last executing test programs: 1.994192725s ago: executing program 0 (id=984): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {0x85, 0x0, 0x0, 0x8d}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x662348835c3a8010}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 1.785897374s ago: executing program 0 (id=988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x1, 0x800001b, r1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=':\v', 0x2}], 0x1) 1.601985962s ago: executing program 0 (id=992): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x1, 0x14) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) readlink(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x4, 0xffffffff913cd9b9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') read$FUSE(r2, &(0x7f0000005700)={0x2020}, 0x2020) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.531400895s ago: executing program 3 (id=993): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1bee, 0x9, 0xfffffffffffffffd, 0x400, 0x2, 0x6, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) 1.531277805s ago: executing program 1 (id=994): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.362116712s ago: executing program 3 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0xa0, &(0x7f00000004c0)=ANY=[], 0xff, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) write$binfmt_aout(r0, 0x0, 0x0) 1.282326185s ago: executing program 0 (id=998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000000)="366626f30f10e80f35f3af66baf80c32e5ef66bafc0c66ed0f20d835080000000f22d8b805000000b971006d0410211021d967660fdb19c7442400f0000000f282f00fb099400d0000c744240600000000c74424007e000000c744240200800000c7442406000000000f011c24c744240000400000c744240200000000660f3881a5003800000f011c240f01c4", 0x8d}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.238910807s ago: executing program 4 (id=999): r0 = memfd_create(&(0x7f0000000480)='-B\x01\x01\x00\x00\x00\x00\x00\x00p\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa\x04\x00\x00\x00\x00\x00\x00\x00}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10\r\b\xb3\x8b3\xfd\xe1\xaa-d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\xd6M\x1e\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7\xf5|\xe2\x16\xa8\xca3\xcfsbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xebF\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0euIz\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x92\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR(\xfa\xc2\xec\x96e\\^\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb7xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"q\x0f\x00]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8\xba\xfa\xaeq\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17\x00\x00', 0x2) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x1000, r1, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)='/', 0x1}], 0x1, 0xa, 0x0) 1.071381365s ago: executing program 3 (id=1000): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2b}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) 1.062106694s ago: executing program 2 (id=1001): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r3 = inotify_init() r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r2}, 0xc) 1.038035756s ago: executing program 4 (id=1002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0xc090) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 983.466588ms ago: executing program 1 (id=1003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 947.34264ms ago: executing program 0 (id=1004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xd1, 0x0, 0x6, 0x6], 0x0, 0x8340}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x208c4}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 913.837581ms ago: executing program 3 (id=1005): r0 = socket(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x484c, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xbe, 0x4) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)=@phonet={0x23, 0x40, 0x6, 0x7}, 0x80, 0x0}}], 0x1, 0x24040001) 827.440925ms ago: executing program 2 (id=1006): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x1) 827.329795ms ago: executing program 1 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r1, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 766.142338ms ago: executing program 3 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x40d, 0x70bd25, 0x1ffffffc}, 0xd}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 675.405711ms ago: executing program 2 (id=1009): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711807000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x1f, 0x0, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 615.337514ms ago: executing program 1 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 615.176444ms ago: executing program 0 (id=1011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) syz_open_dev$ptys(0xc, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10000) 554.741697ms ago: executing program 4 (id=1012): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local, 0x80003, 0x0, 0x0, 0x400, 0x9, 0x97153d3da8de11f0}) 526.341008ms ago: executing program 2 (id=1013): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1, 0x44, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x1c, 0x16, 0x0, 0x3, [0x243, 0x5, 0x101, 0x180, 0x101, 0xffffffff]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 375.373004ms ago: executing program 3 (id=1014): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) fanotify_init(0x81, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 375.207575ms ago: executing program 4 (id=1015): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") 375.118754ms ago: executing program 2 (id=1016): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x41040}, 0x4048084) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, &(0x7f0000000000)=0x1, 0x4) 364.561515ms ago: executing program 1 (id=1017): unshare(0x400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 241.039471ms ago: executing program 2 (id=1018): sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008801}, 0x4040845) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 135.239605ms ago: executing program 1 (id=1019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 135.093115ms ago: executing program 4 (id=1020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 4 (id=1021): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): [ 53.627183][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.635420][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.642675][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.658815][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.666516][ T4271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.674312][ T4271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.682944][ T4271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.688906][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.690741][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.697835][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.704820][ T4271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.712549][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.719168][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.725370][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.732689][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.746477][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.746854][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.753693][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.761376][ T4271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.768580][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.782535][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.789704][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.797062][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.804469][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.811687][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.820003][ T4271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.846486][ T4271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.854260][ T4271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.861554][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.231966][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 54.248922][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 54.287661][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 54.344552][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 54.403069][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 54.449608][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.457269][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.465206][ T4273] device bridge_slave_0 entered promiscuous mode [ 54.478311][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.485616][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.493885][ T4273] device bridge_slave_1 entered promiscuous mode [ 54.511064][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.518167][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.526102][ T4267] device bridge_slave_0 entered promiscuous mode [ 54.534175][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.541472][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.549012][ T4264] device bridge_slave_0 entered promiscuous mode [ 54.577060][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.584317][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.592502][ T4267] device bridge_slave_1 entered promiscuous mode [ 54.607023][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.614250][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.622013][ T4264] device bridge_slave_1 entered promiscuous mode [ 54.664914][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.674126][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.681521][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.689143][ T4275] device bridge_slave_0 entered promiscuous mode [ 54.697811][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.721404][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.734939][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.751529][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.758588][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.766268][ T4275] device bridge_slave_1 entered promiscuous mode [ 54.774813][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.790624][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.826697][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.833842][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.841905][ T4272] device bridge_slave_0 entered promiscuous mode [ 54.857153][ T4273] team0: Port device team_slave_0 added [ 54.883122][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.890739][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.898353][ T4272] device bridge_slave_1 entered promiscuous mode [ 54.907504][ T4273] team0: Port device team_slave_1 added [ 54.922161][ T4264] team0: Port device team_slave_0 added [ 54.929409][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.940360][ T4267] team0: Port device team_slave_0 added [ 54.947525][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.976982][ T4267] team0: Port device team_slave_1 added [ 54.984049][ T4264] team0: Port device team_slave_1 added [ 55.004041][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.011195][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.037134][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.062628][ T4275] team0: Port device team_slave_0 added [ 55.077096][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.086556][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.093553][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.119505][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.145007][ T4275] team0: Port device team_slave_1 added [ 55.151388][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.158328][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.184453][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.197115][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.204202][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.230571][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.242997][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.256538][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.263816][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.289986][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.325181][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.332395][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.358552][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.394287][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.401505][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.427443][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.441087][ T4272] team0: Port device team_slave_0 added [ 55.461539][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.468486][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.494682][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.516002][ T4272] team0: Port device team_slave_1 added [ 55.524617][ T4264] device hsr_slave_0 entered promiscuous mode [ 55.531667][ T4264] device hsr_slave_1 entered promiscuous mode [ 55.546933][ T4273] device hsr_slave_0 entered promiscuous mode [ 55.553774][ T4273] device hsr_slave_1 entered promiscuous mode [ 55.560555][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.568280][ T4273] Cannot create hsr debugfs directory [ 55.604421][ T4267] device hsr_slave_0 entered promiscuous mode [ 55.611191][ T4267] device hsr_slave_1 entered promiscuous mode [ 55.617756][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.625401][ T4267] Cannot create hsr debugfs directory [ 55.638766][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.645876][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.671945][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.717717][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.725188][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.752025][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.764865][ T4275] device hsr_slave_0 entered promiscuous mode [ 55.771841][ T4275] device hsr_slave_1 entered promiscuous mode [ 55.778473][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.786107][ T4275] Cannot create hsr debugfs directory [ 55.850883][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 55.852447][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 55.857457][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 55.863504][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 55.908165][ T4272] device hsr_slave_0 entered promiscuous mode [ 55.914798][ T4272] device hsr_slave_1 entered promiscuous mode [ 55.921527][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.929078][ T4272] Cannot create hsr debugfs directory [ 55.934695][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 56.129032][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.156442][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.168748][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.191476][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.216684][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.226061][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.240581][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.253185][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.313293][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.323401][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.334483][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.346481][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.431190][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.441588][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.469311][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.481371][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.491447][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.505340][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.514850][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.523581][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.533253][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.554993][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.564428][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.582261][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.632475][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.651377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.659941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.668927][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.676154][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.687027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.698317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.707933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.716624][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.723731][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.754978][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.762622][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.771480][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.779064][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.788667][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.801477][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.809292][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.818694][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.844775][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.858695][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.867213][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.875359][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.887105][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.895964][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.906903][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.915685][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.925028][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.932129][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.939804][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.948603][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.956926][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.964016][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.971834][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.983838][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.994018][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.004210][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.032456][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.041580][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.049862][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.056962][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.066047][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.074869][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.084131][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.091338][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.098956][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.107664][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.116158][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.143500][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.156613][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.182220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.195816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.205483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.216282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.225833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.247317][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.269934][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.282839][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.303803][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.317788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.325982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.336070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.344923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.357145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.365695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.375395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.383966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.392846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.401330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.409507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.418623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.427155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.443049][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.465998][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.474842][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.482962][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.499446][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.531578][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.546255][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.556540][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.576150][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.599517][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.608102][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.635297][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.664656][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.677147][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.702807][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.709900][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.743811][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.761503][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.778417][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.785520][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.830484][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.841184][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.849982][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.860759][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.867889][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.876518][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.885165][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.893833][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.902309][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.909356][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.917179][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.924696][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.932255][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 57.934339][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.938245][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 57.949728][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.953530][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 57.965721][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 57.967544][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.988275][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.996261][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.004280][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.013745][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.014282][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 58.040290][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.049826][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.076078][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.085574][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.100005][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.108550][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.116651][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.125338][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.133989][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.145432][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.154076][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.167701][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.178179][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.188859][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.197809][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.206191][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.215458][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.223849][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.232703][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.272782][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.280451][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.314648][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.360476][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.369572][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.379103][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.401136][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.409822][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.418615][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.441819][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.460685][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.509623][ T4267] device veth0_vlan entered promiscuous mode [ 58.519237][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.528256][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.543497][ T4275] device veth0_vlan entered promiscuous mode [ 58.564604][ T4267] device veth1_vlan entered promiscuous mode [ 58.590889][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.599390][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.610827][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.618602][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.628125][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.637871][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.646316][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.659960][ T4275] device veth1_vlan entered promiscuous mode [ 58.683373][ T4264] device veth0_vlan entered promiscuous mode [ 58.689954][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.699144][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.707997][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.716030][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.724088][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.733059][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.774143][ T4264] device veth1_vlan entered promiscuous mode [ 58.784502][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.793430][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.802836][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.810585][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.818374][ T4267] device veth0_macvtap entered promiscuous mode [ 58.831020][ T4267] device veth1_macvtap entered promiscuous mode [ 58.852391][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.870432][ T4275] device veth0_macvtap entered promiscuous mode [ 58.879444][ T4275] device veth1_macvtap entered promiscuous mode [ 58.888931][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.897405][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.905883][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.914079][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.922617][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.931580][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.939347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.946985][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.959385][ T4264] device veth0_macvtap entered promiscuous mode [ 58.980801][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.988844][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.998508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.007269][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.020629][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.033910][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.050595][ T4264] device veth1_macvtap entered promiscuous mode [ 59.058215][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.073808][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.087686][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.098668][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.109554][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.123585][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.137859][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.149729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.178941][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.189840][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.199836][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.212282][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.223087][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.233042][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.241847][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.255155][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.265365][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.278847][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.287637][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.309783][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.319655][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.334746][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.343832][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.352223][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.360232][ T4272] device veth0_vlan entered promiscuous mode [ 59.369787][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.382249][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.393712][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.403051][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.414193][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.425359][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.438858][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.463091][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.513073][ T4272] device veth1_vlan entered promiscuous mode [ 59.523873][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.536783][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.545614][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.554548][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.564798][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.574247][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.583079][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.592014][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.603734][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.612804][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.622622][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.632701][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.670453][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.679154][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.688526][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.698414][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.776192][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.787158][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.796206][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.805579][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.814583][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.822863][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.831664][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.839336][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.852075][ T4272] device veth0_macvtap entered promiscuous mode [ 59.859709][ T4273] device veth0_vlan entered promiscuous mode [ 59.891747][ T4272] device veth1_macvtap entered promiscuous mode [ 59.905159][ T4273] device veth1_vlan entered promiscuous mode [ 59.949277][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.965396][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.975530][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.988493][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.998455][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.009130][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.019325][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 60.025467][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 60.027011][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.031578][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 60.031613][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 60.056184][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.067086][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.077657][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.088266][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.099335][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 60.105349][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.116172][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.127539][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.144218][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.153010][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.162156][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.171226][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.182095][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.190364][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.198207][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.206301][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.214690][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.224135][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.233346][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.241904][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.272105][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.278191][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.286582][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.293230][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.297373][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.308857][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.333500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.347908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.356092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.381396][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.390016][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.401408][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.409893][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.412973][ T4273] device veth0_macvtap entered promiscuous mode [ 60.445785][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.458919][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.489818][ T4273] device veth1_macvtap entered promiscuous mode [ 60.521735][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.529659][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.538113][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.559145][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.560581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.589281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.598447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.607751][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.617306][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.629553][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.642928][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.646496][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.685669][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.698150][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.713961][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.720376][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 60.724944][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.745133][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.754988][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.765417][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.778510][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.791602][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.801999][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.809951][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.819308][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.851053][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.874477][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.884677][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.895983][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.910515][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.921142][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.931030][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.941748][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.983631][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.020161][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.029097][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.077728][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.138906][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.249230][ T4386] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.275805][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.306531][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.498008][ T4391] loop0: detected capacity change from 0 to 764 [ 62.090529][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 62.096536][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 62.102931][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 62.102972][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 62.132690][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.170572][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 62.176943][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.185588][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.198657][ T4394] loop0: detected capacity change from 0 to 512 [ 62.243491][ T4374] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.271378][ T4394] ======================================================= [ 62.271378][ T4394] WARNING: The mand mount option has been deprecated and [ 62.271378][ T4394] and is ignored by this kernel. Remove the mand [ 62.271378][ T4394] option from the mount to silence this warning. [ 62.271378][ T4394] ======================================================= [ 62.342254][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.351631][ T4394] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.363562][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.395585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.508112][ T4394] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 62.554243][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 62.565523][ T4394] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.7: attempt to clear invalid blocks 2 len 1 [ 62.591548][ T4394] EXT4-fs (loop0): Remounting filesystem read-only [ 62.599995][ T4394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 62.631660][ T4394] EXT4-fs (loop0): Remounting filesystem read-only [ 62.646176][ T4394] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7: invalid indirect mapped block 1819239214 (level 0) [ 62.759682][ T4394] EXT4-fs (loop0): Remounting filesystem read-only [ 62.792824][ T4394] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7: invalid indirect mapped block 1819239214 (level 1) [ 62.821341][ T4394] EXT4-fs (loop0): Remounting filesystem read-only [ 62.828699][ T4394] EXT4-fs (loop0): 1 truncate cleaned up [ 62.834459][ T4394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.900709][ T4394] EXT4-fs: Ignoring removed orlov option [ 62.967329][ T4394] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 63.365497][ T4394] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 63.781156][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 63.904417][ T4399] loop1: detected capacity change from 0 to 32768 [ 64.080886][ T4399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8 (4399) [ 64.249606][ T4399] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.264998][ T4426] loop2: detected capacity change from 0 to 8 [ 64.410508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.432459][ T4399] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 64.560705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.580402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.650494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.765226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.773905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.820308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.867578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.890332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.969969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 65.323996][ T4426] SQUASHFS error: Corrupted symlink [ 65.340626][ T4399] BTRFS info (device loop1): force clearing of disk cache [ 65.418256][ T4399] BTRFS info (device loop1): enabling auto defrag [ 65.467536][ T4399] BTRFS info (device loop1): enabling ssd optimizations [ 65.515464][ T4399] BTRFS info (device loop1): max_inline at 0 [ 65.583858][ T4399] BTRFS info (device loop1): enabling disk space caching [ 66.421650][ T4399] BTRFS info (device loop1): disk space caching is enabled [ 67.373606][ T4399] BTRFS error (device loop1): open_ctree failed: -12 [ 69.760177][ T4313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.942353][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 69.970160][ T4313] usb 2-1: Using ep0 maxpacket: 16 [ 69.985127][ T4313] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 70.028596][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.161601][ T4313] usb 2-1: config 0 descriptor?? [ 72.283312][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.290966][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.486155][ T4313] pegasus: probe of 2-1:0.0 failed with error -71 [ 72.712083][ T4313] usb 2-1: USB disconnect, device number 2 [ 76.205435][ T4542] loop2: detected capacity change from 0 to 8 [ 76.243890][ T4542] SQUASHFS error: lzo decompression failed, data probably corrupt [ 76.251972][ T1169] cfg80211: failed to load regulatory.db [ 76.264879][ T4542] SQUASHFS error: Failed to read block 0x0: -5 [ 76.279734][ T4542] SQUASHFS error: lzo decompression failed, data probably corrupt [ 76.326763][ T4542] SQUASHFS error: Failed to read block 0x0: -5 [ 76.350902][ T26] audit: type=1800 audit(1764766926.451:2): pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.35" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 76.519323][ T4549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28'. [ 79.632374][ T4316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.012678][ T4581] loop0: detected capacity change from 0 to 8 [ 80.022425][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 80.039500][ T4316] usb 5-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 80.085845][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.094987][ T4581] SQUASHFS error: Corrupted symlink [ 80.148698][ T4316] usb 5-1: config 0 descriptor?? [ 82.313473][ T4316] pegasus: probe of 5-1:0.0 failed with error -71 [ 82.330820][ T4316] usb 5-1: USB disconnect, device number 2 [ 82.624556][ T4599] loop0: detected capacity change from 0 to 512 [ 82.676997][ T4599] EXT4-fs error (device loop0): __ext4_fill_super:5397: inode #2: comm syz.0.54: inode has both inline data and extents flags [ 82.706355][ T4599] EXT4-fs (loop0): Remounting filesystem read-only [ 82.740806][ T4599] EXT4-fs (loop0): get root inode failed [ 82.757090][ T4603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.55'. [ 82.783203][ T4599] EXT4-fs (loop0): mount failed [ 82.874995][ T4603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 83.451063][ T4606] loop3: detected capacity change from 0 to 512 [ 83.950424][ T4603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.55'. [ 83.992093][ T4603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.55'. [ 84.918832][ T4620] Illegal XDP return value 4294967262 on prog (id 7) dev N/A, expect packet loss! [ 84.980948][ T4622] binder: 4621:4622 ioctl 4018620d 0 returned -22 [ 85.072793][ T4606] EXT4-fs (loop3): Test dummy encryption mode enabled [ 85.079571][ T4606] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.092874][ T4606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.124260][ T4606] EXT4-fs (loop3): 1 truncate cleaned up [ 85.129906][ T4606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.237607][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 85.769575][ T4640] loop1: detected capacity change from 0 to 8 [ 85.965233][ T4640] SQUASHFS error: Corrupted symlink [ 86.017318][ T4639] loop0: detected capacity change from 0 to 2048 [ 86.074703][ T4639] Alternate GPT is invalid, using primary GPT. [ 86.084550][ T4639] loop0: p1 p2 p3 [ 86.088336][ T4639] loop0: partition table partially beyond EOD, truncated [ 86.127875][ T4645] loop2: detected capacity change from 0 to 2048 [ 86.228199][ T4397] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.375172][ T4649] loop4: detected capacity change from 0 to 512 [ 86.439896][ T4649] EXT4-fs: Ignoring removed oldalloc option [ 86.519638][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 86.524977][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 86.543731][ T4374] udevd[4374]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 86.578594][ T4649] EXT4-fs (loop4): 1 truncate cleaned up [ 86.641301][ T4649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.904497][ T4649] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.68: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 86.956086][ T4660] loop2: detected capacity change from 0 to 2048 [ 86.993083][ T4660] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 87.036940][ T4660] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 87.073944][ T4660] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 87.084968][ T4660] UDF-fs: Scanning with blocksize 512 failed [ 87.102717][ T4660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.129025][ T26] audit: type=1800 audit(1764766937.221:3): pid=4660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.71" name="file2" dev="loop2" ino=839 res=0 errno=0 [ 87.226361][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 87.519871][ T4674] loop3: detected capacity change from 0 to 8 [ 87.587084][ T4674] capability: warning: `syz.3.75' uses deprecated v2 capabilities in a way that may be insecure [ 87.626983][ T4676] loop2: detected capacity change from 0 to 128 [ 87.748196][ T4683] Bluetooth: MGMT ver 1.22 [ 87.829132][ T4676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 87.906550][ T4683] loop2: detected capacity change from 0 to 512 [ 87.917928][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 87.977818][ T4689] x_tables: duplicate underflow at hook 2 [ 88.025993][ T4683] EXT4-fs (loop2): 1 orphan inode deleted [ 88.084277][ T4683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.210372][ T4683] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.273997][ T26] audit: type=1326 audit(1764766938.371:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 88.420913][ T26] audit: type=1326 audit(1764766938.371:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 88.722138][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 88.780946][ T26] audit: type=1326 audit(1764766938.371:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 88.792698][ T4704] loop1: detected capacity change from 0 to 512 [ 88.835328][ T4712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.848604][ T26] audit: type=1326 audit(1764766938.371:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 90.993758][ T4704] EXT4-fs (loop1): 1 truncate cleaned up [ 91.010266][ T4704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.019745][ T26] audit: type=1326 audit(1764766938.371:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff48638de97 code=0x7ffc0000 [ 91.030817][ T4710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.115481][ T26] audit: type=1326 audit(1764766938.371:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 92.364496][ T26] audit: type=1326 audit(1764766938.371:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 92.475876][ T26] audit: type=1326 audit(1764766938.371:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 92.511218][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 92.535434][ T26] audit: type=1326 audit(1764766938.371:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 92.646978][ T26] audit: type=1326 audit(1764766938.371:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 92.679153][ T4738] loop1: detected capacity change from 0 to 8 [ 92.757224][ T26] audit: type=1326 audit(1764766938.371:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 92.847107][ T26] audit: type=1326 audit(1764766938.371:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 92.922240][ T26] audit: type=1326 audit(1764766938.371:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 94.067333][ T26] audit: type=1326 audit(1764766938.371:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 94.103436][ T26] audit: type=1326 audit(1764766938.371:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 94.247714][ T26] audit: type=1326 audit(1764766938.371:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 94.306731][ T4752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'. [ 96.073296][ T4750] sched: RT throttling activated [ 97.468403][ T4765] loop4: detected capacity change from 0 to 512 [ 97.572143][ T4765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.589407][ T4773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.590283][ T4765] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.608729][ T4769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.735509][ T4765] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.104: invalid size [ 97.753439][ T4776] loop0: detected capacity change from 0 to 256 [ 97.788454][ T4778] loop3: detected capacity change from 0 to 256 [ 97.802329][ T4776] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000e55b, chksum : 0x6fe59a44, utbl_chksum : 0xe619d30d) [ 97.846437][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 97.901647][ T4778] FAT-fs (loop3): Directory bread(block 64) failed [ 97.929323][ T4778] FAT-fs (loop3): Directory bread(block 65) failed [ 97.956535][ T4778] FAT-fs (loop3): Directory bread(block 66) failed [ 97.965451][ T4776] exFAT-fs (loop0): hint_cluster is invalid (17) [ 97.978550][ T4778] FAT-fs (loop3): Directory bread(block 67) failed [ 97.985973][ T4778] FAT-fs (loop3): Directory bread(block 68) failed [ 98.001186][ T4778] FAT-fs (loop3): Directory bread(block 69) failed [ 98.032293][ T4778] FAT-fs (loop3): Directory bread(block 70) failed [ 98.038849][ T4778] FAT-fs (loop3): Directory bread(block 71) failed [ 98.066833][ T4778] FAT-fs (loop3): Directory bread(block 72) failed [ 98.083688][ T4778] FAT-fs (loop3): Directory bread(block 73) failed [ 98.744843][ T4787] loop1: detected capacity change from 0 to 256 [ 98.769782][ T4787] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.808581][ T4787] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.968826][ T4791] loop2: detected capacity change from 0 to 8192 [ 98.999423][ T4791] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 99.073987][ T4791] UDF-fs: Scanning with blocksize 512 failed [ 99.117475][ T4791] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 99.144993][ T4791] UDF-fs: Scanning with blocksize 1024 failed [ 99.169600][ T4791] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 99.199448][ T4791] UDF-fs: Scanning with blocksize 2048 failed [ 99.229127][ T4791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.245159][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 99.245171][ T26] audit: type=1800 audit(1764766949.341:28): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.111" name="file1" dev="loop2" ino=818 res=0 errno=0 [ 99.375785][ T4808] loop1: detected capacity change from 0 to 2048 [ 99.439076][ T4808] Alternate GPT is invalid, using primary GPT. [ 99.486558][ T4808] loop1: p1 p2 p3 [ 99.500357][ T4808] loop1: partition table partially beyond EOD, truncated [ 99.883873][ T4345] kernel write not supported for file /input/event2 (pid: 4345 comm: kworker/0:7) [ 100.186082][ T4820] loop4: detected capacity change from 0 to 2048 [ 100.253250][ T4820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.312887][ T4819] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.374985][ T4819] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.435156][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 100.440175][ T4819] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.440175][ T4819] [ 100.454327][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 100.475535][ T4397] udevd[4397]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 100.481381][ T4819] EXT4-fs (loop4): Total free blocks count 0 [ 101.235980][ T4819] EXT4-fs (loop4): Free/Dirty block details [ 101.242263][ T4819] EXT4-fs (loop4): free_blocks=2415919104 [ 101.248042][ T4819] EXT4-fs (loop4): dirty_blocks=32 [ 101.253464][ T4819] EXT4-fs (loop4): Block reservation details [ 101.259455][ T4819] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 101.269193][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 101.273724][ T4397] udevd[4397]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 101.556326][ T4835] Zero length message leads to an empty skb [ 102.383884][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 102.513326][ T4360] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 102.727469][ T4839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.913933][ T4843] loop4: detected capacity change from 0 to 512 [ 103.068857][ T4843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.110258][ T4843] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.981075][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 106.034553][ T4872] loop2: detected capacity change from 0 to 512 [ 106.605330][ T4879] loop1: detected capacity change from 0 to 8 [ 106.709248][ T4872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.731747][ T4879] SQUASHFS error: lzo decompression failed, data probably corrupt [ 106.739603][ T4879] SQUASHFS error: Failed to read block 0x91: -5 [ 106.762775][ T4872] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.827023][ T4879] SQUASHFS error: Unable to read metadata cache entry [8f] [ 106.908141][ T4879] SQUASHFS error: Unable to read inode 0x11f [ 107.630925][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 109.557337][ T4912] loop0: detected capacity change from 0 to 1024 [ 109.607942][ T4913] loop2: detected capacity change from 0 to 1024 [ 109.752971][ T4913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.846580][ T4913] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.929143][ T4539] hfsplus: b-tree write err: -5, ino 4 [ 110.111606][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 110.485172][ T4949] loop0: detected capacity change from 0 to 8 [ 110.540538][ T4950] loop3: detected capacity change from 0 to 1024 [ 110.666796][ T4949] SQUASHFS error: lzo decompression failed, data probably corrupt [ 110.684623][ T4949] SQUASHFS error: Failed to read block 0x91: -5 [ 110.691636][ T4949] SQUASHFS error: Unable to read metadata cache entry [8f] [ 110.698975][ T4949] SQUASHFS error: Unable to read inode 0x11f [ 110.712037][ T4950] syz.3.167: attempt to access beyond end of device [ 110.712037][ T4950] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 110.727449][ T4950] Buffer I/O error on dev loop3, logical block 2889, async page read [ 110.741843][ T4950] syz.3.167: attempt to access beyond end of device [ 110.741843][ T4950] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 111.473253][ T4950] Buffer I/O error on dev loop3, logical block 2889, async page read [ 111.491745][ T26] audit: type=1800 audit(1764766961.591:29): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.167" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 112.010219][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 112.242330][ T4979] loop3: detected capacity change from 0 to 1764 [ 112.968445][ T4986] loop2: detected capacity change from 0 to 512 [ 112.975593][ T4986] EXT4-fs: Ignoring removed bh option [ 113.022546][ T4986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.070308][ T4986] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 113.181805][ T4986] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 113.222853][ T4986] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.229222][ T4986] EXT4-fs error (device loop2): ext4_quota_enable:7013: comm syz.2.178: Bad quota inum: 4294967291, type: 0 [ 113.330084][ T4993] loop0: detected capacity change from 0 to 2048 [ 113.347585][ T41] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.360711][ T4986] EXT4-fs warning (device loop2): ext4_enable_quotas:7061: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 113.395312][ T4993] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 113.527623][ T4986] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 113.591087][ T4986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.835790][ T4986] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.178: deleted inode referenced: 12 [ 114.164717][ T4993] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 114.176986][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 114.200151][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 114.209047][ T41] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 114.268376][ T41] usb 2-1: config 1 interface 0 has no altsetting 0 [ 114.300680][ T4993] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 114.325017][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.357668][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.394348][ T41] usb 2-1: Product: syz [ 114.398721][ T41] usb 2-1: Manufacturer: syz [ 114.418318][ T41] usb 2-1: SerialNumber: syz [ 114.470274][ T4993] UDF-fs: Scanning with blocksize 512 failed [ 114.486921][ T41] usb 2-1: bad CDC descriptors [ 114.691691][ T4996] device veth3 entered promiscuous mode [ 114.697489][ T4373] usb 2-1: USB disconnect, device number 3 [ 114.705650][ T4993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.752200][ T5002] loop2: detected capacity change from 0 to 512 [ 114.790835][ T26] audit: type=1800 audit(1764767220.892:30): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 114.811233][ T5002] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.811265][ T5002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.854206][ T5002] EXT4-fs (loop2): 1 truncate cleaned up [ 114.873440][ T5002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.919027][ T5008] loop3: detected capacity change from 0 to 256 [ 114.931581][ T5006] loop4: detected capacity change from 0 to 8 [ 114.968787][ T5006] SQUASHFS error: lzo decompression failed, data probably corrupt [ 114.998318][ T5006] SQUASHFS error: Failed to read block 0x91: -5 [ 115.006764][ T5006] SQUASHFS error: Unable to read metadata cache entry [8f] [ 115.014271][ T5006] SQUASHFS error: Unable to read inode 0x11f [ 115.298508][ T5008] syz.3.186: attempt to access beyond end of device [ 115.298508][ T5008] loop3: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 115.313578][ T5008] syz.3.186: attempt to access beyond end of device [ 115.313578][ T5008] loop3: rw=2049, sector=608, nr_sectors = 416 limit=256 [ 115.334543][ T5008] syz.3.186: attempt to access beyond end of device [ 115.334543][ T5008] loop3: rw=2049, sector=1056, nr_sectors = 64 limit=256 [ 115.529033][ T5002] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 115.808290][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 115.853267][ T5024] loop0: detected capacity change from 0 to 1024 [ 116.290144][ T5024] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.536904][ T5024] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.597246][ T5024] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Out of memory [ 116.626865][ T5024] EXT4-fs (loop0): Remounting filesystem read-only [ 116.633961][ T5024] EXT4-fs error (device loop0): __ext4_unlink:3327: inode #2: comm syz.0.189: mark_inode_dirty error [ 116.646015][ T5024] EXT4-fs (loop0): Remounting filesystem read-only [ 116.653815][ T5033] loop2: detected capacity change from 0 to 256 [ 116.712010][ T5033] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 116.747895][ T4579] kworker/u4:15: attempt to access beyond end of device [ 116.747895][ T4579] loop3: rw=1, sector=256, nr_sectors = 48 limit=256 [ 116.810277][ T5033] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 116.821287][ T4579] kworker/u4:15: attempt to access beyond end of device [ 116.821287][ T4579] loop3: rw=1, sector=328, nr_sectors = 8 limit=256 [ 116.834941][ T4579] kworker/u4:15: attempt to access beyond end of device [ 116.834941][ T4579] loop3: rw=1, sector=376, nr_sectors = 8 limit=256 [ 117.499571][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 119.610203][ T4271] Bluetooth: hci2: command 0x0401 tx timeout [ 119.833110][ T5066] loop4: detected capacity change from 0 to 256 [ 119.936076][ T5066] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 120.186237][ T5078] loop1: detected capacity change from 0 to 1024 [ 120.234936][ T5078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.382371][ T5078] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Out of memory [ 120.396474][ T5078] EXT4-fs (loop1): Remounting filesystem read-only [ 120.403133][ T5078] EXT4-fs error (device loop1): __ext4_unlink:3327: inode #2: comm syz.1.206: mark_inode_dirty error [ 120.427715][ T5078] EXT4-fs (loop1): Remounting filesystem read-only [ 120.600586][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 121.786232][ T5109] loop1: detected capacity change from 0 to 128 [ 122.335208][ T4316] kernel write not supported for file /input/event2 (pid: 4316 comm: kworker/0:4) [ 122.471380][ T5109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.496638][ T5109] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.617709][ T4277] Bluetooth: hci2: command 0x0401 tx timeout [ 123.151274][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 124.462497][ T5137] loop0: detected capacity change from 0 to 8 [ 125.301029][ T4271] Bluetooth: hci2: command 0x0401 tx timeout [ 125.702098][ T5148] loop4: detected capacity change from 0 to 512 [ 125.828576][ T5148] EXT4-fs: Ignoring removed oldalloc option [ 125.863636][ T5148] EXT4-fs (loop4): 1 truncate cleaned up [ 125.869317][ T5148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.323077][ T5160] loop1: detected capacity change from 0 to 1024 [ 126.381732][ T5160] hfsplus: unable to parse mount options [ 126.420535][ T4646] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.748275][ T5164] device syzkaller0 entered promiscuous mode [ 126.793579][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 126.847758][ T5169] loop3: detected capacity change from 0 to 512 [ 126.888433][ T5165] loop2: detected capacity change from 0 to 512 [ 126.927850][ T5165] EXT4-fs: Ignoring removed nobh option [ 126.960652][ T5165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.987853][ T5165] EXT4-fs (loop2): 1 truncate cleaned up [ 126.993806][ T5165] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.007221][ T5169] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 127.695583][ T5169] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 127.744469][ T5169] System zones: 0-1, 15-15, 18-18, 34-34 [ 127.809466][ T5169] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.841509][ T5169] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 127.872055][ T5169] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 127.886682][ T5169] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 127.911422][ T5169] EXT4-fs (loop3): 1 truncate cleaned up [ 127.917660][ T5169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.140984][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 129.216991][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 129.307543][ T5189] loop2: detected capacity change from 0 to 512 [ 129.347949][ T5189] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.239: corrupted inode contents [ 129.393062][ T5189] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 129.443579][ T5189] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.239: corrupted inode contents [ 129.549017][ T5189] EXT4-fs error (device loop2): ext4_evict_inode:327: inode #15: comm syz.2.239: mark_inode_dirty error [ 130.873736][ T5195] loop1: detected capacity change from 0 to 512 [ 130.880494][ T5195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.048104][ T5189] EXT4-fs (loop2): 1 orphan inode deleted [ 131.055998][ T5195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.110338][ T5189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.138323][ T5195] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 131.146877][ T5195] EXT4-fs (loop1): orphan cleanup on readonly fs [ 131.161651][ T5195] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 131.172035][ T5195] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 131.181415][ T5195] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.243: Failed to acquire dquot type 1 [ 131.199315][ T5195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.243: bg 0: block 40: padding at end of block bitmap is not set [ 131.221877][ T26] audit: type=1326 audit(1764767237.322:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.2.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f340c98f749 code=0x0 [ 131.243943][ T5195] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 131.260584][ T5195] EXT4-fs (loop1): 1 truncate cleaned up [ 131.787297][ T5195] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.882721][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 131.977017][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 132.083828][ T4537] kernel write not supported for file /input/event2 (pid: 4537 comm: kworker/1:7) [ 132.628278][ T5215] loop0: detected capacity change from 0 to 1024 [ 132.660832][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.667136][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.718865][ T5218] loop4: detected capacity change from 0 to 128 [ 132.772320][ T5215] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.821894][ T5218] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.896607][ T5218] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.925953][ T5225] input: syz1 as /devices/virtual/input/input6 [ 132.936173][ T5215] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2749: inode #13: comm syz.0.240: corrupted in-inode xattr [ 133.317923][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 133.966389][ T4271] Bluetooth: hci3: link tx timeout [ 133.972492][ T4271] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.351704][ T5242] device syzkaller0 entered promiscuous mode [ 134.589285][ T5252] loop0: detected capacity change from 0 to 512 [ 134.640747][ T5252] EXT4-fs: Ignoring removed nobh option [ 134.711280][ T5252] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 134.811069][ T5252] EXT4-fs (loop0): 1 truncate cleaned up [ 134.816752][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.975253][ T5261] loop1: detected capacity change from 0 to 512 [ 135.020843][ T5261] EXT4-fs: Ignoring removed oldalloc option [ 135.076682][ T5261] EXT4-fs (loop1): 1 truncate cleaned up [ 135.110744][ T5261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.208386][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 136.166457][ T5284] 9pnet_fd: Insufficient options for proto=fd [ 136.386790][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 136.469030][ T5292] loop2: detected capacity change from 0 to 256 [ 136.576887][ T5292] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 136.605623][ T5294] loop4: detected capacity change from 0 to 8 [ 136.638297][ T5294] SQUASHFS error: lzo decompression failed, data probably corrupt [ 136.662130][ T5294] SQUASHFS error: Failed to read block 0x91: -5 [ 136.682754][ T5294] SQUASHFS error: Unable to read metadata cache entry [8f] [ 136.689975][ T5294] SQUASHFS error: Unable to read inode 0x11f [ 136.904141][ T5302] loop2: detected capacity change from 0 to 256 [ 136.931619][ T5305] binder: 5304:5305 ioctl c02054a5 200000000280 returned -22 [ 136.989902][ T5302] netlink: 76 bytes leftover after parsing attributes in process `syz.2.273'. [ 137.862803][ T5317] loop2: detected capacity change from 0 to 512 [ 137.980515][ T5317] EXT4-fs: Ignoring removed oldalloc option [ 138.019002][ T5317] EXT4-fs (loop2): 1 truncate cleaned up [ 139.167931][ T5317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.445095][ T5333] loop1: detected capacity change from 0 to 512 [ 140.562518][ T5333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 140.581301][ T5333] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.639978][ T26] audit: type=1326 audit(1764767246.732:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 140.716282][ T26] audit: type=1326 audit(1764767246.732:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 140.753295][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 140.795572][ T26] audit: type=1326 audit(1764767246.762:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 140.854752][ T26] audit: type=1326 audit(1764767246.762:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 140.903834][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 140.961096][ T26] audit: type=1326 audit(1764767246.762:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 140.995359][ T5348] loop1: detected capacity change from 0 to 512 [ 141.037167][ T5348] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 141.046664][ T26] audit: type=1326 audit(1764767246.762:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 141.069141][ T5351] loop2: detected capacity change from 0 to 1024 [ 141.134213][ T5348] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.287: bg 0: block 104: invalid block bitmap [ 141.160501][ T26] audit: type=1326 audit(1764767246.762:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 141.183009][ T26] audit: type=1326 audit(1764767246.772:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 141.205814][ T26] audit: type=1326 audit(1764767246.772:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 141.216396][ T5351] syz.2.289: attempt to access beyond end of device [ 141.216396][ T5351] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 141.228102][ T26] audit: type=1326 audit(1764767246.772:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cdb8f749 code=0x7ffc0000 [ 141.266226][ T5351] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 141.279798][ T5348] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 141.289257][ T5348] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.287: invalid indirect mapped block 1 (level 1) [ 141.302843][ T5351] syz.2.289: attempt to access beyond end of device [ 141.302843][ T5351] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 141.316822][ T5351] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 141.326840][ T5348] EXT4-fs (loop1): 1 truncate cleaned up [ 141.340737][ T5348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.509386][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 143.317142][ T5386] loop1: detected capacity change from 0 to 512 [ 143.386468][ T5384] pimreg1: tun_chr_ioctl cmd 1074812118 [ 143.410191][ T5384] loop4: detected capacity change from 0 to 256 [ 143.438146][ T5386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.442362][ T5392] loop3: detected capacity change from 0 to 256 [ 143.488741][ T5384] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 143.513224][ T5386] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.530908][ T5392] FAT-fs (loop3): Directory bread(block 1285) failed [ 143.662927][ T5386] process 'syz.1.303' launched '' with NULL argv: empty string added [ 143.681870][ T5392] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 143.699931][ T5384] exFAT-fs (loop4): error, invalid size(size(2) > aligned(9223372036854777344) [ 143.699931][ T5384] [ 143.727511][ T5384] exFAT-fs (loop4): Filesystem has been set read-only [ 143.749719][ T5396] exFAT-fs (loop4): error, invalid size(size(2) > aligned(9223372036854777344) [ 143.749719][ T5396] [ 143.851021][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 144.076981][ T5403] loop3: detected capacity change from 0 to 2048 [ 144.104580][ T5403] UDF-fs: bad mount option "short`d" or missing value [ 148.270952][ T5425] loop3: detected capacity change from 0 to 512 [ 148.277639][ T5425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.464507][ T5425] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.530843][ T5425] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 148.539305][ T5425] EXT4-fs (loop3): orphan cleanup on readonly fs [ 148.550702][ T5425] __quota_error: 14 callbacks suppressed [ 148.550715][ T5425] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 148.566515][ T5425] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 148.575995][ T5425] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.314: Failed to acquire dquot type 1 [ 148.601474][ T5425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.314: bg 0: block 40: padding at end of block bitmap is not set [ 148.650332][ T5425] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 148.672776][ T5425] EXT4-fs (loop3): 1 truncate cleaned up [ 148.678475][ T5425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.001042][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 150.878738][ T5449] loop1: detected capacity change from 0 to 8 [ 150.919649][ T5449] SQUASHFS error: lzo decompression failed, data probably corrupt [ 150.960116][ T5449] SQUASHFS error: Failed to read block 0x91: -5 [ 150.966386][ T5449] SQUASHFS error: Unable to read metadata cache entry [8f] [ 151.026943][ T5449] SQUASHFS error: Unable to read inode 0x11f [ 152.268755][ T5462] loop4: detected capacity change from 0 to 1024 [ 152.275452][ T26] audit: type=1326 audit(1764767258.342:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 152.357647][ T5462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.400471][ T5462] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.413166][ T26] audit: type=1326 audit(1764767258.342:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 152.452023][ T26] audit: type=1326 audit(1764767258.342:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff48638f783 code=0x7ffc0000 [ 152.475351][ T26] audit: type=1326 audit(1764767258.352:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff48638e1ff code=0x7ffc0000 [ 152.497659][ T26] audit: type=1326 audit(1764767258.362:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff48638f7d7 code=0x7ffc0000 [ 152.625783][ T5466] loop0: detected capacity change from 0 to 128 [ 152.643602][ T26] audit: type=1326 audit(1764767258.362:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff48638df90 code=0x7ffc0000 [ 152.675062][ T26] audit: type=1326 audit(1764767258.362:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff48638f34b code=0x7ffc0000 [ 152.720921][ T5462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.765464][ T26] audit: type=1326 audit(1764767258.452:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff48638e3aa code=0x7ffc0000 [ 152.765825][ T5474] loop2: detected capacity change from 0 to 128 [ 152.988050][ T5474] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 153.043599][ T5474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.056351][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 153.265693][ T5485] loop3: detected capacity change from 0 to 1764 [ 153.754687][ T5489] loop4: detected capacity change from 0 to 128 [ 153.881535][ T5489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.893482][ T5489] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.799845][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 154.883366][ T5503] loop2: detected capacity change from 0 to 256 [ 155.618292][ T5503] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 157.123368][ T5523] loop1: detected capacity change from 0 to 256 [ 157.186872][ T5528] loop3: detected capacity change from 0 to 512 [ 157.246028][ T5523] FAT-fs (loop1): Directory bread(block 64) failed [ 157.270156][ T5523] FAT-fs (loop1): Directory bread(block 65) failed [ 157.285646][ T5528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.290144][ T5523] FAT-fs (loop1): Directory bread(block 66) failed [ 157.328446][ T5523] FAT-fs (loop1): Directory bread(block 67) failed [ 157.336867][ T5523] FAT-fs (loop1): Directory bread(block 68) failed [ 157.343656][ T5523] FAT-fs (loop1): Directory bread(block 69) failed [ 157.351075][ T5523] FAT-fs (loop1): Directory bread(block 70) failed [ 157.357604][ T5523] FAT-fs (loop1): Directory bread(block 71) failed [ 157.364220][ T5523] FAT-fs (loop1): Directory bread(block 72) failed [ 157.370824][ T5523] FAT-fs (loop1): Directory bread(block 73) failed [ 157.440213][ T1169] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 157.646101][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 157.661866][ T5538] loop0: detected capacity change from 0 to 8 [ 157.776160][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 157.788544][ T26] audit: type=1326 audit(1764767263.872:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.2.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f340c98f749 code=0x0 [ 157.854760][ T5538] SQUASHFS error: lzo decompression failed, data probably corrupt [ 157.892549][ T5541] loop2: detected capacity change from 0 to 1764 [ 158.064239][ T5538] SQUASHFS error: Failed to read block 0x91: -5 [ 158.191539][ T5538] SQUASHFS error: Unable to read metadata cache entry [8f] [ 158.198785][ T5538] SQUASHFS error: Unable to read inode 0x11f [ 158.313224][ T1169] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 158.321965][ T1169] usb 5-1: config 0 has no interface number 1 [ 158.328088][ T1169] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 158.337211][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.348277][ T1169] usb 5-1: config 0 descriptor?? [ 158.370136][ T4540] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.579242][ T1169] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 158.589269][ T4540] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.614513][ T4540] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.625898][ T4540] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.242878][ T5542] usb 5-1: USB disconnect, device number 3 [ 159.258197][ T5542] qcserial 5-1:0.2: device disconnected [ 160.100232][ T4540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.201087][ T4540] usb 2-1: config 0 descriptor?? [ 160.270283][ T4540] usb 2-1: can't set config #0, error -71 [ 160.565279][ T4540] usb 2-1: USB disconnect, device number 4 [ 161.296351][ T26] audit: type=1400 audit(1764767266.752:87): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5571 comm="syz.2.356" [ 162.497074][ T5598] loop0: detected capacity change from 0 to 512 [ 162.541298][ T5598] EXT4-fs: Ignoring removed i_version option [ 162.568686][ T5598] EXT4-fs: Mount option(s) incompatible with ext2 [ 164.290598][ T5608] af_packet: tpacket_rcv: packet too big, clamped from 111 to 4294967272. macoff=96 [ 164.450889][ T5615] netlink: 96 bytes leftover after parsing attributes in process `syz.4.369'. [ 164.518322][ T5619] loop2: detected capacity change from 0 to 8 [ 164.547174][ T5619] SQUASHFS error: lzo decompression failed, data probably corrupt [ 164.560766][ T5617] Bluetooth: hci0: too big key_count value 9728 [ 164.590728][ T5619] SQUASHFS error: Failed to read block 0x91: -5 [ 164.618721][ T5624] loop3: detected capacity change from 0 to 2048 [ 164.622060][ T5619] SQUASHFS error: Unable to read metadata cache entry [8f] [ 164.637062][ T5619] SQUASHFS error: Unable to read inode 0x11f [ 164.675597][ T5624] UDF-fs: bad mount option "" or missing value [ 166.378213][ T5637] loop0: detected capacity change from 0 to 128 [ 166.913201][ T5643] Invalid option length (1047677) for dns_resolver key [ 166.922698][ T5651] loop4: detected capacity change from 0 to 2048 [ 166.979162][ T5651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.067524][ T5651] UDF-fs: error (device loop4): udf_truncate_tail_extent: Extent after EOF in inode 1367 [ 167.297451][ T5658] netlink: 52 bytes leftover after parsing attributes in process `syz.0.383'. [ 167.315013][ T5662] loop4: detected capacity change from 0 to 256 [ 167.554671][ T5665] loop2: detected capacity change from 0 to 2048 [ 167.792161][ T5665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.456258][ T5674] loop0: detected capacity change from 0 to 1024 [ 168.616839][ T5678] loop1: detected capacity change from 0 to 512 [ 168.729564][ T5685] loop4: detected capacity change from 0 to 128 [ 168.834002][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.834112][ T5678] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.860669][ T5678] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 168.860849][ T5678] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 168.860867][ T5678] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.391: Failed to acquire dquot type 0 [ 169.243451][ T4360] hfsplus: b-tree write err: -5, ino 4 [ 169.602509][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 169.673808][ T5693] loop0: detected capacity change from 0 to 512 [ 169.756194][ T5693] EXT4-fs error (device loop0): __ext4_fill_super:5397: inode #2: comm syz.0.393: inode has both inline data and extents flags [ 169.756565][ T5693] EXT4-fs (loop0): get root inode failed [ 169.756578][ T5693] EXT4-fs (loop0): mount failed [ 169.884357][ T5690] tty tty1: ldisc open failed (-12), clearing slot 0 [ 170.089679][ T5701] Invalid option length (1047677) for dns_resolver key [ 170.147045][ T5705] loop0: detected capacity change from 0 to 8 [ 170.248069][ T5705] SQUASHFS error: lzo decompression failed, data probably corrupt [ 170.292824][ T5705] SQUASHFS error: Failed to read block 0x91: -5 [ 170.319236][ T5705] SQUASHFS error: Unable to read metadata cache entry [8f] [ 170.355941][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 170.384732][ T5705] SQUASHFS error: Unable to read inode 0x11f [ 170.413227][ T5715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.468807][ T5705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.400'. [ 170.626215][ T5714] loop1: detected capacity change from 0 to 8192 [ 172.006527][ T5745] loop1: detected capacity change from 0 to 512 [ 172.233099][ T5745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.243732][ T5745] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.389195][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 172.456101][ T5756] loop0: detected capacity change from 0 to 1024 [ 172.606156][ T5762] Invalid option length (1047677) for dns_resolver key [ 172.665532][ T4271] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 172.685030][ T4271] Bluetooth: hci4: Injecting HCI hardware error event [ 172.750383][ T4271] Bluetooth: hci4: hardware error 0x00 [ 173.307389][ T5770] loop2: detected capacity change from 0 to 128 [ 173.381309][ T5770] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 173.455737][ T5770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.558713][ T5542] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 173.784826][ T5542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.796912][ T5542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.834468][ T5542] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.868178][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 173.877288][ T5781] loop2: detected capacity change from 0 to 2048 [ 173.884262][ T5542] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.915130][ T5542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.930013][ T5781] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.965061][ T5542] usb 1-1: config 0 descriptor?? [ 174.036800][ T5781] UDF-fs: error (device loop2): udf_truncate_tail_extent: Extent after EOF in inode 1367 [ 174.189846][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 174.302745][ T5787] loop2: detected capacity change from 0 to 512 [ 174.422623][ T5542] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 174.474324][ T5787] EXT4-fs: Ignoring removed i_version option [ 174.485348][ T5787] EXT4-fs: Ignoring removed bh option [ 174.510840][ T5542] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 175.124328][ T5768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.135465][ T5768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.322352][ T4271] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 175.608425][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.697031][ T5787] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.879023][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 176.742316][ T22] usb 1-1: USB disconnect, device number 2 [ 177.085925][ T5808] loop4: detected capacity change from 0 to 2048 [ 177.188562][ T5808] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 177.214793][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 177.367406][ T5813] loop2: detected capacity change from 0 to 8192 [ 177.641088][ T5824] loop3: detected capacity change from 0 to 2048 [ 177.648968][ T5825] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 177.655742][ T5825] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.681736][ T4271] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 177.682157][ T5824] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.767907][ T5825] vhci_hcd vhci_hcd.0: Device attached [ 177.814587][ T5826] vhci_hcd: connection closed [ 177.818095][ T4413] vhci_hcd: stop threads [ 177.840213][ T4413] vhci_hcd: release socket [ 177.844687][ T4413] vhci_hcd: disconnect device [ 177.997305][ T5824] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 1367 [ 182.122399][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 182.124877][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 182.128416][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 182.134690][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 182.142101][ T4268] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 182.155102][ T4268] Bluetooth: hci2: Injecting HCI hardware error event [ 182.165132][ T4277] Bluetooth: hci2: hardware error 0x00 [ 182.530179][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 182.536367][ T5864] loop2: detected capacity change from 0 to 256 [ 182.627358][ T5864] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 183.997218][ T5876] loop2: detected capacity change from 0 to 512 [ 184.032928][ T5873] loop4: detected capacity change from 0 to 2048 [ 184.092245][ T5876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 184.168286][ T5876] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.217095][ T5873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.305365][ T26] audit: type=1800 audit(1764767289.671:88): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.454" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 184.417534][ T5883] loop3: detected capacity change from 0 to 128 [ 184.429934][ T4277] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 184.431628][ T5883] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.434564][ T5883] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.485857][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 184.545300][ T5886] loop0: detected capacity change from 0 to 512 [ 184.555217][ T5886] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 184.577557][ T5886] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.452: bg 0: block 104: invalid block bitmap [ 184.578884][ T5886] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 184.584322][ T5886] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.452: invalid indirect mapped block 1 (level 1) [ 184.584741][ T5886] EXT4-fs (loop0): 1 truncate cleaned up [ 184.584766][ T5886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 184.620766][ T26] audit: type=1800 audit(1764767289.961:89): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.452" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 184.705608][ T5883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 184.705697][ T5883] FAT-fs (loop3): Filesystem has been set read-only [ 184.744222][ T5883] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 184.744238][ T5883] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 184.744251][ T5883] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 184.747366][ T5883] Error parsing options; rc = [-22] [ 184.918514][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 187.352877][ T6011] kvm: emulating exchange as write [ 187.663011][ T26] audit: type=1326 audit(1764767292.805:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69498f749 code=0x7ffc0000 [ 187.721385][ T26] audit: type=1326 audit(1764767292.823:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69498f749 code=0x7ffc0000 [ 187.828352][ T26] audit: type=1326 audit(1764767292.823:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69498f749 code=0x7ffc0000 [ 187.913400][ T26] audit: type=1326 audit(1764767292.823:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69498f749 code=0x7ffc0000 [ 187.986363][ T26] audit: type=1326 audit(1764767292.823:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc69498f749 code=0x7ffc0000 [ 188.068582][ T26] audit: type=1326 audit(1764767292.823:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69498f749 code=0x7ffc0000 [ 188.161377][ T26] audit: type=1326 audit(1764767292.823:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69498f749 code=0x7ffc0000 [ 188.253161][ T26] audit: type=1326 audit(1764767292.842:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69498f749 code=0x7ffc0000 [ 189.125686][ T6082] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 189.125686][ T6082] The task syz.0.527 (6082) triggered the difference, watch for misbehavior. [ 192.731539][ T6179] kvm [6176]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 192.753019][ T6179] kvm [6176]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 193.393990][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 193.394004][ T26] audit: type=1326 audit(1764767298.165:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 193.474205][ T26] audit: type=1326 audit(1764767298.165:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 193.567497][ T26] audit: type=1326 audit(1764767298.212:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 193.640632][ T26] audit: type=1326 audit(1764767298.212:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 193.719866][ T26] audit: type=1326 audit(1764767298.212:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 193.822710][ T26] audit: type=1326 audit(1764767298.212:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 193.917078][ T26] audit: type=1326 audit(1764767298.212:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 193.982931][ T26] audit: type=1326 audit(1764767298.212:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 194.072765][ T26] audit: type=1326 audit(1764767298.212:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 194.180571][ T26] audit: type=1326 audit(1764767298.212:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 195.470644][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.476999][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.764219][ T6244] mmap: syz.4.595 (6244) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.342277][ T6252] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 196.406580][ T6252] kvm: pic: level sensitive irq not supported [ 196.406944][ T6252] kvm: pic: non byte read [ 196.464485][ T6252] kvm: pic: level sensitive irq not supported [ 196.464546][ T6252] kvm: pic: non byte read [ 196.485878][ T6252] kvm: pic: level sensitive irq not supported [ 196.485939][ T6252] kvm: pic: non byte read [ 196.512705][ T6252] kvm: pic: level sensitive irq not supported [ 196.512768][ T6252] kvm: pic: non byte read [ 196.545575][ T6252] kvm: pic: level sensitive irq not supported [ 196.545690][ T6252] kvm: pic: non byte read [ 196.568011][ T6252] kvm: pic: level sensitive irq not supported [ 196.568103][ T6252] kvm: pic: non byte read [ 196.587690][ T6252] kvm: pic: level sensitive irq not supported [ 196.587799][ T6252] kvm: pic: non byte read [ 196.672731][ T6252] kvm: pic: level sensitive irq not supported [ 196.672792][ T6252] kvm: pic: non byte read [ 196.723189][ T6252] kvm: pic: level sensitive irq not supported [ 196.723526][ T6252] kvm: pic: non byte read [ 196.761024][ T6252] kvm: pic: level sensitive irq not supported [ 196.761089][ T6252] kvm: pic: non byte read [ 198.812435][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 198.812448][ T26] audit: type=1326 audit(1764767303.236:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 198.897087][ T26] audit: type=1326 audit(1764767303.264:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 199.001537][ T26] audit: type=1326 audit(1764767303.264:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 199.061790][ T26] audit: type=1326 audit(1764767303.264:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 199.185315][ T26] audit: type=1326 audit(1764767303.264:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 199.239380][ T26] audit: type=1326 audit(1764767303.264:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 199.311240][ T26] audit: type=1326 audit(1764767303.264:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 199.432747][ T26] audit: type=1326 audit(1764767303.264:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 199.511955][ T26] audit: type=1326 audit(1764767303.264:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 200.350174][ T6383] syz.4.646 sent an empty control message without MSG_MORE. [ 200.436476][ T26] audit: type=1326 audit(1764767304.761:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48638f749 code=0x7ffc0000 [ 205.485645][ T6506] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 206.836438][ T26] kauditd_printk_skb: 162 callbacks suppressed [ 206.836450][ T26] audit: type=1326 audit(1764767310.748:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 206.908060][ T26] audit: type=1326 audit(1764767310.748:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 206.980909][ T26] audit: type=1326 audit(1764767310.776:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 207.078466][ T26] audit: type=1326 audit(1764767310.776:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 207.138429][ T26] audit: type=1326 audit(1764767310.776:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 207.271689][ T26] audit: type=1326 audit(1764767310.776:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 207.340392][ T26] audit: type=1326 audit(1764767310.776:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 207.414460][ T26] audit: type=1326 audit(1764767310.776:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 207.476193][ T26] audit: type=1326 audit(1764767310.776:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f433078f749 code=0x7ffc0000 [ 208.682611][ T6603] syz.1.729 (6603) used greatest stack depth: 20224 bytes left [ 209.683443][ T26] audit: type=1326 audit(1764767313.405:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340c98f749 code=0x7ffc0000 [ 212.225221][ T6711] device sit0 entered promiscuous mode [ 212.251318][ T6711] netlink: 'syz.4.770': attribute type 1 has an invalid length. [ 212.283295][ T6711] netlink: 1 bytes leftover after parsing attributes in process `syz.4.770'. [ 212.434163][ T6713] device syzkaller0 entered promiscuous mode [ 214.095553][ T6749] ./file0: Can't open blockdev [ 214.277548][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 215.581752][ T6776] loop1: detected capacity change from 0 to 128 [ 216.053757][ T6792] loop1: detected capacity change from 0 to 764 [ 216.502509][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 216.502522][ T26] audit: type=1326 audit(1764767319.785:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.2.807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f340c98f749 code=0x0 [ 216.879206][ T6818] netlink: 'syz.4.810': attribute type 3 has an invalid length. [ 217.812306][ T6848] device vlan0 entered promiscuous mode [ 218.621723][ T6874] block device autoloading is deprecated and will be removed. [ 219.386782][ T6884] fuse: root generation should be zero [ 219.427476][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 219.786072][ T6895] loop0: detected capacity change from 0 to 2048 [ 219.862634][ T6895] loop0: p2 < > p3 < p5 > p4 [ 219.867430][ T6895] loop0: partition table partially beyond EOD, truncated [ 219.901576][ T6895] loop0: p2 start 4278190080 is beyond EOD, truncated [ 219.929457][ T6895] loop0: p4 size 8192 extends beyond EOD, truncated [ 219.953191][ T6895] loop0: p5 size 8192 extends beyond EOD, truncated [ 219.979998][ T6891] team0 (unregistering): Port device team_slave_0 removed [ 220.076842][ T6891] team0 (unregistering): Port device team_slave_1 removed [ 220.309150][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 220.309335][ T4397] udevd[4397]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 220.334565][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 220.527075][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 221.022637][ T6935] device macvlan2 entered promiscuous mode [ 221.150833][ T6940] syz.3.857 uses obsolete (PF_INET,SOCK_PACKET) [ 221.739782][ T6960] capability: warning: `syz.4.865' uses 32-bit capabilities (legacy support in use) [ 221.765352][ T6960] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 221.785301][ T6960] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 221.803511][ T6962] overlayfs: unrecognized mount option "verity=require" or missing value [ 223.028459][ T7004] loop2: detected capacity change from 0 to 7 [ 223.036243][ T7002] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 223.046526][ T7000] loop1: detected capacity change from 0 to 8192 [ 223.049397][ T7004] Dev loop2: unable to read RDB block 7 [ 223.066332][ T7004] loop2: unable to read partition table [ 223.095913][ T7004] loop2: partition table beyond EOD, truncated [ 223.115147][ T7004] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 223.121528][ T7000] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.998458][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 224.690769][ T7050] loop1: detected capacity change from 0 to 16 [ 224.710370][ T7051] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 224.752724][ T7050] erofs: (device loop1): mounted with root inode @ nid 36. [ 225.348960][ T7073] raw_sendmsg: syz.1.913 forgot to set AF_INET. Fix it! [ 226.300806][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 226.365611][ T7112] 8021q: VLANs not supported on ip6_vti0 [ 226.649345][ T7121] kernel read not supported for file /¡sxt (pid: 7121 comm: syz.3.934) [ 226.660000][ T26] audit: type=1800 audit(1764767329.295:376): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.934" name=A17378741A dev="mqueue" ino=47499 res=0 errno=0 [ 227.176498][ T7136] 9p: Unknown uid 00000000004294967295 [ 227.888219][ T7156] loop0: detected capacity change from 0 to 128 [ 227.901331][ T7157] device ip6gre1 entered promiscuous mode [ 228.029206][ T4435] kworker/u4:11: attempt to access beyond end of device [ 228.029206][ T4435] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 228.499774][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.508012][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.867475][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.901948][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.175403][ T7170] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.184462][ T7170] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.193722][ T7170] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.202684][ T7170] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.502025][ T7191] device gre1 entered promiscuous mode [ 229.803229][ T7209] loop4: detected capacity change from 0 to 128 [ 229.850974][ T7209] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 230.032620][ T4360] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 230.586228][ T7239] loop1: detected capacity change from 0 to 128 [ 230.788889][ T7245] fuse: Bad value for 'fd' [ 231.076712][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.989'. [ 231.345386][ T7273] overlayfs: failed to clone upperpath [ 231.947133][ T7302] device bridge_slave_0 left promiscuous mode [ 231.962241][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.000719][ T7302] device bridge_slave_1 left promiscuous mode [ 232.018128][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.066608][ T7302] bond0: (slave bond_slave_0): Releasing backup interface [ 232.082385][ T7302] bond0: (slave bond_slave_1): Releasing backup interface [ 232.116087][ T7302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.136925][ T7302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.311093][ T7317] loop4: detected capacity change from 0 to 16 [ 232.365718][ T7317] erofs: (device loop4): mounted with root inode @ nid 36. [ 232.692298][ T7330] page:ffffea00013a6100 refcount:4 mapcount:1 mapping:ffff88801974bc38 index:0x0 pfn:0x4e984 [ 232.703732][ T7330] memcg:ffff88807a916000 [ 232.707990][ T7330] aops:shmem_aops ino:8a [ 232.712239][ T7330] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 232.722063][ T7330] raw: 00fff60000080015 ffff888026918248 ffffea000138df48 ffff88801974bc38 [ 232.730653][ T7330] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88807a916000 [ 232.739239][ T7330] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 232.746525][ T7330] page_owner tracks the page as allocated [ 232.753230][ T7330] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7331, tgid 7330 (syz.4.1021), ts 232668989041, free_ts 232210673745 [ 232.770959][ T7330] post_alloc_hook+0x173/0x1a0 [ 232.775737][ T7330] get_page_from_freelist+0x1a26/0x1ac0 [ 232.781292][ T7330] __alloc_pages+0x1df/0x4e0 [ 232.785887][ T7330] __folio_alloc+0xe/0x30 [ 232.790224][ T7330] vma_alloc_folio+0x4a3/0x900 [ 232.794996][ T7330] shmem_alloc_and_acct_folio+0x42e/0xb60 [ 232.800729][ T7330] shmem_get_folio_gfp+0x1361/0x3400 [ 232.806027][ T7330] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 232.811753][ T7330] udmabuf_create+0x981/0xf90 [ 232.816447][ T7330] udmabuf_ioctl+0x1d1/0x2c0 [ 232.821052][ T7330] __se_sys_ioctl+0xfa/0x170 [ 232.825660][ T7330] do_syscall_64+0x4c/0xa0 [ 232.830082][ T7330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.835991][ T7330] page last free stack trace: [ 232.840669][ T7330] free_unref_page_prepare+0x8b4/0x9a0 [ 232.846154][ T7330] free_unref_page_list+0xbb/0x8e0 [ 232.851277][ T7330] release_pages+0x1f92/0x2200 [ 232.856053][ T7330] tlb_flush_mmu+0xff/0x210 [ 232.860567][ T7330] tlb_finish_mmu+0xbd/0x1c0 [ 232.865165][ T7330] exit_mmap+0x343/0x8e0 [ 232.869413][ T7330] __mmput+0x118/0x3c0 [ 232.873488][ T7330] exit_mm+0x1e6/0x2c0 [ 232.877562][ T7330] do_exit+0x8c1/0x2400 [ 232.881730][ T7330] do_group_exit+0x217/0x2d0 [ 232.886331][ T7330] get_signal+0x1272/0x1350 [ 232.890843][ T7330] arch_do_signal_or_restart+0xb7/0x1240 [ 232.896481][ T7330] exit_to_user_mode_loop+0x70/0x110 [ 232.901777][ T7330] exit_to_user_mode_prepare+0xee/0x180 [ 232.907328][ T7330] syscall_exit_to_user_mode+0x16/0x40 [ 232.912802][ T7330] do_syscall_64+0x58/0xa0 [ 232.917326][ T7330] ------------[ cut here ]------------ [ 232.922784][ T7330] kernel BUG at mm/filemap.c:153! [ 232.927838][ T7330] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 232.933924][ T7330] CPU: 0 PID: 7330 Comm: syz.4.1021 Not tainted syzkaller #0 [ 232.941293][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.951361][ T7330] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 232.957609][ T7330] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 9a 7f 27 00 e9 0c fe ff ff e8 c0 50 d7 ff 48 89 df 48 c7 c6 40 ec 94 8a e8 e1 e0 11 00 <0f> 0b e8 aa 50 d7 ff 48 89 df 48 c7 c6 a0 f1 94 8a e8 cb e0 11 00 [ 232.977220][ T7330] RSP: 0018:ffffc9000d12f618 EFLAGS: 00010046 [ 232.983291][ T7330] RAX: 30265194523f1400 RBX: ffffea00013a6100 RCX: 30265194523f1400 [ 232.991265][ T7330] RDX: 0000000000000002 RSI: ffffffff8a8c1700 RDI: ffffffff8adef760 [ 232.999241][ T7330] RBP: ffffc9000d12f778 R08: dffffc0000000000 R09: fffffbfff1c3ed56 [ 233.007220][ T7330] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: dffffc0000000000 [ 233.007921][ T7335] loop2: detected capacity change from 0 to 512 [ 233.015179][ T7330] R13: dffffc0000000000 R14: ffff88801974bc38 R15: ffff88801974bc40 [ 233.015195][ T7330] FS: 00005555582ec500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 233.015208][ T7330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.015219][ T7330] CR2: 000000110c3a2dca CR3: 000000007cf0a000 CR4: 00000000003526f0 [ 233.015233][ T7330] Call Trace: [ 233.056078][ T7330] [ 233.059001][ T7330] __filemap_remove_folio+0xbb/0x860 [ 233.064279][ T7330] ? __rwlock_init+0x140/0x140 [ 233.069036][ T7330] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 233.076046][ T7330] ? _raw_spin_lock_irq+0xab/0xe0 [ 233.081057][ T7330] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 233.086414][ T7330] ? __folio_cancel_dirty+0xc0/0x580 [ 233.091713][ T7330] filemap_remove_folio+0xed/0x2c0 [ 233.096811][ T7330] truncate_inode_folio+0x59/0x70 [ 233.101821][ T7330] shmem_undo_range+0x4d2/0x2050 [ 233.106750][ T7330] ? shmem_truncate_range+0xb0/0xb0 [ 233.111939][ T7330] ? do_raw_spin_lock+0x11d/0x280 [ 233.116950][ T7330] ? __rwlock_init+0x140/0x140 [ 233.121699][ T7330] shmem_evict_inode+0x248/0xa40 [ 233.126621][ T7330] ? _raw_spin_unlock+0x24/0x40 [ 233.131460][ T7330] ? inode_wait_for_writeback+0x1b0/0x200 [ 233.137169][ T7330] ? shmem_free_in_core_inode+0xb0/0xb0 [ 233.142698][ T7330] ? do_raw_spin_lock+0x11d/0x280 [ 233.147709][ T7330] ? bit_waitqueue+0x30/0x30 [ 233.152285][ T7330] ? do_raw_spin_unlock+0x11d/0x230 [ 233.157468][ T7330] ? shmem_free_in_core_inode+0xb0/0xb0 [ 233.162998][ T7330] evict+0x485/0x870 [ 233.166878][ T7330] ? __lock_acquire+0x7c50/0x7c50 [ 233.171889][ T7330] ? proc_nr_inodes+0x2f0/0x2f0 [ 233.176722][ T7330] ? do_raw_spin_unlock+0x11d/0x230 [ 233.181906][ T7330] ? _raw_spin_unlock+0x24/0x40 [ 233.186741][ T7330] ? iput+0x768/0x980 [ 233.190709][ T7330] __dentry_kill+0x431/0x650 [ 233.195284][ T7330] dentry_kill+0xb8/0x290 [ 233.199599][ T7330] ? dput+0x37/0x1d0 [ 233.203478][ T7330] dput+0xfa/0x1d0 [ 233.207185][ T7330] __fput+0x5e0/0x920 [ 233.211152][ T7330] task_work_run+0x1ca/0x250 [ 233.215736][ T7330] ? task_work_cancel+0x230/0x230 [ 233.220741][ T7330] ? __close_range+0x1c5/0x730 [ 233.225491][ T7330] ? exit_to_user_mode_loop+0x3b/0x110 [ 233.230937][ T7330] exit_to_user_mode_loop+0xe6/0x110 [ 233.236205][ T7330] exit_to_user_mode_prepare+0xee/0x180 [ 233.241737][ T7330] syscall_exit_to_user_mode+0x16/0x40 [ 233.247183][ T7330] do_syscall_64+0x58/0xa0 [ 233.251583][ T7330] ? clear_bhb_loop+0x60/0xb0 [ 233.256243][ T7330] ? clear_bhb_loop+0x60/0xb0 [ 233.260901][ T7330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.266777][ T7330] RIP: 0033:0x7ff48638f749 [ 233.271184][ T7330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.290773][ T7330] RSP: 002b:00007ffd17e17a98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 233.299168][ T7330] RAX: 0000000000000000 RBX: 0000000000037db2 RCX: 00007ff48638f749 [ 233.307121][ T7330] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 233.315077][ T7330] RBP: 00007ff4865e7da0 R08: 0000000000000001 R09: 0000000a17e17d8f [ 233.323029][ T7330] R10: 0000001b2e720000 R11: 0000000000000246 R12: 00007ff4865e5fac [ 233.330982][ T7330] R13: 00007ff4865e5fa0 R14: ffffffffffffffff R15: 00007ffd17e17bb0 [ 233.338938][ T7330] [ 233.341946][ T7330] Modules linked in: [ 233.345834][ T7330] ---[ end trace 0000000000000000 ]--- [ 233.351269][ T7330] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 233.357498][ T7330] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 9a 7f 27 00 e9 0c fe ff ff e8 c0 50 d7 ff 48 89 df 48 c7 c6 40 ec 94 8a e8 e1 e0 11 00 <0f> 0b e8 aa 50 d7 ff 48 89 df 48 c7 c6 a0 f1 94 8a e8 cb e0 11 00 [ 233.377084][ T7330] RSP: 0018:ffffc9000d12f618 EFLAGS: 00010046 [ 233.383132][ T7330] RAX: 30265194523f1400 RBX: ffffea00013a6100 RCX: 30265194523f1400 [ 233.391087][ T7330] RDX: 0000000000000002 RSI: ffffffff8a8c1700 RDI: ffffffff8adef760 [ 233.399054][ T7330] RBP: ffffc9000d12f778 R08: dffffc0000000000 R09: fffffbfff1c3ed56 [ 233.407006][ T7330] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: dffffc0000000000 [ 233.414960][ T7330] R13: dffffc0000000000 R14: ffff88801974bc38 R15: ffff88801974bc40 [ 233.422913][ T7330] FS: 00005555582ec500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 233.431826][ T7330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.438390][ T7330] CR2: 000000110c3a2dca CR3: 000000007cf0a000 CR4: 00000000003526f0 [ 233.446351][ T7330] Kernel panic - not syncing: Fatal exception [ 233.452618][ T7330] Kernel Offset: disabled [ 233.456924][ T7330] Rebooting in 86400 seconds..