][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.797161][ T5316] Quota error (device loop0): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 113.828721][ T5316] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 113.861973][ T5316] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.323: Failed to acquire dquot type 0 [ 113.895318][ T5241] device hsr_slave_0 entered promiscuous mode [ 113.939201][ T5241] device hsr_slave_1 entered promiscuous mode [ 113.960581][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.998493][ T5241] Cannot create hsr debugfs directory [ 114.100398][ T5335] input: syz1 as /devices/virtual/input/input6 [ 114.173454][ T4298] device hsr_slave_0 left promiscuous mode [ 114.217981][ T4298] device hsr_slave_1 left promiscuous mode [ 114.239167][ T4298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.252028][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.270148][ T4298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.316266][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.331592][ T4298] device bridge_slave_1 left promiscuous mode [ 114.351952][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.375631][ T4298] device bridge_slave_0 left promiscuous mode [ 114.398039][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.453697][ T4298] device veth1_macvtap left promiscuous mode [ 114.460230][ T4298] device veth0_macvtap left promiscuous mode [ 114.467224][ T4298] device veth1_vlan left promiscuous mode [ 114.494035][ T4298] device veth0_vlan left promiscuous mode [ 114.621263][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 115.082214][ T5372] loop4: detected capacity change from 0 to 512 [ 115.188818][ T4298] team0 (unregistering): Port device team_slave_1 removed [ 115.207110][ T5372] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 115.230788][ T5372] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.249786][ T4298] team0 (unregistering): Port device team_slave_0 removed [ 115.299619][ T4298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.337039][ T5381] xt_hashlimit: size too large, truncated to 1048576 [ 115.372885][ T4298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.413747][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 115.450799][ T5384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.340'. [ 115.558719][ T4298] bond0 (unregistering): Released all slaves [ 115.693108][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 115.852092][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.863550][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 115.873272][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.880781][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.927929][ T5391] net_ratelimit: 10 callbacks suppressed [ 115.927944][ T5391] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.013415][ T5396] loop1: detected capacity change from 0 to 1024 [ 116.134008][ T5396] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.344: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.157858][ T5396] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 116.171845][ T5396] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.344: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.186703][ T5396] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 116.201970][ T5396] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.344: Failed to acquire dquot type 0 [ 116.226380][ T5241] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.259087][ T5241] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.298812][ T5241] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.310702][ T5396] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 116.389490][ T5396] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.344: mark_inode_dirty error [ 116.403601][ T5241] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.412076][ T5396] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 116.465184][ T5396] EXT4-fs (loop1): 1 orphan inode deleted [ 116.470957][ T5396] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 116.495938][ T4319] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.554167][ T4319] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 116.611627][ T4319] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 116.635086][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 116.708090][ T25] audit: type=1326 audit(1780641883.617:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.4.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1412d11e59 code=0x0 [ 116.737662][ T4299] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.785800][ T4299] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 116.801815][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.834865][ T4299] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 116.858902][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.892813][ T4189] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.906005][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.919013][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.012564][ T5241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.062880][ T4189] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 117.093630][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.116247][ T4189] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 117.224302][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.271501][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.310322][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.317493][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.356067][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.409018][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.437900][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.445018][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.519351][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.582615][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.608999][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.652651][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.683199][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.703161][ T5424] loop1: detected capacity change from 0 to 4096 [ 117.710658][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.732535][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.753459][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.772586][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.781066][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.807520][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.825912][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.858912][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.932515][ T5424] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.217085][ T5424] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.347: corrupted inode contents [ 118.375264][ T5424] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.347: mark_inode_dirty error [ 118.393103][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.419785][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.432462][ T5424] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.347: corrupted inode contents [ 118.475099][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.503066][ T5424] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.347: mark_inode_dirty error [ 118.567107][ T5424] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.347: corrupted inode contents [ 118.658464][ T5424] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.347: mark_inode_dirty error [ 118.703049][ T5424] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.347: corrupted inode contents [ 118.716014][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 118.773042][ T5424] EXT4-fs error (device loop1): ext4_truncate:4286: inode #15: comm syz.1.347: mark_inode_dirty error [ 118.798983][ T5424] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 118.826156][ T5424] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.347: corrupted inode contents [ 118.848416][ T5424] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 119.058592][ T5460] loop1: detected capacity change from 0 to 512 [ 119.079699][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.121082][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.171112][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.207838][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.230383][ T5460] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.353: inode has both inline data and extents flags [ 119.231255][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.289661][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.297548][ T5460] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.353: couldn't read orphan inode 15 (err -117) [ 119.319938][ T5460] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.348545][ T5241] device veth0_vlan entered promiscuous mode [ 119.417159][ T5241] device veth1_vlan entered promiscuous mode [ 119.512909][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.537532][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.567778][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.599164][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.688368][ T5241] device veth0_macvtap entered promiscuous mode [ 119.984990][ T5241] device veth1_macvtap entered promiscuous mode [ 120.219522][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.319083][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.430915][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.522910][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.561914][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.585356][ T5476] loop1: detected capacity change from 0 to 2048 [ 120.591774][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.601571][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.654516][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.688274][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.721841][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.801169][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.815261][ T5476] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.871175][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.890214][ T5476] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.915470][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.926108][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.941555][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.956379][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.968972][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.989207][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.996063][ T5476] fs-verity: sha512 using implementation "sha512-avx2" [ 121.007416][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.025135][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.061539][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.087237][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.125529][ T5241] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.170392][ T5241] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.191170][ T5241] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.230950][ T5241] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.362929][ T5507] loop4: detected capacity change from 0 to 256 [ 121.519080][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.551645][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.640260][ T5512] loop1: detected capacity change from 0 to 2048 [ 121.661922][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.818471][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.064731][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.368451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.506338][ T5512] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.526682][ T5523] syz.2.369 sent an empty control message without MSG_MORE. [ 122.582356][ T5512] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.613765][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.689250][ T5529] binder: 5526:5529 ioctl c0306201 200000000080 returned -14 [ 123.165863][ T5529] binder: BINDER_SET_CONTEXT_MGR already set [ 123.343162][ T5539] binder: 5526:5539 ioctl c0306201 2000000003c0 returned -14 [ 123.413157][ T5529] binder: 5526:5529 ioctl 4018620d 200000000040 returned -16 [ 123.739895][ T5561] loop0: detected capacity change from 0 to 512 [ 123.781979][ T5565] device netdevsim0 entered promiscuous mode [ 123.794475][ T5567] loop2: detected capacity change from 0 to 256 [ 123.821009][ T5565] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.034071][ T5561] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 124.585439][ T5561] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.856072][ T5586] loop1: detected capacity change from 0 to 2048 [ 125.050812][ T5598] loop4: detected capacity change from 0 to 4096 [ 125.081141][ T5586] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 125.350010][ T5598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.728467][ T5586] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 125.815316][ T5586] EXT4-fs error (device loop1) in ext4_setattr:5645: error 28 [ 125.878749][ T5598] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.392: corrupted inode contents [ 125.915377][ T5615] kernel read not supported for file /file0 (pid: 5615 comm: syz.2.403) [ 125.959797][ T5598] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.392: mark_inode_dirty error [ 125.977671][ T25] audit: type=1800 audit(1780641892.887:26): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.403" name="file0" dev="mqueue" ino=36419 res=0 errno=0 [ 126.028478][ T5619] loop5: detected capacity change from 0 to 512 [ 126.069055][ T5598] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.392: corrupted inode contents [ 126.086887][ T5624] loop2: detected capacity change from 0 to 256 [ 126.126288][ T5619] EXT4-fs (loop5): Test dummy encryption mode enabled [ 126.139864][ T5619] EXT4-fs (loop5): Ignoring removed oldalloc option [ 126.147866][ T5598] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.392: mark_inode_dirty error [ 126.177367][ T5598] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.392: corrupted inode contents [ 126.190927][ T5624] FAT-fs (loop2): Unrecognized mount option "n¨numtail" or missing value [ 126.207765][ T5619] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 126.431542][ T5598] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.392: mark_inode_dirty error [ 126.445006][ T5598] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.392: corrupted inode contents [ 126.469038][ T5598] EXT4-fs error (device loop4): ext4_truncate:4286: inode #15: comm syz.4.392: mark_inode_dirty error [ 126.496640][ T5598] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 126.632322][ T5611] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.392: corrupted inode contents [ 127.321312][ T4199] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 127.342287][ T5619] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 129.077721][ T5675] kernel read not supported for file /file0 (pid: 5675 comm: syz.5.408) [ 129.169596][ T5678] loop4: detected capacity change from 0 to 8 [ 129.181108][ T25] audit: type=1800 audit(1780641896.087:27): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.408" name="file0" dev="mqueue" ino=36489 res=0 errno=0 [ 129.200888][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.284528][ T5678] SQUASHFS error: Failed to read block 0x71e: -5 [ 129.291231][ T5678] SQUASHFS error: Unable to read metadata cache entry [71c] [ 129.298705][ T5678] SQUASHFS error: Unable to read inode 0x11f [ 129.826236][ T25] audit: type=1326 audit(1780641896.737:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5681 comm="syz.5.414" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3822ee59 code=0x7ffc0000 [ 129.927212][ T5680] loop0: detected capacity change from 0 to 512 [ 130.040118][ T25] audit: type=1326 audit(1780641896.737:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5681 comm="syz.5.414" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2e3822ee59 code=0x7ffc0000 [ 130.084459][ T25] audit: type=1326 audit(1780641896.737:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5681 comm="syz.5.414" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3822ee59 code=0x7ffc0000 [ 130.806842][ T5680] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.852344][ T5680] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.304139][ T4193] Bluetooth: Wrong link type (-22) [ 132.636545][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.491477][ T5741] netlink: 'syz.2.428': attribute type 12 has an invalid length. [ 133.542348][ T5741] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 133.577184][ T5741] netlink: 148 bytes leftover after parsing attributes in process `syz.2.428'. [ 133.621937][ T5741] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 133.642627][ T5741] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 133.692273][ T5741] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 133.817386][ T5745] netlink: 'syz.2.428': attribute type 12 has an invalid length. [ 133.861803][ T5745] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 133.888360][ T5745] netlink: 148 bytes leftover after parsing attributes in process `syz.2.428'. [ 133.901403][ T5745] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 133.909622][ T5745] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 133.918262][ T5745] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 134.932688][ T5771] loop2: detected capacity change from 0 to 2048 [ 135.076107][ T5771] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.092049][ T5771] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.798517][ T5800] loop1: detected capacity change from 0 to 2048 [ 135.932141][ T5800] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.952065][ T5800] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.975615][ T5812] loop0: detected capacity change from 0 to 256 [ 136.233349][ T5812] FAT-fs (loop0): Directory bread(block 64) failed [ 136.260277][ T5812] FAT-fs (loop0): Directory bread(block 65) failed [ 136.338515][ T5815] fs-verity: sha256 using implementation "sha256-avx2" [ 136.403346][ T5812] FAT-fs (loop0): Directory bread(block 66) failed [ 136.452394][ T5812] FAT-fs (loop0): Directory bread(block 67) failed [ 136.599191][ T5812] FAT-fs (loop0): Directory bread(block 68) failed [ 136.661829][ T5812] FAT-fs (loop0): Directory bread(block 69) failed [ 136.719044][ T5812] FAT-fs (loop0): Directory bread(block 70) failed [ 136.755153][ T5812] FAT-fs (loop0): Directory bread(block 71) failed [ 136.799236][ T5812] FAT-fs (loop0): Directory bread(block 72) failed [ 136.827079][ T5812] FAT-fs (loop0): Directory bread(block 73) failed [ 137.333123][ T5749] block nbd4: shutting down sockets [ 138.978849][ T5829] loop1: detected capacity change from 0 to 512 [ 139.078385][ T5829] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.157065][ T5829] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 139.207190][ T5829] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.451: Corrupt directory, running e2fsck is recommended [ 139.298368][ T5829] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 139.347828][ T5829] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.451: corrupted in-inode xattr [ 139.418937][ T5829] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.451: couldn't read orphan inode 15 (err -117) [ 139.485047][ T5829] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 139.937408][ T5833] loop4: detected capacity change from 0 to 512 [ 139.989270][ T5833] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 140.021249][ T5833] EXT4-fs (loop4): Ignoring removed bh option [ 140.053954][ T5833] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 140.089284][ T5833] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.453: corrupted inode contents [ 140.189892][ T5833] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #11: comm syz.4.453: mark_inode_dirty error [ 140.263603][ T5833] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.453: invalid indirect mapped block 1 (level 1) [ 140.289554][ T5833] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.453: corrupted inode contents [ 140.322135][ T5833] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 140.324703][ T5841] device syzkaller0 entered promiscuous mode [ 140.341280][ T5833] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.453: corrupted inode contents [ 140.380933][ T5833] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.453: mark_inode_dirty error [ 140.412015][ T5833] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 140.421597][ T5833] EXT4-fs (loop4): 1 truncate cleaned up [ 140.433097][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,bh,,errors=continue. Quota mode: none. [ 140.511584][ T5833] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.453: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 142.265053][ T5864] tmpfs: Bad value for 'mpol' [ 142.279600][ T5867] loop4: detected capacity change from 0 to 8 [ 142.344847][ T5867] SQUASHFS error: Unknown inode type 288 in squashfs_iget! [ 144.450439][ T5912] loop4: detected capacity change from 0 to 4096 [ 144.551830][ T5912] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 144.561251][ T5912] EXT4-fs (loop4): inline encryption not supported [ 144.612013][ T5912] EXT4-fs (loop4): Test dummy encryption mode enabled [ 144.806416][ T5920] loop5: detected capacity change from 0 to 512 [ 144.811548][ T5912] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c1a8, mo2=0003] [ 145.090586][ T5912] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,noblock_validity,minixdf,. Quota mode: writeback. [ 145.174158][ T5920] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.568106][ T5920] EXT4-fs (loop5): 1 truncate cleaned up [ 145.681747][ T5920] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 146.349780][ T5939] loop4: detected capacity change from 0 to 512 [ 146.926494][ T25] audit: type=1326 audit(1780641913.837:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5946 comm="syz.1.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4977594e59 code=0x7ffc0000 [ 147.156563][ T5958] loop1: detected capacity change from 0 to 512 [ 147.316960][ T5939] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.643262][ T5958] EXT4-fs (loop1): Test dummy encryption mode enabled [ 147.818513][ T5958] EXT4-fs (loop1): Ignoring removed oldalloc option [ 147.846523][ T5939] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.932316][ T5958] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 150.626471][ T6015] loop2: detected capacity change from 0 to 512 [ 150.807831][ T6029] loop1: detected capacity change from 0 to 512 [ 150.998641][ T6015] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 151.068142][ T6029] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.504: invalid indirect mapped block 256 (level 2) [ 151.102875][ T6015] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.209784][ T6029] EXT4-fs (loop1): 2 truncates cleaned up [ 151.247739][ T6029] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 152.025234][ T6061] loop4: detected capacity change from 0 to 256 [ 152.046196][ T6062] loop0: detected capacity change from 0 to 512 [ 152.098157][ T6066] loop2: detected capacity change from 0 to 512 [ 152.150043][ T6062] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 152.176336][ T6066] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.198851][ T6069] loop1: detected capacity change from 0 to 2048 [ 152.295309][ T6066] EXT4-fs (loop2): 1 truncate cleaned up [ 152.300995][ T6066] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 152.549198][ T6069] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.178740][ T6069] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 153.283352][ T6069] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 153.320933][ T6069] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.320933][ T6069] [ 153.400027][ T6069] EXT4-fs (loop1): Total free blocks count 0 [ 153.465441][ T6069] EXT4-fs (loop1): Free/Dirty block details [ 153.511342][ T6069] EXT4-fs (loop1): free_blocks=66060288 [ 153.559758][ T6069] EXT4-fs (loop1): dirty_blocks=64 [ 153.576719][ T6069] EXT4-fs (loop1): Block reservation details [ 153.598738][ T6069] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 153.621017][ T6069] EXT4-fs error (device loop1) in ext4_setattr:5645: error 28 [ 154.310216][ T1460] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28 [ 154.609603][ T1460] EXT4-fs (loop1): This should not happen!! Data will be lost [ 154.609603][ T1460] [ 154.654474][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.111953][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 155.128058][ T6129] autofs4:pid:6129:autofs_fill_super: called with bogus options [ 155.202179][ T7] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 155.406672][ T7] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 155.446948][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.477201][ T7] usb 6-1: Product: syz [ 155.481398][ T7] usb 6-1: Manufacturer: syz [ 155.507150][ T7] usb 6-1: SerialNumber: syz [ 155.837236][ T7] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.020444][ T6152] loop1: detected capacity change from 0 to 256 [ 156.211965][ T7] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 158.370532][ T7] usb 6-1: USB disconnect, device number 2 [ 158.548552][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.537'. [ 158.570156][ T6148] infiniband syz1: set active [ 158.601634][ T6148] infiniband syz1: added bond0 [ 158.633550][ T6183] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 158.859558][ T6148] RDS/IB: syz1: added [ 158.961545][ T6148] smc: adding ib device syz1 with port count 1 [ 159.857436][ T6148] smc: ib device syz1 port 1 has pnetid [ 160.592645][ T6205] tipc: Started in network mode [ 160.597584][ T6205] tipc: Node identity 0ac5dbf55327, cluster identity 4711 [ 160.692828][ T6205] tipc: Enabled bearer , priority 0 [ 160.782005][ T6209] device syzkaller0 entered promiscuous mode [ 160.995514][ T6219] loop1: detected capacity change from 0 to 256 [ 161.281546][ T6219] FAT-fs (loop1): Directory bread(block 64) failed [ 161.297056][ T6224] tipc: Resetting bearer [ 161.306240][ T6219] FAT-fs (loop1): Directory bread(block 65) failed [ 161.518368][ T6219] FAT-fs (loop1): Directory bread(block 66) failed [ 161.710858][ T6219] FAT-fs (loop1): Directory bread(block 67) failed [ 161.747672][ T6224] tipc: Disabling bearer [ 161.951848][ T6219] FAT-fs (loop1): Directory bread(block 68) failed [ 161.988935][ T6219] FAT-fs (loop1): Directory bread(block 69) failed [ 162.018910][ T4234] tipc: Node number set to 1508039669 [ 162.028170][ T6219] FAT-fs (loop1): Directory bread(block 70) failed [ 162.034838][ T6219] FAT-fs (loop1): Directory bread(block 71) failed [ 162.041436][ T6219] FAT-fs (loop1): Directory bread(block 72) failed [ 162.055140][ T6219] FAT-fs (loop1): Directory bread(block 73) failed [ 162.188012][ T6231] loop4: detected capacity change from 0 to 2048 [ 162.612524][ T6231] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.692676][ T6231] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.604290][ T6271] mmap: syz.2.553 (6271) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 165.448406][ T6295] tls_set_device_offload_rx: netdev not found [ 165.461618][ T6297] loop0: detected capacity change from 0 to 256 [ 165.659983][ T6302] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 165.727110][ T6302] tipc: Enabled bearer , priority 10 [ 165.990568][ T6321] loop4: detected capacity change from 0 to 2048 [ 166.056116][ T6321] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.109428][ T6321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 166.111562][ T6321] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 166.111616][ T6321] EXT4-fs (loop4): This should not happen!! Data will be lost [ 166.111616][ T6321] [ 166.111632][ T6321] EXT4-fs (loop4): Total free blocks count 0 [ 166.115521][ T6321] EXT4-fs (loop4): Free/Dirty block details [ 166.115548][ T6321] EXT4-fs (loop4): free_blocks=66060288 [ 166.115566][ T6321] EXT4-fs (loop4): dirty_blocks=64 [ 166.115580][ T6321] EXT4-fs (loop4): Block reservation details [ 166.115593][ T6321] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 166.115728][ T6321] EXT4-fs error (device loop4) in ext4_setattr:5645: error 28 [ 166.196059][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28 [ 166.196124][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 166.196124][ T9] [ 167.257119][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.568'. [ 169.481780][ T6360] loop2: detected capacity change from 0 to 4096 [ 169.525323][ T6360] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 169.548336][ T6360] EXT4-fs (loop2): Test dummy encryption mode enabled [ 169.615809][ T6360] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 170.697956][ T6364] overlayfs: failed index dir cleanup (-512) [ 170.751753][ T6364] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 171.352178][ T6382] loop5: detected capacity change from 0 to 256 [ 171.491214][ T6382] FAT-fs (loop5): Directory bread(block 64) failed [ 171.566737][ T6382] FAT-fs (loop5): Directory bread(block 65) failed [ 171.589126][ T6382] FAT-fs (loop5): Directory bread(block 66) failed [ 171.603194][ T6384] nfs: Unknown parameter 'in' [ 171.635052][ T6382] FAT-fs (loop5): Directory bread(block 67) failed [ 171.686261][ T6382] FAT-fs (loop5): Directory bread(block 68) failed [ 171.721839][ T6382] FAT-fs (loop5): Directory bread(block 69) failed [ 171.766078][ T6382] FAT-fs (loop5): Directory bread(block 70) failed [ 171.792274][ T6382] FAT-fs (loop5): Directory bread(block 71) failed [ 171.798916][ T6382] FAT-fs (loop5): Directory bread(block 72) failed [ 171.805767][ T6382] FAT-fs (loop5): Directory bread(block 73) failed [ 173.499275][ T6405] tls_set_device_offload_rx: netdev not found [ 173.679994][ T6416] tipc: Started in network mode [ 173.702455][ T6416] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 173.708701][ T6419] netlink: 168 bytes leftover after parsing attributes in process `syz.0.594'. [ 173.711512][ T6416] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 173.770458][ T6419] openvswitch: netlink: Message has 5 unknown bytes. [ 173.778957][ T6421] loop1: detected capacity change from 0 to 256 [ 173.855934][ T6416] tipc: Enabled bearer , priority 10 [ 173.949301][ T6421] FAT-fs (loop1): bogus sectors per cluster 223 [ 173.970466][ T6421] FAT-fs (loop1): Can't find a valid FAT filesystem [ 174.100023][ T6430] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 175.262811][ T4684] tipc: Node number set to 1 [ 175.313113][ T6456] loop5: detected capacity change from 0 to 256 [ 175.453279][ T6462] loop1: detected capacity change from 0 to 2048 [ 175.554636][ T6462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.606088][ T6462] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.681873][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 175.690157][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 175.703702][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 175.961335][ T6471] loop2: detected capacity change from 0 to 1024 [ 176.036544][ T6471] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 176.218130][ T6471] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,sysvgroups,nodelalloc,journal_dev=0x0000000000000001,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 176.221595][ T6481] loop4: detected capacity change from 0 to 512 [ 176.489915][ T6481] EXT4-fs (loop4): Ignoring removed bh option [ 177.193612][ T6481] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.219746][ T6481] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 177.311255][ T6481] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 177.412333][ T6481] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 177.460214][ T6481] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 178.048304][ T6506] tmpfs: Unknown parameter 'usrquota' [ 178.087691][ T6508] autofs4:pid:6508:autofs_fill_super: called with bogus options [ 180.628822][ T6542] loop5: detected capacity change from 0 to 512 [ 180.729849][ T6544] autofs4:pid:6544:autofs_fill_super: called with bogus options [ 180.757909][ T6542] EXT4-fs (loop5): Ignoring removed bh option [ 180.782092][ T6542] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.835660][ T6542] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 180.915459][ T6546] loop4: detected capacity change from 0 to 1024 [ 180.932070][ T6542] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 180.988971][ T6542] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 181.079894][ T6542] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 181.222380][ T6553] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 181.242062][ T6555] loop2: detected capacity change from 0 to 1024 [ 182.071423][ T6562] [ 182.073775][ T6562] ====================================================== [ 182.080791][ T6562] WARNING: possible circular locking dependency detected [ 182.087827][ T6562] syzkaller #0 Not tainted [ 182.092239][ T6562] ------------------------------------------------------ [ 182.099255][ T6562] syz.2.637/6562 is trying to acquire lock: [ 182.105144][ T6562] ffff888063fd9028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 182.116224][ T6562] [ 182.116224][ T6562] but task is already holding lock: [ 182.123585][ T6562] ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 182.133248][ T6562] [ 182.133248][ T6562] which lock already depends on the new lock. [ 182.133248][ T6562] [ 182.143646][ T6562] [ 182.143646][ T6562] the existing dependency chain (in reverse order) is: [ 182.152655][ T6562] [ 182.152655][ T6562] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 182.160669][ T6562] __mutex_lock_common+0x1e3/0x2400 [ 182.166409][ T6562] mutex_lock_nested+0x17/0x20 [ 182.167330][ T6573] loop1: detected capacity change from 0 to 512 [ 182.171700][ T6562] rfkill_register+0x33/0x980 [ 182.171725][ T6562] hci_register_dev+0x452/0x970 [ 182.171744][ T6562] vhci_create_device+0x32c/0x5c0 [ 182.171764][ T6562] vhci_write+0x391/0x450 [ 182.171780][ T6562] vfs_write+0x745/0xd60 [ 182.171796][ T6562] ksys_write+0x152/0x260 [ 182.171810][ T6562] do_syscall_64+0x4c/0xa0 [ 182.171828][ T6562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.171845][ T6562] [ 182.171845][ T6562] -> #3 (&data->open_mutex){+.+.}-{3:3} [ 182.194391][ T6573] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 182.198950][ T6562] : [ 182.198958][ T6562] __mutex_lock_common+0x1e3/0x2400 [ 182.198983][ T6562] mutex_lock_nested+0x17/0x20 [ 182.248129][ T6562] vhci_send_frame+0x88/0x100 [ 182.253325][ T6562] hci_send_frame+0x1a9/0x2e0 [ 182.258508][ T6562] hci_tx_work+0x9f9/0x1710 [ 182.263515][ T6562] process_one_work+0x85f/0x1010 [ 182.268958][ T6562] worker_thread+0xaa6/0x1290 [ 182.274135][ T6562] kthread+0x436/0x520 [ 182.278712][ T6562] ret_from_fork+0x1f/0x30 [ 182.283637][ T6562] [ 182.283637][ T6562] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 182.292829][ T6562] __flush_work+0x116/0x210 [ 182.297837][ T6562] hci_dev_do_open+0xc58/0x1270 [ 182.303203][ T6562] hci_power_on+0x1c1/0x610 [ 182.308213][ T6562] process_one_work+0x85f/0x1010 [ 182.313655][ T6562] worker_thread+0xaa6/0x1290 [ 182.318834][ T6562] kthread+0x436/0x520 [ 182.323403][ T6562] ret_from_fork+0x1f/0x30 [ 182.328327][ T6562] [ 182.328327][ T6562] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 182.335952][ T6562] __mutex_lock_common+0x1e3/0x2400 [ 182.341664][ T6562] mutex_lock_nested+0x17/0x20 [ 182.346931][ T6562] bg_scan_update+0x44/0x3b0 [ 182.352023][ T6562] process_one_work+0x85f/0x1010 [ 182.357465][ T6562] worker_thread+0xaa6/0x1290 [ 182.362647][ T6562] kthread+0x436/0x520 [ 182.367217][ T6562] ret_from_fork+0x1f/0x30 [ 182.372134][ T6562] [ 182.372134][ T6562] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 182.381928][ T6562] __lock_acquire+0x2c42/0x7d10 [ 182.387284][ T6562] lock_acquire+0x19e/0x400 [ 182.392293][ T6562] __flush_work+0x116/0x210 [ 182.397298][ T6562] __cancel_work_timer+0x3f4/0x560 [ 182.402910][ T6562] hci_request_cancel_all+0xcc/0x300 [ 182.408701][ T6562] hci_dev_do_close+0x4e/0x1030 [ 182.414057][ T6562] hci_rfkill_set_block+0x10a/0x190 [ 182.419763][ T6562] rfkill_set_block+0x1c9/0x3d0 [ 182.425118][ T6562] rfkill_fop_write+0x452/0x560 [ 182.430470][ T6562] vfs_write+0x30b/0xd60 [ 182.435216][ T6562] ksys_write+0x152/0x260 [ 182.440046][ T6562] do_syscall_64+0x4c/0xa0 [ 182.445055][ T6562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.451459][ T6562] [ 182.451459][ T6562] other info that might help us debug this: [ 182.451459][ T6562] [ 182.461669][ T6562] Chain exists of: [ 182.461669][ T6562] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 182.461669][ T6562] [ 182.477373][ T6562] Possible unsafe locking scenario: [ 182.477373][ T6562] [ 182.484800][ T6562] CPU0 CPU1 [ 182.490147][ T6562] ---- ---- [ 182.495489][ T6562] lock(rfkill_global_mutex); [ 182.500234][ T6562] lock(&data->open_mutex); [ 182.507322][ T6562] lock(rfkill_global_mutex); [ 182.514585][ T6562] lock((work_completion)(&hdev->bg_scan_update)); [ 182.521155][ T6562] [ 182.521155][ T6562] *** DEADLOCK *** [ 182.521155][ T6562] [ 182.529273][ T6562] 1 lock held by syz.2.637/6562: [ 182.534198][ T6562] #0: ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 182.544290][ T6562] [ 182.544290][ T6562] stack backtrace: [ 182.550175][ T6562] CPU: 0 PID: 6562 Comm: syz.2.637 Not tainted syzkaller #0 [ 182.557448][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.567511][ T6562] Call Trace: [ 182.570787][ T6562] [ 182.573712][ T6562] dump_stack_lvl+0x188/0x250 [ 182.578384][ T6562] ? load_image+0x400/0x400 [ 182.582874][ T6562] ? show_regs_print_info+0x20/0x20 [ 182.588060][ T6562] ? print_circular_bug+0x12b/0x1a0 [ 182.593255][ T6562] check_noncircular+0x296/0x330 [ 182.598178][ T6562] ? look_up_lock_class+0x71/0x110 [ 182.603278][ T6562] ? add_chain_block+0x940/0x940 [ 182.608199][ T6562] ? lockdep_lock+0xf1/0x1f0 [ 182.612772][ T6562] ? __lock_acquire+0x12e8/0x7d10 [ 182.617781][ T6562] ? mark_lock+0x94/0x320 [ 182.622092][ T6562] __lock_acquire+0x2c42/0x7d10 [ 182.626945][ T6562] ? verify_lock_unused+0x140/0x140 [ 182.632138][ T6562] ? verify_lock_unused+0x140/0x140 [ 182.637336][ T6562] ? mark_lock+0x94/0x320 [ 182.641659][ T6562] lock_acquire+0x19e/0x400 [ 182.646156][ T6562] ? __flush_work+0xfa/0x210 [ 182.650739][ T6562] ? __lock_acquire+0x7d10/0x7d10 [ 182.655762][ T6562] ? read_lock_is_recursive+0x10/0x10 [ 182.661125][ T6562] ? start_flush_work+0x776/0x820 [ 182.666140][ T6562] __flush_work+0x116/0x210 [ 182.670628][ T6562] ? __flush_work+0xfa/0x210 [ 182.675204][ T6562] ? flush_work+0x20/0x20 [ 182.679515][ T6562] ? try_to_grab_pending+0xfa/0x7f0 [ 182.684696][ T6562] ? mark_lock+0x94/0x320 [ 182.689012][ T6562] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 182.694983][ T6562] ? lock_chain_count+0x20/0x20 [ 182.699818][ T6562] ? mark_lock+0x94/0x320 [ 182.704133][ T6562] ? __cancel_work_timer+0x36a/0x560 [ 182.709406][ T6562] __cancel_work_timer+0x3f4/0x560 [ 182.714510][ T6562] ? cancel_work_sync+0x20/0x20 [ 182.719349][ T6562] ? __cancel_work+0x1f9/0x2e0 [ 182.724102][ T6562] ? lockdep_hardirqs_on+0x94/0x140 [ 182.729289][ T6562] ? __cancel_work+0x27b/0x2e0 [ 182.734044][ T6562] ? cancel_work+0x20/0x20 [ 182.738457][ T6562] ? lock_chain_count+0x20/0x20 [ 182.743309][ T6562] hci_request_cancel_all+0xcc/0x300 [ 182.748591][ T6562] hci_dev_do_close+0x4e/0x1030 [ 182.753436][ T6562] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 182.759324][ T6562] ? _raw_spin_unlock+0x40/0x40 [ 182.764174][ T6562] hci_rfkill_set_block+0x10a/0x190 [ 182.769368][ T6562] ? rcu_lock_release+0x20/0x20 [ 182.774213][ T6562] rfkill_set_block+0x1c9/0x3d0 [ 182.779058][ T6562] rfkill_fop_write+0x452/0x560 [ 182.783909][ T6562] ? rfkill_fop_read+0x520/0x520 [ 182.788839][ T6562] ? common_file_perm+0xb0/0x1c0 [ 182.793763][ T6562] ? fsnotify_perm+0x5d/0x560 [ 182.798426][ T6562] ? security_file_permission+0x75/0xa0 [ 182.803954][ T6562] ? rfkill_fop_read+0x520/0x520 [ 182.808875][ T6562] vfs_write+0x30b/0xd60 [ 182.813216][ T6562] ? file_end_write+0x250/0x250 [ 182.818073][ T6562] ? __fget_files+0x40f/0x480 [ 182.822750][ T6562] ? __fdget_pos+0x1e2/0x370 [ 182.827340][ T6562] ? ksys_write+0x71/0x260 [ 182.831747][ T6562] ksys_write+0x152/0x260 [ 182.836064][ T6562] ? __ia32_sys_read+0x80/0x80 [ 182.840815][ T6562] ? lockdep_hardirqs_on+0x94/0x140 [ 182.846000][ T6562] do_syscall_64+0x4c/0xa0 [ 182.850402][ T6562] ? clear_bhb_loop+0x30/0x80 [ 182.855061][ T6562] ? clear_bhb_loop+0x30/0x80 [ 182.859724][ T6562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.865635][ T6562] RIP: 0033:0x7f28328d2e59 [ 182.870036][ T6562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.889633][ T6562] RSP: 002b:00007f2830aea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.898038][ T6562] RAX: ffffffffffffffda RBX: 00007f2832b4c180 RCX: 00007f28328d2e59 [ 182.905994][ T6562] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 182.913952][ T6562] RBP: 00007f2832968d6f R08: 0000000000000000 R09: 0000000000000000 [ 182.921906][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.929857][ T6562] R13: 00007f2832b4c218 R14: 00007f2832b4c180 R15: 00007ffc46673c88 [ 182.937820][ T6562] [ 182.979029][ T6573] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 183.032942][ T6573] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.642: corrupted in-inode xattr [ 183.045236][ T6573] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.642: couldn't read orphan inode 15 (err -117) [ 183.060286][ T6573] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 183.148972][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 183.171532][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 183.194644][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 183.216539][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 183.238253][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 183.259073][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 183.280531][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 183.362375][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 183.396741][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 183.419388][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 183.738984][ T4387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.805399][ T4387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.846052][ T4387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.904010][ T4387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.773311][ T4387] device hsr_slave_0 left promiscuous mode [ 184.779575][ T4387] device hsr_slave_1 left promiscuous mode [ 184.793446][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.800868][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.809786][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.819928][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.827815][ T4387] device bridge_slave_1 left promiscuous mode [ 184.837872][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.846727][ T4387] device bridge_slave_0 left promiscuous mode [ 184.854613][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.865213][ T4387] device veth1_macvtap left promiscuous mode [ 184.871227][ T4387] device veth0_macvtap left promiscuous mode [ 184.885320][ T4387] device veth1_vlan left promiscuous mode [ 184.891104][ T4387] device veth0_vlan left promiscuous mode [ 185.037568][ T4387] team0 (unregistering): Port device team_slave_1 removed [ 185.066537][ T4387] team0 (unregistering): Port device team_slave_0 removed [ 185.083414][ T4387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.113626][ T4387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.188607][ T4387] bond0 (unregistering): Released all slaves