last executing test programs: 3.593331243s ago: executing program 3 (id=360): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 2.62565332s ago: executing program 3 (id=369): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d8, &(0x7f0000000b00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) fallocate(r0, 0x8, 0x0, 0x1000) 2.558607899s ago: executing program 1 (id=370): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 2.187276218s ago: executing program 1 (id=374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000180)={0x0, 0x38, 0xeef, 0x6, 0xfffd, 0x1f}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000080)) 2.002182187s ago: executing program 3 (id=375): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x8000001) fallocate(r0, 0x20, 0x2000, 0x140000) unlink(&(0x7f0000000280)='./file1\x00') 1.971771657s ago: executing program 1 (id=376): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000480)={0xffffffff, 0x9, 0x5, {0x0, 0x10001}, 0x213f8e66, 0x5}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 1.535623675s ago: executing program 4 (id=382): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}, @tfcpad={0x8, 0x16, 0x6}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 1.412692505s ago: executing program 0 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 1.310368255s ago: executing program 0 (id=386): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000854b9fcffa2d6d26fd0000009e0000001801000020646c2500000000002020207b1af8ff00010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.288343055s ago: executing program 4 (id=387): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0xd204}], 0x1, 0x0, 0x0, 0x0) 1.238227154s ago: executing program 1 (id=388): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x45) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r2, 0xffff0000}, 0x8) 1.175687144s ago: executing program 0 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x90000000) 1.155732474s ago: executing program 4 (id=390): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x300}, 0x8) 1.042604624s ago: executing program 4 (id=392): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0xb0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.039107784s ago: executing program 0 (id=393): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 817.785183ms ago: executing program 3 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod(&(0x7f0000000280)='./bus\x00', 0x1000, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) 778.359203ms ago: executing program 2 (id=395): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x80) sendto$packet(r0, &(0x7f0000000180)="0b031407e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 632.086612ms ago: executing program 3 (id=396): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004000000000008001500"], 0x4c}}, 0x0) 576.187672ms ago: executing program 2 (id=397): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x40003, 0x2) recvfrom$l2tp(r0, &(0x7f00000007c0)=""/250, 0xfa, 0x2, &(0x7f0000000280)={0x2, 0x0, @private}, 0x10) 549.211562ms ago: executing program 2 (id=398): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000056512f3e000000010000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a8048000480"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c00068008"], 0x34}}, 0x0) 499.719582ms ago: executing program 3 (id=399): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0xa0889a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c2, &(0x7f0000000d00)="$eJzs3b9qZFUYAPDvTiaTq1tMEBtF8IIWVmFja5MoK4iplBHUQoObBZmEhQQGNoJjqn0CS9/DR7Cx8Q0WbAW73WLkyP03f3CSHTcTRff3K8LHOec759x7kpk097tfvnYyvHs/i4vHjyLPs+jsxV48yWI7OtH6LroBAPx/PEkpfk9VmKXaipndzo1uDAC4MfX3/9/64gcA/uM+/vSzD/cPDu58VBR5vNJ/OBpkEXHycDSo+/fvxddxHEdxO/oxiUhTERvtJN2itB1vnoxHgzLz5Iufm6793yKq/N3ox/Zifvnz/Q8O7uwWtbn88WiwGS9GEfv3NttV+vHy8vy3l+THoBdvvTG3/53oxy9fxf04jrtR5s7yv90tivfS94+/+bxcpszPOjHYqsZVkn+QAAAAAAAAAAAAAAAAAAAAAABYr52iyOryPVX9nrKpqb+zMan6d4rW9mJ9njo/ayeq6wOltlrOOMUPbX2d20VRpGbgLL8br3a9WAAAAAAAAAAAAAAAAAAAAABKZw8e3To8Pj46PXtwPrx20FYDaB/rf9Z59uZaXo/z4eHG5RNurb7WfLWBcq9XDo5uN45Os3XcluXBxbTlhXI/a19iK6Ytn0QdtAez+jyTlNJTxrz0bj3p+fCwaLramzw8zJ62Vt4e3I/zXb14lkvOY3amqfqVmCxuPvLpVhfTe2u6871bS7v+SCmtNs87v9Zn1LRkVYmN1VbfbIKlF1gGeXkW+fQPv+z66fIJL/3I2Lj2hw4AAAAAAAAAAAAAAAAAALDU7KHfJZ0XV6Z2bmxTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPm73/vw3yiFhs+UswbpKvGtMEvTg9+5cvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOfAnwEAAP//hvFVwg==") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400)="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", 0x200) sendfile(r0, r1, 0x0, 0xe065) 438.322442ms ago: executing program 2 (id=400): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x90000009}) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xfff, 0x0, 0x0) 437.751392ms ago: executing program 4 (id=401): epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000300)={[{@namecase}, {@umask={'umask', 0x3d, 0x1}}, {@errors_continue}, {@time_offset={'time_offset', 0x3d, 0x7}}, {@gid}, {@umask={'umask', 0x3d, 0x3f}}, {@umask={'umask', 0x3d, 0xbbe}}, {@umask={'umask', 0x3d, 0x2}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x0, 0x1503, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 340.449211ms ago: executing program 1 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) 306.967221ms ago: executing program 2 (id=403): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$fb(r0, &(0x7f0000000040)=""/4096, 0x1000) r1 = syz_io_uring_setup(0x61b8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000ffa000), &(0x7f0000ffa000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000001040)=[@ioring_restriction_sqe_flags_required={0x3, 0xc}], 0x1) 196.402941ms ago: executing program 0 (id=404): getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 86.936831ms ago: executing program 2 (id=405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f000000a2c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="5705a4", 0x3}], 0x1}}], 0x1, 0x40805) 86.10324ms ago: executing program 1 (id=406): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 356.17µs ago: executing program 0 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x4000800) 0s ago: executing program 4 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. syzkaller login: [ 54.030866][ T4154] cgroup: Unknown subsys name 'net' [ 54.169288][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.622854][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.010920][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 57.097023][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 57.140279][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 57.215984][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 57.247003][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.254631][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.263011][ T4165] device bridge_slave_0 entered promiscuous mode [ 57.275439][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.284171][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.292052][ T4165] device bridge_slave_1 entered promiscuous mode [ 57.346338][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.353750][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.361496][ T4171] device bridge_slave_0 entered promiscuous mode [ 57.387239][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 57.397470][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.404646][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.413271][ T4171] device bridge_slave_1 entered promiscuous mode [ 57.425491][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.460045][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.482158][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.489551][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.497569][ T4169] device bridge_slave_0 entered promiscuous mode [ 57.532939][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.540006][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.549199][ T4169] device bridge_slave_1 entered promiscuous mode [ 57.558053][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.570413][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.623783][ T4165] team0: Port device team_slave_0 added [ 57.647769][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.654957][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.663272][ T4179] device bridge_slave_0 entered promiscuous mode [ 57.672675][ T4165] team0: Port device team_slave_1 added [ 57.678530][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.685634][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.693797][ T4179] device bridge_slave_1 entered promiscuous mode [ 57.705376][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.716733][ T4171] team0: Port device team_slave_0 added [ 57.754894][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.774177][ T4171] team0: Port device team_slave_1 added [ 57.801581][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.808989][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.817136][ T4170] device bridge_slave_0 entered promiscuous mode [ 57.833919][ T4169] team0: Port device team_slave_0 added [ 57.840547][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.847594][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.873619][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.887592][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.897041][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.904272][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.912041][ T4170] device bridge_slave_1 entered promiscuous mode [ 57.929827][ T4169] team0: Port device team_slave_1 added [ 57.935947][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.943231][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.969385][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.981241][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.988302][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.014686][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.027569][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.064588][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.071557][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.097709][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.123338][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.161874][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.179397][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.187245][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.214287][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.235663][ T4179] team0: Port device team_slave_0 added [ 58.245489][ T4165] device hsr_slave_0 entered promiscuous mode [ 58.252188][ T4165] device hsr_slave_1 entered promiscuous mode [ 58.274569][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.281528][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.307967][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.321303][ T4179] team0: Port device team_slave_1 added [ 58.346850][ T4171] device hsr_slave_0 entered promiscuous mode [ 58.354074][ T4171] device hsr_slave_1 entered promiscuous mode [ 58.360661][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.368518][ T4171] Cannot create hsr debugfs directory [ 58.395654][ T4170] team0: Port device team_slave_0 added [ 58.403720][ T4170] team0: Port device team_slave_1 added [ 58.422861][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.430034][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.456262][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.497439][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.504533][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.530915][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.542847][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.549793][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.575875][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.614940][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.621924][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.648026][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.661736][ T4169] device hsr_slave_0 entered promiscuous mode [ 58.668767][ T4169] device hsr_slave_1 entered promiscuous mode [ 58.673533][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 58.681400][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.689122][ T4169] Cannot create hsr debugfs directory [ 58.733433][ T4179] device hsr_slave_0 entered promiscuous mode [ 58.740058][ T4179] device hsr_slave_1 entered promiscuous mode [ 58.746557][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 58.752564][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 58.752772][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 58.760527][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 58.765476][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.765517][ T4179] Cannot create hsr debugfs directory [ 58.853132][ T4170] device hsr_slave_0 entered promiscuous mode [ 58.859783][ T4170] device hsr_slave_1 entered promiscuous mode [ 58.866822][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.874747][ T4170] Cannot create hsr debugfs directory [ 59.112013][ T4171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.123474][ T4171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.140168][ T4171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.153234][ T4171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.195613][ T4165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.217043][ T4165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.234129][ T4165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.255201][ T4165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.291764][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.319972][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.341345][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.358478][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.410268][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.433018][ T4179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.442344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.456269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.469084][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.478474][ T4179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.506613][ T4179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.516851][ T4179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.528745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.540706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.550416][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.557733][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.590672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.599814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.611067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.619958][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.627181][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.644189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.666706][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.677461][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.694482][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.714799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.725155][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.741245][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.756667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.766288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.777283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.785431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.793671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.802229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.811796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.820359][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.850153][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.858968][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.868705][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.877867][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.886655][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.895581][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.904457][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.911726][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.919797][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.950637][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.959833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.969935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.978683][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.985876][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.995541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.017440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.034047][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.053209][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.063628][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.090610][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.121536][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.129951][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.138605][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.148401][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.157183][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.181645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.190798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.200534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.210611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.220322][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.227463][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.237443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.250312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.259382][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.266599][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.275016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.288621][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.300222][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.335770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.344337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.353176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.361628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.371466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.380739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.389603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.397398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.404936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.414131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.422708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.431179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.440677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.462036][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.487675][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.498258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.509638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.522824][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.577141][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.591634][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.609917][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.646315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.657107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.666799][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.673915][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.681902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.690869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.699329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.708951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.718905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.735074][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.744333][ T4208] Bluetooth: hci0: command 0x041b tx timeout [ 60.753799][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.770296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.779765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.788722][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.795817][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.806953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.815745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.824320][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 60.830629][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 60.842746][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 60.849086][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.857805][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 60.864694][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.901472][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.917533][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.925229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.933827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.941260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.951088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.960412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.969556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.979338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.988600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.997363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.007878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.016086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.030567][ T4179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.042857][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.072821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.081828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.093289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.101709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.112691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.121319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.130472][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.137610][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.146803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.155838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.164827][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.171885][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.179652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.189375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.197482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.205441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.220177][ T4171] device veth0_vlan entered promiscuous mode [ 61.233685][ T4165] device veth0_vlan entered promiscuous mode [ 61.253325][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.268748][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.278867][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.293857][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.301769][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.319453][ T4171] device veth1_vlan entered promiscuous mode [ 61.350820][ T4165] device veth1_vlan entered promiscuous mode [ 61.360370][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.375198][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.386206][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.395286][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.403770][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.411210][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.420086][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.428727][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.441312][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.451912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.462044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.508014][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.519105][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.551401][ T4171] device veth0_macvtap entered promiscuous mode [ 61.564326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.575999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.584546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.594302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.603557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.611943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.620745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.629682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.638491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.647503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.656504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.667007][ T4169] device veth0_vlan entered promiscuous mode [ 61.680013][ T4171] device veth1_macvtap entered promiscuous mode [ 61.694112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.711874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.721958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.735693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.748888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.773225][ T4165] device veth0_macvtap entered promiscuous mode [ 61.795186][ T4169] device veth1_vlan entered promiscuous mode [ 61.810112][ T4165] device veth1_macvtap entered promiscuous mode [ 61.856787][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.866941][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.881512][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.890942][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.906021][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.916020][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.927275][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.947986][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.958942][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.970924][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.981622][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.003412][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.012979][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.021664][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.030786][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.043203][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.050725][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.058545][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.067610][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.078207][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.089277][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.100636][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.112092][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.121740][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.130826][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.139894][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.165472][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.174645][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.185145][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.194782][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.207392][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.221005][ T4169] device veth0_macvtap entered promiscuous mode [ 62.234869][ T4165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.244133][ T4165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.253936][ T4165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.264578][ T4165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.289205][ T4169] device veth1_macvtap entered promiscuous mode [ 62.326757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.336385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.386686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.396606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.407437][ T4179] device veth0_vlan entered promiscuous mode [ 62.446485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.454608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.463840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.472128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.481138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.491112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.501073][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.512537][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.523125][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.533881][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.546687][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.567857][ T4179] device veth1_vlan entered promiscuous mode [ 62.578324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.587338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.601418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.611887][ T4170] device veth0_vlan entered promiscuous mode [ 62.620574][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.631698][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.642066][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.652837][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.666822][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.708565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.718099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.727401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.743419][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.752838][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.761549][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.770744][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.800075][ T4170] device veth1_vlan entered promiscuous mode [ 62.810582][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.823072][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 62.829475][ T4179] device veth0_macvtap entered promiscuous mode [ 62.838369][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.845615][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.854518][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.863530][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.871943][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.902996][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 62.911916][ T4179] device veth1_macvtap entered promiscuous mode [ 62.918597][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 62.925809][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 62.931884][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 62.936135][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.946647][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.955121][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.970859][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.985788][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.001563][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.010036][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.020800][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.053831][ T4170] device veth0_macvtap entered promiscuous mode [ 63.062071][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.072118][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.083689][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.099366][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.109523][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.120294][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.130158][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.141124][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.156813][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.169817][ T4170] device veth1_macvtap entered promiscuous mode [ 63.178634][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.187773][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.196218][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.204658][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.213770][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.228157][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.248509][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.257673][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.279845][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.290833][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.301672][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.314037][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.324503][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.335944][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.348431][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.389592][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.404036][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.417575][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.424724][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.430005][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.439511][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.451878][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.460906][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.473618][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.484878][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.495166][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.505820][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.515947][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.528273][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.538719][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.550523][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.562015][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.572562][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.591729][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.602861][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.620186][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.639423][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.650083][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.665846][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.678920][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.692043][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.724249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.743005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.752105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.771993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.789951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.863725][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.886713][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.912215][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.939796][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.978005][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.997387][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.058110][ T4251] device vlan1 entered promiscuous mode [ 64.070401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.121985][ T4250] device vlan1 left promiscuous mode [ 64.141793][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.209808][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.260192][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.304573][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.329276][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.330814][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.375452][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.377944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.411929][ T4254] loop3: detected capacity change from 0 to 2048 [ 64.435221][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.463650][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.471503][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.498179][ T4258] loop0: detected capacity change from 0 to 256 [ 64.514369][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.564976][ T4254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.567681][ T4260] loop4: detected capacity change from 0 to 128 [ 64.611561][ T4258] MINIX-fs: mounting file system with errors, running fsck is recommended [ 64.699771][ T26] audit: type=1800 audit(1734641849.740:2): pid=4258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 64.729347][ T4264] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.751574][ T4260] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.862928][ T4260] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.902972][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 64.955405][ T4272] loop2: detected capacity change from 0 to 512 [ 64.964278][ T4271] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 64.987807][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 65.003847][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 65.010531][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 65.024168][ T4272] ======================================================= [ 65.024168][ T4272] WARNING: The mand mount option has been deprecated and [ 65.024168][ T4272] and is ignored by this kernel. Remove the mand [ 65.024168][ T4272] option from the mount to silence this warning. [ 65.024168][ T4272] ======================================================= [ 65.064099][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 65.086176][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 65.231488][ T4280] netlink: 'syz.1.17': attribute type 13 has an invalid length. [ 65.279152][ T4272] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.376855][ T4272] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.451009][ T4288] loop4: detected capacity change from 0 to 4096 [ 65.511959][ T4288] NILFS (loop4): invalid segment: Checksum error in segment payload [ 65.521201][ T4288] NILFS (loop4): trying rollback from an earlier position [ 65.605197][ T4288] NILFS (loop4): recovery complete [ 65.645799][ T4293] loop3: detected capacity change from 0 to 2048 [ 65.663391][ T4294] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.762404][ T26] audit: type=1800 audit(1734641850.800:3): pid=4288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 65.788448][ T4293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.877979][ T4280] gretap0: refused to change device tx_queue_len [ 65.905295][ T4280] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 65.987948][ T4296] loop0: detected capacity change from 0 to 128 [ 65.999879][ T4280] syz.1.17 (4280) used greatest stack depth: 19192 bytes left [ 66.089413][ T4298] loop2: detected capacity change from 0 to 64 [ 66.322019][ T4302] loop1: detected capacity change from 0 to 2048 [ 66.471793][ T4302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.483026][ T4305] [U] [ 66.485982][ T4305] [U] [ 66.488698][ T4305] [U] [ 66.491409][ T4305] [U] [ 66.593732][ T4305] [U] [ 66.596480][ T4305] [U] [ 66.599190][ T4305] [U] [ 66.601896][ T4305] [U] [ 66.720900][ T4305] [U] [ 66.723738][ T4305] [U] [ 66.726446][ T4305] [U] [ 66.729154][ T4305] [U] [ 66.788279][ T4305] [U] [ 66.791023][ T4305] [U] [ 66.793743][ T4305] [U] [ 66.796451][ T4305] [U] [ 66.871269][ T4305] [U] [ 66.874017][ T4305] [U] [ 66.876742][ T4305] [U] [ 66.879456][ T4305] [U] [ 66.971950][ T4307] loop3: detected capacity change from 0 to 8192 [ 67.003293][ T4305] [U] [ 67.006082][ T4305] [U] [ 67.008805][ T4305] [U] [ 67.011520][ T4305] [U] [ 67.038165][ T4312] loop1: detected capacity change from 0 to 64 [ 67.078606][ T4305] [U] [ 67.081354][ T4305] [U] [ 67.084077][ T4305] [U] [ 67.086790][ T4305] [U] [ 67.179383][ T4307] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 67.199562][ T4305] [U] [ 67.202306][ T4305] [U] [ 67.205019][ T4305] [U] [ 67.207734][ T4305] [U] [ 67.219182][ T4307] REISERFS (device loop3): using ordered data mode [ 67.277752][ T4307] reiserfs: using flush barriers [ 67.335273][ T4307] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.352959][ T4305] [U] [ 67.355701][ T4305] [U] [ 67.358417][ T4305] [U] [ 67.361129][ T4305] [U] [ 67.408306][ T4317] loop4: detected capacity change from 0 to 1024 [ 67.409545][ T4308] loop0: detected capacity change from 0 to 131072 [ 67.429835][ T4307] REISERFS (device loop3): checking transaction log (loop3) [ 67.436693][ T4305] [U] [ 67.462875][ T4308] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 67.475823][ T4308] F2FS-fs (loop0): invalid crc value [ 67.525657][ T4307] REISERFS (device loop3): Using r5 hash to sort names [ 67.557586][ T4308] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 67.631256][ T4172] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 67.639720][ T4307] reiserfs: enabling write barrier flush mode [ 67.643667][ T4172] CPU: 0 PID: 4172 Comm: kworker/u5:3 Not tainted 5.15.175-syzkaller #0 [ 67.655614][ T4172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 67.665706][ T4172] Workqueue: hci1 hci_rx_work [ 67.670457][ T4172] Call Trace: [ 67.673758][ T4172] [ 67.676711][ T4172] dump_stack_lvl+0x1e3/0x2d0 [ 67.681420][ T4172] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 67.687173][ T4172] ? panic+0x860/0x860 [ 67.691110][ T4308] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 67.691273][ T4172] ? sysfs_create_dir_ns+0x282/0x390 [ 67.704128][ T4172] sysfs_create_dir_ns+0x2c6/0x390 [ 67.709270][ T4172] ? sysfs_warn_dup+0xa0/0xa0 [ 67.713987][ T4172] ? do_raw_spin_unlock+0x137/0x8b0 [ 67.719226][ T4172] kobject_add_internal+0x6e0/0xe00 [ 67.724464][ T4172] kobject_add+0x14e/0x210 [ 67.728954][ T4172] ? device_add+0x3c2/0xfd0 [ 67.733502][ T4172] ? kobject_init+0x1d0/0x1d0 [ 67.738214][ T4172] ? __raw_spin_lock_init+0x41/0x100 [ 67.743620][ T4172] ? get_device_parent+0x128/0x400 [ 67.748854][ T4172] device_add+0x476/0xfd0 [ 67.753218][ T4172] hci_conn_add_sysfs+0xe4/0x1f0 [ 67.758180][ T4172] le_conn_complete_evt+0xc15/0x1500 [ 67.763570][ T4172] ? cs_le_create_conn+0x5f0/0x5f0 [ 67.768698][ T4172] hci_le_meta_evt+0x28c/0x3f50 [ 67.773554][ T4172] ? __lock_acquire+0x1ff0/0x1ff0 [ 67.778669][ T4172] ? __mutex_lock_common+0x444/0x25a0 [ 67.784050][ T4172] ? hci_remote_host_features_evt+0x280/0x280 [ 67.790132][ T4172] ? __mutex_unlock_slowpath+0x218/0x750 [ 67.795764][ T4172] ? hci_event_packet+0x3b4/0x1550 [ 67.800877][ T4172] ? mutex_unlock+0x10/0x10 [ 67.805382][ T4172] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 67.811376][ T4172] ? print_irqtrace_events+0x210/0x210 [ 67.816857][ T4172] hci_event_packet+0xc41/0x1550 [ 67.821823][ T4172] ? rcu_lock_release+0x20/0x20 [ 67.826689][ T4172] ? hci_send_to_monitor+0x99/0x4d0 [ 67.831899][ T4172] hci_rx_work+0x237/0xa10 [ 67.836329][ T4172] process_one_work+0x8a1/0x10c0 [ 67.841399][ T4172] ? worker_detach_from_pool+0x260/0x260 [ 67.847036][ T4172] ? _raw_spin_lock_irqsave+0x120/0x120 [ 67.852588][ T4172] ? kthread_data+0x4e/0xc0 [ 67.857210][ T4172] ? wq_worker_running+0x97/0x170 [ 67.862254][ T4172] worker_thread+0xaca/0x1280 [ 67.866969][ T4172] kthread+0x3f6/0x4f0 [ 67.871049][ T4172] ? rcu_lock_release+0x20/0x20 [ 67.875909][ T4172] ? kthread_blkcg+0xd0/0xd0 [ 67.880499][ T4172] ret_from_fork+0x1f/0x30 [ 67.884924][ T4172] [ 67.892469][ T4172] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.906068][ T4172] Bluetooth: hci1: failed to register connection device [ 67.967722][ T4307] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 67.984847][ T4317] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.005664][ T4317] EXT4-fs (loop4): Ignoring removed orlov option [ 68.097331][ T4317] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 68.222343][ T4330] loop2: detected capacity change from 0 to 32768 [ 68.390786][ T4317] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 68.425027][ T4330] XFS (loop2): Mounting V5 Filesystem [ 68.535081][ T4348] loop3: detected capacity change from 0 to 128 [ 68.643919][ T4330] XFS (loop2): Ending clean mount [ 68.692090][ T4330] XFS (loop2): Quotacheck needed: Please wait. [ 68.784875][ T4330] XFS (loop2): Quotacheck: Done. [ 68.989589][ T4170] XFS (loop2): Unmounting Filesystem [ 69.414832][ T4358] loop3: detected capacity change from 0 to 64 [ 69.582997][ T4327] loop1: detected capacity change from 0 to 65536 [ 69.610072][ T4350] loop4: detected capacity change from 0 to 32768 [ 69.768569][ T4327] XFS (loop1): Mounting V5 Filesystem [ 69.778566][ T4350] XFS (loop4): Mounting V5 Filesystem [ 69.879199][ T4327] XFS (loop1): Ending clean mount [ 69.906861][ T4327] XFS (loop1): Quotacheck needed: Please wait. [ 69.923694][ T4350] XFS (loop4): Ending clean mount [ 69.997377][ T4327] XFS (loop1): Quotacheck: Done. [ 70.059377][ T4327] XFS (loop1): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 70.117836][ T4390] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.139145][ T4179] XFS (loop4): Unmounting Filesystem [ 70.187879][ T4171] XFS (loop1): Unmounting Filesystem [ 70.265570][ T4367] loop0: detected capacity change from 0 to 32768 [ 70.299746][ T4367] XFS: ikeep mount option is deprecated. [ 70.413567][ T4367] XFS (loop0): Mounting V5 Filesystem [ 70.530529][ T4404] process 'syz.4.48' launched './file0' with NULL argv: empty string added [ 70.559489][ T4367] XFS (loop0): Ending clean mount [ 70.576490][ T4367] XFS (loop0): Quotacheck needed: Please wait. [ 70.603263][ T4408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 70.621557][ T4409] loop4: detected capacity change from 0 to 256 [ 70.678708][ T4367] XFS (loop0): Quotacheck: Done. [ 70.730083][ T4409] FAT-fs (loop4): Directory bread(block 64) failed [ 70.763771][ T4409] FAT-fs (loop4): Directory bread(block 65) failed [ 70.786983][ T4409] FAT-fs (loop4): Directory bread(block 66) failed [ 70.804797][ T4409] FAT-fs (loop4): Directory bread(block 67) failed [ 70.811492][ T4409] FAT-fs (loop4): Directory bread(block 68) failed [ 70.848007][ T4409] FAT-fs (loop4): Directory bread(block 69) failed [ 70.859386][ T4409] FAT-fs (loop4): Directory bread(block 70) failed [ 70.866553][ T4409] FAT-fs (loop4): Directory bread(block 71) failed [ 70.874861][ T4409] FAT-fs (loop4): Directory bread(block 72) failed [ 70.881552][ T4409] FAT-fs (loop4): Directory bread(block 73) failed [ 70.938818][ T4165] XFS (loop0): Unmounting Filesystem [ 70.995798][ T4418] syz.3.55 uses obsolete (PF_INET,SOCK_PACKET) [ 71.042188][ T4418] device ipvlan0 entered promiscuous mode [ 71.160759][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.181168][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.930361][ T4445] loop3: detected capacity change from 0 to 1024 [ 72.033720][ T4449] loop0: detected capacity change from 0 to 2048 [ 72.130392][ T4449] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 72.386604][ T4240] hfsplus: b-tree write err: -5, ino 4 [ 72.397983][ T4427] loop4: detected capacity change from 0 to 40427 [ 72.416816][ T4459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 72.435921][ T4459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.70'. [ 72.445244][ T4459] netlink: 56 bytes leftover after parsing attributes in process `syz.0.70'. [ 72.458876][ T4427] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 72.488232][ T4427] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 72.557314][ T4427] F2FS-fs (loop4): invalid crc value [ 72.604092][ T4427] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.646510][ T4466] binder: 4465:4466 ioctl c0306201 0 returned -14 [ 72.805487][ T4427] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 72.839374][ T4427] F2FS-fs (loop4): Start checkpoint disabled! [ 72.929862][ T4427] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 72.940625][ T4427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 73.122085][ T4427] attempt to access beyond end of device [ 73.122085][ T4427] loop4: rw=2049, want=45104, limit=40427 [ 73.258258][ T4483] loop0: detected capacity change from 0 to 1024 [ 73.342113][ T4485] loop2: detected capacity change from 0 to 16 [ 73.401885][ T144] attempt to access beyond end of device [ 73.401885][ T144] loop4: rw=2049, want=40976, limit=40427 [ 73.441225][ T4485] erofs: (device loop2): mounted with root inode @ nid 36. [ 73.483264][ T4483] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.585532][ T4485] attempt to access beyond end of device [ 73.585532][ T4485] loop2: rw=0, want=24, limit=16 [ 73.681610][ T4495] attempt to access beyond end of device [ 73.681610][ T4495] loop2: rw=0, want=24, limit=16 [ 73.848261][ T4156] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.861041][ T4497] loop4: detected capacity change from 0 to 64 [ 73.987950][ T4481] loop3: detected capacity change from 0 to 32768 [ 74.028884][ T4485] ODEBUG: Out of memory. ODEBUG disabled [ 74.209058][ T4499] loop0: detected capacity change from 0 to 8192 [ 74.262573][ T4156] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 74.282426][ T4501] loop4: detected capacity change from 0 to 64 [ 74.293453][ T4156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.369055][ T4156] usb 2-1: config 0 descriptor?? [ 74.438749][ T4156] cp210x 2-1:0.0: cp210x converter detected [ 74.478064][ T4485] syz.2.82 (4485): drop_caches: 2 [ 74.479537][ T4499] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 74.483826][ T4481] JBD2: Ignoring recovery information on journal [ 74.503820][ T4499] REISERFS (device loop0): using ordered data mode [ 74.551307][ T4499] reiserfs: using flush barriers [ 74.559370][ T4499] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.582557][ T4499] REISERFS (device loop0): checking transaction log (loop0) [ 74.591358][ T4499] REISERFS (device loop0): Using r5 hash to sort names [ 74.592730][ T4481] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 74.606902][ T4499] REISERFS (device loop0): using 3.5.x disk format [ 74.619787][ T4499] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 74.744404][ T4506] loop2: detected capacity change from 0 to 2048 [ 74.772410][ T4179] hfs: node 4:3 still has 2 user(s)! [ 74.824156][ T4506] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,data_err=ignore,max_batch_time=0x0000000000000007,sysvgroups,,errors=continue. Quota mode: none. [ 74.880752][ T4506] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.885739][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 74.899126][ T4156] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 74.990038][ T4506] fs-verity: sha512 using implementation "sha512-avx2" [ 75.191605][ T4156] usb 2-1: cp210x converter now attached to ttyUSB0 [ 75.247663][ T4521] syz.4.97[4521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.247966][ T4521] syz.4.97[4521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.278777][ T4519] device gretap0 entered promiscuous mode [ 75.340167][ T4519] device gretap0 left promiscuous mode [ 75.392548][ T4212] usb 2-1: USB disconnect, device number 2 [ 75.436088][ T4212] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 75.444609][ T4526] loop4: detected capacity change from 0 to 2048 [ 75.460333][ T4212] cp210x 2-1:0.0: device disconnected [ 75.530303][ T4530] loop2: detected capacity change from 0 to 1024 [ 75.571705][ T4526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.582726][ T4526] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.642754][ T4156] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.687680][ T4535] attempt to access beyond end of device [ 75.687680][ T4535] loop2: rw=0, want=5780, limit=1024 [ 75.736786][ T26] audit: type=1800 audit(1734641860.780:4): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.99" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 75.761932][ T4530] attempt to access beyond end of device [ 75.761932][ T4530] loop2: rw=0, want=5780, limit=1024 [ 75.775325][ T4529] attempt to access beyond end of device [ 75.775325][ T4529] loop2: rw=0, want=5780, limit=1024 [ 76.002573][ T4156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.022876][ T4156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.033634][ T4156] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 76.043573][ T4156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.064094][ T4156] usb 4-1: config 0 descriptor?? [ 76.278357][ T4547] loop2: detected capacity change from 0 to 32768 [ 76.340891][ T4547] XFS (loop2): Mounting V5 Filesystem [ 76.352676][ T4212] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.405700][ T4547] XFS (loop2): Ending clean mount [ 76.416723][ T4547] XFS (loop2): Quotacheck needed: Please wait. [ 76.446690][ T4547] XFS (loop2): Quotacheck: Done. [ 76.547739][ T4156] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 76.560210][ T4170] XFS (loop2): Unmounting Filesystem [ 76.577319][ T4156] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 76.592784][ T4212] usb 5-1: Using ep0 maxpacket: 8 [ 76.663503][ T4156] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 76.712456][ T4212] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 76.720698][ T4212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.750442][ T4212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.761010][ T4212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.771477][ T4212] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.784884][ T4212] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.794949][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.843482][ T4175] usb 4-1: USB disconnect, device number 2 [ 76.865427][ T4175] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 77.075348][ T4212] usb 5-1: usb_control_msg returned -32 [ 77.087701][ T4212] usbtmc 5-1:16.0: can't read capabilities [ 77.502631][ T4589] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 77.537111][ T4175] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.612597][ T26] audit: type=1326 audit(1734641862.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 77.648552][ T4598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.661691][ T26] audit: type=1326 audit(1734641862.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 77.711836][ T13] usb 5-1: USB disconnect, device number 2 [ 77.735127][ T26] audit: type=1326 audit(1734641862.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 77.808558][ T26] audit: type=1326 audit(1734641862.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 77.851823][ T4595] loop2: detected capacity change from 0 to 8192 [ 77.861294][ T26] audit: type=1326 audit(1734641862.680:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 77.885783][ T26] audit: type=1326 audit(1734641862.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 77.918208][ T26] audit: type=1326 audit(1734641862.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 77.949295][ T4595] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 77.952590][ T4175] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.974523][ T4595] REISERFS (device loop2): using ordered data mode [ 77.985461][ T4175] usb 1-1: config 1 has no interface number 0 [ 77.992046][ T4175] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.992202][ T4595] reiserfs: using flush barriers [ 78.010940][ T4595] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.027364][ T26] audit: type=1326 audit(1734641862.740:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 78.027407][ T26] audit: type=1326 audit(1734641862.750:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 78.077334][ T4595] REISERFS (device loop2): checking transaction log (loop2) [ 78.082449][ T4175] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 78.120167][ T4595] REISERFS (device loop2): Using r5 hash to sort names [ 78.136404][ T4607] loop1: detected capacity change from 0 to 4096 [ 78.141653][ T4175] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.163883][ T4595] reiserfs: enabling write barrier flush mode [ 78.197874][ T4595] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 78.238632][ T4607] NILFS (loop1): invalid segment: Checksum error in segment payload [ 78.271270][ T4607] NILFS (loop1): trying rollback from an earlier position [ 78.307533][ T4607] NILFS (loop1): recovery complete [ 78.342732][ T4175] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.355362][ T4612] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.388757][ T4175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.404719][ T4175] usb 1-1: Product: syz [ 78.428107][ T4175] usb 1-1: Manufacturer: syz [ 78.441315][ T4175] usb 1-1: SerialNumber: syz [ 78.740742][ T4622] loop2: detected capacity change from 0 to 256 [ 79.253604][ T4616] loop3: detected capacity change from 0 to 40427 [ 79.305878][ T4616] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 79.323787][ T4616] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 79.374012][ T4175] cdc_ncm 1-1:1.1: bind() failure [ 79.409665][ T4619] loop4: detected capacity change from 0 to 40427 [ 79.432212][ T4616] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.446587][ T4635] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.139'. [ 79.470976][ T4619] F2FS-fs (loop4): invalid crc value [ 79.503640][ T4630] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.139'. [ 79.529811][ T4619] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.565436][ T4616] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 79.581877][ T4616] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.636873][ T7] usb 1-1: USB disconnect, device number 2 [ 79.681978][ T4169] attempt to access beyond end of device [ 79.681978][ T4169] loop3: rw=2049, want=45104, limit=40427 [ 79.718606][ T4642] ALSA: mixer_oss: invalid OSS volume '²}8zõ§00000' [ 79.770777][ T4619] F2FS-fs (loop4): Start checkpoint disabled! [ 79.830059][ T4619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 80.368661][ T4223] attempt to access beyond end of device [ 80.368661][ T4223] loop4: rw=2049, want=40968, limit=40427 [ 80.390387][ T4657] netlink: 'syz.1.151': attribute type 3 has an invalid length. [ 80.399409][ T4657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.151'. [ 80.692431][ T4671] capability: warning: `syz.0.156' uses deprecated v2 capabilities in a way that may be insecure [ 80.870080][ T4674] loop1: detected capacity change from 0 to 512 [ 81.020850][ T4674] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.068880][ T4674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.129616][ T4674] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 81.174749][ T4674] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.249517][ T4674] EXT4-fs (loop1): 1 truncate cleaned up [ 81.288231][ T4674] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 81.384742][ T1108] cfg80211: failed to load regulatory.db [ 81.566198][ T4664] loop3: detected capacity change from 0 to 32768 [ 81.673156][ T4664] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.154 (4664) [ 81.798973][ T4664] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 81.839795][ T4664] BTRFS info (device loop3): using free space tree [ 81.857548][ T4664] BTRFS info (device loop3): has skinny extents [ 82.116744][ T4664] BTRFS info (device loop3): enabling ssd optimizations [ 82.241186][ T4698] loop4: detected capacity change from 0 to 32768 [ 82.944964][ T4730] loop4: detected capacity change from 0 to 512 [ 83.013333][ T4721] loop2: detected capacity change from 0 to 32768 [ 83.225850][ T4730] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.171: casefold flag without casefold feature [ 83.259023][ T4726] loop0: detected capacity change from 0 to 40427 [ 83.285856][ T4730] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.171: couldn't read orphan inode 15 (err -117) [ 83.350337][ T4730] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.392461][ T4726] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 83.398988][ T4726] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 83.485635][ T4721] XFS (loop2): Mounting V5 Filesystem [ 83.499403][ T4726] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 83.648124][ T4759] loop1: detected capacity change from 0 to 512 [ 83.655834][ T4726] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 83.663156][ T4726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.667289][ T4721] XFS (loop2): Ending clean mount [ 83.727416][ T4165] attempt to access beyond end of device [ 83.727416][ T4165] loop0: rw=2049, want=45104, limit=40427 [ 83.754481][ T4763] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.174'. [ 83.763954][ T4759] EXT4-fs (loop1): Ignoring removed nobh option [ 83.770291][ T4759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.783945][ T4762] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.174'. [ 83.786735][ T4721] XFS (loop2): Quotacheck needed: Please wait. [ 83.866991][ T4759] EXT4-fs (loop1): 1 truncate cleaned up [ 83.916911][ T4759] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 83.986941][ T4721] XFS (loop2): Quotacheck: Done. [ 84.169770][ T4170] XFS (loop2): Unmounting Filesystem [ 84.987356][ T4770] loop3: detected capacity change from 0 to 32768 [ 85.057769][ T4772] loop1: detected capacity change from 0 to 32768 [ 85.065500][ T4770] XFS: noikeep mount option is deprecated. [ 85.123869][ T4770] XFS (loop3): Mounting V5 Filesystem [ 85.184461][ T4772] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 85.204804][ T4802] loop4: detected capacity change from 0 to 64 [ 85.263064][ T4772] (syz.1.182,4772,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 85.291475][ T4772] (syz.1.182,4772,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 85.300882][ T4770] XFS (loop3): Ending clean mount [ 85.335579][ T4770] XFS (loop3): Quotacheck needed: Please wait. [ 85.351745][ T4805] loop2: detected capacity change from 0 to 512 [ 85.361072][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 85.361086][ T26] audit: type=1800 audit(1734641870.400:20): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.190" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 85.396852][ T4171] ocfs2: Unmounting device (7,1) on (node local) [ 85.415225][ T4770] XFS (loop3): Quotacheck: Done. [ 85.567896][ T4805] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.189: casefold flag without casefold feature [ 85.620777][ T4805] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.189: couldn't read orphan inode 15 (err -117) [ 85.646433][ T4805] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.671075][ T4809] loop4: detected capacity change from 0 to 4096 [ 85.697898][ T4169] XFS (loop3): Unmounting Filesystem [ 85.980344][ T4817] loop0: detected capacity change from 0 to 1024 [ 86.154152][ T4819] loop2: detected capacity change from 0 to 4096 [ 86.191529][ T4819] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 86.313950][ T4819] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 86.554019][ T4223] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 86.653854][ T4170] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 86.758254][ T4814] loop1: detected capacity change from 0 to 32768 [ 86.843130][ T4838] team0: No ports can be present during mode change [ 86.911767][ T4843] device wlan1 entered promiscuous mode [ 86.933690][ T4814] XFS (loop1): Mounting V5 Filesystem [ 86.997200][ T4853] netlink: 11 bytes leftover after parsing attributes in process `syz.2.205'. [ 87.027938][ T4747] kernel read not supported for file /swradio1 (pid: 4747 comm: kworker/0:17) [ 87.112534][ T4814] XFS (loop1): Ending clean mount [ 87.139164][ T4814] XFS (loop1): Quotacheck needed: Please wait. [ 87.210923][ T4857] loop3: detected capacity change from 0 to 2048 [ 87.305247][ T4814] XFS (loop1): Quotacheck: Done. [ 87.367223][ T4857] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.484902][ T4171] XFS (loop1): Unmounting Filesystem [ 87.744944][ T4876] syz.2.216[4876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.746365][ T4876] syz.2.216[4876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.032688][ T4864] loop0: detected capacity change from 0 to 32768 [ 88.121422][ T4864] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.210 (4864) [ 88.198335][ T4864] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 88.243961][ T4864] BTRFS info (device loop0): using free space tree [ 88.272733][ T4864] BTRFS info (device loop0): has skinny extents [ 88.398550][ T4896] MD5 Hash mismatch for [fe80::bb]:0->[fe80::aa]:20002 L3 index 0 [ 88.623273][ T4864] BTRFS info (device loop0): enabling ssd optimizations [ 89.051050][ T4879] loop3: detected capacity change from 0 to 40427 [ 89.134356][ T4879] F2FS-fs (loop3): inline encryption not supported [ 89.163931][ T4879] F2FS-fs (loop3): invalid crc value [ 89.204633][ T4879] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.362555][ T4879] F2FS-fs (loop3): Start checkpoint disabled! [ 89.391451][ T4879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 89.512399][ T4879] attempt to access beyond end of device [ 89.512399][ T4879] loop3: rw=2049, want=45104, limit=40427 [ 89.562338][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.651303][ T4213] attempt to access beyond end of device [ 89.651303][ T4213] loop3: rw=2049, want=40984, limit=40427 [ 89.812672][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 89.864736][ T4945] loop2: detected capacity change from 0 to 256 [ 89.954189][ T4918] loop4: detected capacity change from 0 to 32768 [ 89.962662][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 89.999284][ T26] audit: type=1804 audit(1734641875.040:21): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.235" name="/newroot/50/file1/file0" dev="loop2" ino=1048594 res=1 errno=0 [ 90.031937][ T4918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.226 (4918) [ 90.102645][ T4243] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.172887][ T4918] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 90.181634][ T4918] BTRFS info (device loop4): setting nodatacow, compression disabled [ 90.190203][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.199448][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.222741][ T13] usb 2-1: Product: syz [ 90.226957][ T13] usb 2-1: Manufacturer: syz [ 90.231579][ T13] usb 2-1: SerialNumber: syz [ 90.268614][ T13] usb 2-1: config 0 descriptor?? [ 90.282780][ T4918] BTRFS info (device loop4): max_inline at 0 [ 90.314808][ T13] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 90.324695][ T4918] BTRFS info (device loop4): enabling disk space caching [ 90.337378][ T13] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 90.362173][ T4918] BTRFS info (device loop4): setting datasum, datacow enabled [ 90.372526][ T4243] usb 1-1: Using ep0 maxpacket: 16 [ 90.396376][ T4918] BTRFS info (device loop4): turning on flush-on-commit [ 90.431447][ T4918] BTRFS info (device loop4): doing ref verification [ 90.449616][ T4918] BTRFS info (device loop4): force clearing of disk cache [ 90.462075][ T4918] BTRFS info (device loop4): enabling ssd optimizations [ 90.470949][ T4918] BTRFS info (device loop4): turning off barriers [ 90.486510][ T4918] BTRFS info (device loop4): max_inline at 4096 [ 90.502854][ T4918] BTRFS info (device loop4): disk space caching is enabled [ 90.515864][ T4243] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 90.536574][ T4243] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.544586][ T4918] BTRFS info (device loop4): has skinny extents [ 90.557411][ T4243] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.869677][ T4918] BTRFS info (device loop4): clearing free space tree [ 90.886642][ T4918] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.922003][ T4918] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.939288][ T4971] loop2: detected capacity change from 0 to 32768 [ 90.995733][ T4243] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.006855][ T4971] ERROR: (device loop2): diAllocAG: numfree > numinos [ 91.006855][ T4971] [ 91.018802][ T4971] ialloc: diAlloc returned -5! [ 91.033387][ T4243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.055124][ T4243] usb 1-1: Product: syz [ 91.074236][ T4243] usb 1-1: Manufacturer: syz [ 91.083293][ T13] em28xx 2-1:0.0: chip ID is em2874 [ 91.092838][ T4243] usb 1-1: SerialNumber: syz [ 91.215701][ T4977] xt_addrtype: ipv6 does not support BROADCAST matching [ 91.592601][ T4243] usb 1-1: 0:2 : does not exist [ 91.687757][ T13] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 91.741286][ T13] em28xx 2-1:0.0: board has no eeprom [ 91.882456][ T13] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 91.890320][ T13] em28xx 2-1:0.0: dvb set to bulk mode. [ 91.940264][ T13] usb 2-1: USB disconnect, device number 3 [ 91.967887][ T4745] em28xx 2-1:0.0: Binding DVB extension [ 91.984303][ T13] em28xx 2-1:0.0: Disconnecting em28xx [ 92.056889][ T4745] em28xx 2-1:0.0: Registering input extension [ 92.133765][ T4174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.195779][ T4995] device syzkaller1 entered promiscuous mode [ 92.222632][ T4745] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 92.244984][ T4745] Registered IR keymap rc-empty [ 92.255522][ T4745] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 92.286910][ T4745] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 92.326148][ T4745] em28xx 2-1:0.0: Input extension successfully initialized [ 92.335642][ T13] em28xx 2-1:0.0: Closing input extension [ 92.412450][ T4174] usb 4-1: Using ep0 maxpacket: 16 [ 92.432101][ T13] em28xx 2-1:0.0: Freeing device [ 92.532786][ T4174] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 92.550521][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.605507][ T4174] usb 4-1: config 0 descriptor?? [ 92.654726][ T4174] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 92.742522][ T4243] usb 1-1: USB disconnect, device number 3 [ 92.811308][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.125905][ T5003] loop1: detected capacity change from 0 to 32768 [ 93.170608][ T5003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.248 (5003) [ 93.244711][ T5003] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 93.267701][ T5003] BTRFS info (device loop1): using free space tree [ 93.292515][ T5003] BTRFS info (device loop1): has skinny extents [ 93.596935][ T5003] BTRFS info (device loop1): enabling ssd optimizations [ 93.687291][ T5017] loop2: detected capacity change from 0 to 40427 [ 93.754225][ T5017] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 93.775141][ T4174] usb 4-1: USB disconnect, device number 3 [ 93.794450][ T5017] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.833715][ T5017] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 93.892473][ T5017] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.003950][ T5022] loop0: detected capacity change from 0 to 32768 [ 94.138949][ T5017] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.150808][ T5022] XFS (loop0): Mounting V5 Filesystem [ 94.171169][ T5017] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.343946][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.344877][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.396211][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.443603][ T5022] XFS (loop0): Ending clean mount [ 94.449735][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.506203][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.572295][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.600996][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.615588][ T4165] XFS (loop0): Unmounting Filesystem [ 94.639768][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.639796][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 94.705527][ T5017] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 95.349037][ T5047] loop4: detected capacity change from 0 to 40427 [ 95.481607][ T5047] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 95.502405][ T5047] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.545728][ T26] audit: type=1326 audit(1734641880.590:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb7911d29 code=0x7ffc0000 [ 95.588378][ T5084] loop0: detected capacity change from 0 to 512 [ 95.598322][ T26] audit: type=1326 audit(1734641880.590:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb7911d29 code=0x7ffc0000 [ 95.637694][ T5047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.755991][ T26] audit: type=1326 audit(1734641880.610:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbfb7911d29 code=0x7ffc0000 [ 95.815382][ T5090] loop2: detected capacity change from 0 to 4096 [ 95.843553][ T5084] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.269: bg 0: block 248: padding at end of block bitmap is not set [ 95.919419][ T5084] Quota error (device loop0): write_blk: dquota write failed [ 95.939181][ T5084] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 95.959046][ T26] audit: type=1326 audit(1734641880.610:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbfb7911d63 code=0x7ffc0000 [ 95.977688][ T5084] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.269: Failed to acquire dquot type 1 [ 95.982429][ T5047] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 95.994967][ T5090] NILFS (loop2): invalid segment: Checksum error in segment payload [ 96.022295][ T5090] NILFS (loop2): trying rollback from an earlier position [ 96.024966][ T5047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.064992][ T26] audit: type=1326 audit(1734641880.610:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbfb79107df code=0x7ffc0000 [ 96.122696][ T5084] EXT4-fs (loop0): 1 truncate cleaned up [ 96.132779][ T5090] NILFS (loop2): recovery complete [ 96.138147][ T5084] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.159890][ T5096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.180390][ T26] audit: type=1326 audit(1734641880.630:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbfb7911db7 code=0x7ffc0000 [ 96.209845][ T5072] loop3: detected capacity change from 0 to 40427 [ 96.226744][ T5084] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.252598][ T26] audit: type=1326 audit(1734641880.630:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfb7910690 code=0x7ffc0000 [ 96.284936][ T26] audit: type=1326 audit(1734641880.630:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfb791192b code=0x7ffc0000 [ 96.289807][ T4179] attempt to access beyond end of device [ 96.289807][ T4179] loop4: rw=2049, want=45104, limit=40427 [ 96.372713][ T5072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.549658][ T5072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.571997][ T4156] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.832450][ T4156] usb 2-1: Using ep0 maxpacket: 32 [ 96.856016][ T4169] attempt to access beyond end of device [ 96.856016][ T4169] loop3: rw=2049, want=45104, limit=40427 [ 96.952638][ T4156] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 96.971608][ T4156] usb 2-1: config 0 has no interface number 0 [ 97.152573][ T4156] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 97.171953][ T4156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.203977][ T4156] usb 2-1: Product: syz [ 97.232334][ T4156] usb 2-1: Manufacturer: syz [ 97.237066][ T4156] usb 2-1: SerialNumber: syz [ 97.263059][ T4156] usb 2-1: config 0 descriptor?? [ 97.303795][ T4156] smsc95xx v2.0.0 [ 97.485563][ T5104] loop0: detected capacity change from 0 to 40427 [ 97.605821][ T5104] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 97.632577][ T5104] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.657833][ T5104] F2FS-fs (loop0): invalid crc value [ 97.717296][ T5104] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.829351][ T5111] loop2: detected capacity change from 0 to 32768 [ 97.877010][ T5104] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 97.895099][ T5104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 98.026772][ T5118] loop4: detected capacity change from 0 to 32768 [ 98.088275][ T4165] attempt to access beyond end of device [ 98.088275][ T4165] loop0: rw=2049, want=45104, limit=40427 [ 98.197821][ T5118] XFS (loop4): Mounting V5 Filesystem [ 98.271260][ T5118] XFS (loop4): Ending clean mount [ 98.284605][ T5118] XFS (loop4): Quotacheck needed: Please wait. [ 98.352841][ T5118] XFS (loop4): Quotacheck: Done. [ 98.402404][ T4156] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 98.432409][ T4990] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.442589][ T4156] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 98.471112][ T5118] XFS (loop4): User initiated shutdown received. [ 98.493001][ T5118] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 98.520881][ T4156] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 98.529645][ T5118] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 98.540528][ T4156] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 98.568577][ T4156] usb 2-1: USB disconnect, device number 4 [ 98.622429][ T4179] XFS (loop4): Unmounting Filesystem [ 98.697306][ T5150] loop2: detected capacity change from 0 to 512 [ 98.827609][ T5150] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 98.844549][ T5150] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.876835][ T5147] loop0: detected capacity change from 0 to 32768 [ 98.905793][ T5150] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 98.918478][ T5150] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #16: comm syz.2.287: iget: bogus i_mode (5) [ 98.931471][ T5147] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.285 (5147) [ 98.957724][ T5150] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.287: couldn't read orphan inode 16 (err -117) [ 98.973035][ T4990] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 98.992348][ T4990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.997694][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,jqfmt=vfsold,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,,errors=continue. Quota mode: writeback. [ 99.003003][ T4990] usb 4-1: Product: syz [ 99.028650][ T4990] usb 4-1: Manufacturer: syz [ 99.033408][ T4990] usb 4-1: SerialNumber: syz [ 99.046753][ T4990] usb 4-1: config 0 descriptor?? [ 99.051936][ T5147] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.060838][ T5147] BTRFS info (device loop0): using free space tree [ 99.069142][ T5147] BTRFS info (device loop0): has skinny extents [ 99.156779][ T5158] device syzkaller1 entered promiscuous mode [ 99.346168][ T5147] BTRFS info (device loop0): enabling ssd optimizations [ 99.603647][ T4990] mos7840 4-1:0.0: required endpoints missing [ 99.640443][ T4990] usb 4-1: USB disconnect, device number 4 [ 100.193537][ T5177] loop1: detected capacity change from 0 to 65536 [ 100.350248][ T5177] XFS (loop1): Mounting V5 Filesystem [ 100.464673][ T5177] XFS (loop1): Ending clean mount [ 100.475261][ T5177] XFS (loop1): Quotacheck needed: Please wait. [ 100.552024][ T4172] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 100.621979][ T5177] XFS (loop1): Quotacheck: Done. [ 100.861328][ T4171] XFS (loop1): Unmounting Filesystem [ 101.011158][ T5194] loop4: detected capacity change from 0 to 32768 [ 101.103107][ T5194] XFS: noikeep mount option is deprecated. [ 101.116233][ T5245] loop0: detected capacity change from 0 to 4096 [ 101.221712][ T5194] XFS (loop4): Mounting V5 Filesystem [ 101.235242][ T5258] loop3: detected capacity change from 0 to 128 [ 101.301589][ T5245] ntfs: volume version 3.1. [ 101.422387][ T5192] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.471481][ T5258] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.530002][ T5268] device syzkaller1 entered promiscuous mode [ 101.542029][ T5194] XFS (loop4): Ending clean mount [ 101.563941][ T5258] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.616044][ T5194] XFS (loop4): Quotacheck needed: Please wait. [ 101.662362][ T5192] usb 3-1: Using ep0 maxpacket: 32 [ 101.727720][ T5194] XFS (loop4): Quotacheck: Done. [ 101.739903][ T5258] syz.3.309 (pid 5258) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 101.952552][ T5192] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 101.971884][ T5192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.996039][ T5192] usb 3-1: Product: syz [ 102.015641][ T5192] usb 3-1: Manufacturer: syz [ 102.036153][ T5192] usb 3-1: SerialNumber: syz [ 102.059084][ T5192] usb 3-1: config 0 descriptor?? [ 102.064354][ T4179] XFS (loop4): Unmounting Filesystem [ 102.417453][ T5309] loop0: detected capacity change from 0 to 2048 [ 102.495276][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.513058][ T5309] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.804569][ T5192] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 103.014261][ T5192] usb 3-1: USB disconnect, device number 2 [ 103.092054][ T5334] loop3: detected capacity change from 0 to 64 [ 103.491081][ T5321] loop1: detected capacity change from 0 to 32768 [ 103.567565][ T5321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.322 (5321) [ 103.800648][ T5321] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 103.822918][ T5321] BTRFS info (device loop1): metadata ratio 2 [ 103.843691][ T5321] BTRFS info (device loop1): metadata ratio 227 [ 103.879211][ T5321] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 103.933902][ T5321] BTRFS info (device loop1): use lzo compression, level 0 [ 103.941121][ T5321] BTRFS info (device loop1): enabling auto defrag [ 103.958303][ T5321] BTRFS info (device loop1): max_inline at 0 [ 103.978576][ T5321] BTRFS info (device loop1): using free space tree [ 104.000446][ T5321] BTRFS info (device loop1): has skinny extents [ 104.159133][ T5349] loop3: detected capacity change from 0 to 32768 [ 104.198235][ T5374] Illegal XDP return value 4294967274, expect packet loss! [ 104.207161][ T5349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.326 (5349) [ 104.390943][ T5383] loop0: detected capacity change from 0 to 1024 [ 104.449168][ T5349] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 104.470195][ T5349] BTRFS info (device loop3): using free space tree [ 104.492484][ T5349] BTRFS info (device loop3): has skinny extents [ 104.523110][ T5321] BTRFS info (device loop1): enabling ssd optimizations [ 104.722688][ T5349] BTRFS info (device loop3): enabling ssd optimizations [ 105.037752][ T9] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 105.587393][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 105.587410][ T26] audit: type=1326 audit(1734641890.630:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 105.592674][ T5426] loop0: detected capacity change from 0 to 256 [ 105.622580][ T26] audit: type=1326 audit(1734641890.670:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 105.731821][ T26] audit: type=1326 audit(1734641890.690:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 105.843755][ T26] audit: type=1326 audit(1734641890.690:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 105.965206][ T26] audit: type=1326 audit(1734641890.690:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 106.013251][ T5406] loop2: detected capacity change from 0 to 40427 [ 106.022488][ T5420] Bluetooth: hci0: command 0x1407 tx timeout [ 106.032673][ T26] audit: type=1326 audit(1734641890.760:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 106.082371][ T26] audit: type=1326 audit(1734641890.760:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a7a8ed29 code=0x7ffc0000 [ 106.137051][ T5406] F2FS-fs (loop2): invalid crc value [ 106.179092][ T5406] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.318688][ T5406] F2FS-fs (loop2): Start checkpoint disabled! [ 106.352461][ T5406] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 106.643849][ T5432] loop1: detected capacity change from 0 to 32768 [ 106.731855][ T5432] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.346 (5432) [ 106.799960][ T5447] loop3: detected capacity change from 0 to 24 [ 106.820555][ T5432] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 106.861049][ T5432] BTRFS info (device loop1): setting nodatacow, compression disabled [ 106.877349][ T5435] loop4: detected capacity change from 0 to 32768 [ 106.884829][ T5432] BTRFS info (device loop1): max_inline at 0 [ 106.884883][ T5447] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 106.890840][ T5432] BTRFS info (device loop1): enabling disk space caching [ 106.890868][ T5432] BTRFS info (device loop1): turning off barriers [ 106.931412][ T5447] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 106.942416][ T5432] BTRFS info (device loop1): turning on flush-on-commit [ 106.953081][ T5432] BTRFS info (device loop1): doing ref verification [ 106.982332][ T5432] BTRFS info (device loop1): force clearing of disk cache [ 107.011669][ T5432] BTRFS info (device loop1): enabling ssd optimizations [ 107.057524][ T5432] BTRFS info (device loop1): max_inline at 4096 [ 107.092350][ T5432] BTRFS info (device loop1): disk space caching is enabled [ 107.100226][ T5432] BTRFS info (device loop1): has skinny extents [ 107.127924][ T9] attempt to access beyond end of device [ 107.127924][ T9] loop2: rw=2049, want=40968, limit=40427 [ 107.140230][ T5435] XFS (loop4): Mounting V5 Filesystem [ 107.257111][ T5435] XFS (loop4): Ending clean mount [ 107.531705][ T4179] XFS (loop4): Unmounting Filesystem [ 107.553437][ T5432] BTRFS info (device loop1): clearing free space tree [ 107.567676][ T5432] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.614580][ T5432] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 107.638608][ T5482] loop2: detected capacity change from 0 to 512 [ 107.807267][ T5482] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.351: casefold flag without casefold feature [ 107.856668][ T5482] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.351: couldn't read orphan inode 15 (err -117) [ 107.902330][ T5482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.239462][ T5501] device vlan0 entered promiscuous mode [ 108.374734][ T5501] team0: Port device vlan0 added [ 108.830894][ T5505] team0: Port device vlan0 removed [ 108.845949][ T5516] loop2: detected capacity change from 0 to 8192 [ 108.945076][ T5516] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 108.983032][ T5516] REISERFS (device loop2): using ordered data mode [ 108.989585][ T5516] reiserfs: using flush barriers [ 109.048128][ T5501] syz.3.360 (5501) used greatest stack depth: 19160 bytes left [ 109.057339][ T5516] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.100632][ T5508] loop0: detected capacity change from 0 to 32768 [ 109.121071][ T5527] loop3: detected capacity change from 0 to 512 [ 109.128540][ T5516] REISERFS (device loop2): checking transaction log (loop2) [ 109.160905][ T5516] REISERFS (device loop2): Using r5 hash to sort names [ 109.177543][ T5529] loop1: detected capacity change from 0 to 16 [ 109.199650][ T5516] reiserfs: enabling write barrier flush mode [ 109.225389][ T5516] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 109.249900][ T5529] erofs: (device loop1): mounted with root inode @ nid 36. [ 109.285906][ T5527] EXT4-fs (loop3): 1 orphan inode deleted [ 109.291691][ T5527] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 109.443740][ T5527] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.871447][ T5545] loop3: detected capacity change from 0 to 512 [ 110.058255][ T5545] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.375: corrupted inode contents [ 110.158042][ T5545] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.375: mark_inode_dirty error [ 110.188479][ T5545] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.375: corrupted inode contents [ 110.227688][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 110.228127][ T5545] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.375: mark_inode_dirty error [ 110.250696][ T5561] netlink: 'syz.4.382': attribute type 22 has an invalid length. [ 110.292519][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 110.297738][ T5545] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.375: corrupted inode contents [ 110.371613][ T5545] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 110.394113][ T5545] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.375: corrupted inode contents [ 110.420566][ T5545] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.375: mark_inode_dirty error [ 110.452337][ T5545] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 110.499946][ T5545] EXT4-fs (loop3): 1 truncate cleaned up [ 110.531295][ T5545] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.556121][ T5545] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.689794][ T5581] loop2: detected capacity change from 0 to 2048 [ 110.718716][ T5584] ALSA: mixer_oss: invalid OSS volume '' [ 110.749139][ T5545] Quota error (device loop3): write_blk: dquota write failed [ 110.758226][ T5545] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 110.783527][ T5581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.805113][ T5545] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.375: Failed to acquire dquot type 1 [ 111.126523][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 111.231833][ T5599] loop3: detected capacity change from 0 to 256 [ 111.286307][ T5603] loop4: detected capacity change from 0 to 256 [ 111.336420][ T26] audit: type=1804 audit(1734641896.380:55): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.399" name="/newroot/81/file1/file0" dev="loop3" ino=1048596 res=1 errno=0 [ 111.383735][ T5603] exfat: Deprecated parameter 'namecase' [ 111.468864][ T5603] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 111.671810][ T5611] [ 111.674176][ T5611] ===================================================== [ 111.681113][ T5611] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 111.688579][ T5611] 5.15.175-syzkaller #0 Not tainted [ 111.693786][ T5611] ----------------------------------------------------- [ 111.700728][ T5611] syz.2.405/5611 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 111.708296][ T5611] ffffffff8c80a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xc8/0x380 [ 111.716932][ T5611] [ 111.716932][ T5611] and this task is already holding: [ 111.724313][ T5611] ffff888029f8cdb8 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x380 [ 111.733217][ T5611] which would create a new lock dependency: [ 111.739110][ T5611] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 111.746857][ T5611] [ 111.746857][ T5611] but this new dependency connects a HARDIRQ-irq-safe lock: [ 111.756298][ T5611] (&dev->event_lock#2){-...}-{2:2} [ 111.756327][ T5611] [ 111.756327][ T5611] ... which became HARDIRQ-irq-safe at: [ 111.769198][ T5611] lock_acquire+0x1db/0x4f0 [ 111.773793][ T5611] _raw_spin_lock_irqsave+0xd1/0x120 [ 111.779197][ T5611] input_event+0x8a/0xd0 [ 111.783527][ T5611] psmouse_report_standard_packet+0x50/0x200 [ 111.789589][ T5611] psmouse_process_byte+0x45b/0x640 [ 111.794895][ T5611] psmouse_handle_byte+0x46/0x4b0 [ 111.800006][ T5611] psmouse_interrupt+0x697/0x10a0 [ 111.805112][ T5611] serio_interrupt+0x88/0x130 [ 111.809877][ T5611] i8042_interrupt+0x355/0x750 [ 111.814744][ T5611] __handle_irq_event_percpu+0x292/0xa70 [ 111.820462][ T5611] handle_irq_event+0xff/0x2b0 [ 111.825309][ T5611] handle_edge_irq+0x245/0xbf0 [ 111.830153][ T5611] __common_interrupt+0xd7/0x1f0 [ 111.835188][ T5611] common_interrupt+0xae/0xd0 [ 111.839950][ T5611] asm_common_interrupt+0x22/0x40 [ 111.845053][ T5611] lock_acquire+0x252/0x4f0 [ 111.849638][ T5611] _raw_spin_lock+0x2a/0x40 [ 111.854235][ T5611] usb_device_match+0x474/0x560 [ 111.859166][ T5611] __driver_attach+0x66/0x690 [ 111.863939][ T5611] bus_for_each_dev+0x17c/0x1f0 [ 111.868866][ T5611] bus_add_driver+0x334/0x600 [ 111.873626][ T5611] driver_register+0x2bf/0x3a0 [ 111.878470][ T5611] usb_register_driver+0x206/0x3d0 [ 111.883662][ T5611] do_one_initcall+0x22b/0x7a0 [ 111.888523][ T5611] do_initcall_level+0x157/0x210 [ 111.893540][ T5611] do_initcalls+0x49/0x90 [ 111.897951][ T5611] kernel_init_freeable+0x425/0x5c0 [ 111.903326][ T5611] kernel_init+0x19/0x290 [ 111.907764][ T5611] ret_from_fork+0x1f/0x30 [ 111.912263][ T5611] [ 111.912263][ T5611] to a HARDIRQ-irq-unsafe lock: [ 111.919280][ T5611] (tasklist_lock){.+.+}-{2:2} [ 111.919305][ T5611] [ 111.919305][ T5611] ... which became HARDIRQ-irq-unsafe at: [ 111.931928][ T5611] ... [ 111.931936][ T5611] lock_acquire+0x1db/0x4f0 [ 111.939089][ T5611] _raw_read_lock+0x32/0x40 [ 111.943782][ T5611] do_wait+0x2a7/0xaf0 [ 111.947935][ T5611] kernel_wait+0xe5/0x230 [ 111.952343][ T5611] call_usermodehelper_exec_work+0xb5/0x220 [ 111.958323][ T5611] process_one_work+0x8a1/0x10c0 [ 111.963341][ T5611] worker_thread+0xaca/0x1280 [ 111.968124][ T5611] kthread+0x3f6/0x4f0 [ 111.972284][ T5611] ret_from_fork+0x1f/0x30 [ 111.976797][ T5611] [ 111.976797][ T5611] other info that might help us debug this: [ 111.976797][ T5611] [ 111.987015][ T5611] Chain exists of: [ 111.987015][ T5611] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 111.987015][ T5611] [ 112.000241][ T5611] Possible interrupt unsafe locking scenario: [ 112.000241][ T5611] [ 112.008550][ T5611] CPU0 CPU1 [ 112.013911][ T5611] ---- ---- [ 112.019275][ T5611] lock(tasklist_lock); [ 112.023514][ T5611] local_irq_disable(); [ 112.030255][ T5611] lock(&dev->event_lock#2); [ 112.037468][ T5611] lock(&f->f_owner.lock); [ 112.044482][ T5611] [ 112.047926][ T5611] lock(&dev->event_lock#2); [ 112.052807][ T5611] [ 112.052807][ T5611] *** DEADLOCK *** [ 112.052807][ T5611] [ 112.060938][ T5611] 2 locks held by syz.2.405/5611: [ 112.065953][ T5611] #0: ffff88801fd53120 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x1e/0x40 [ 112.075120][ T5611] #1: ffff888029f8cdb8 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x380 [ 112.084447][ T5611] [ 112.084447][ T5611] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 112.094855][ T5611] -> (&dev->event_lock#2){-...}-{2:2} { [ 112.100679][ T5611] IN-HARDIRQ-W at: [ 112.104929][ T5611] lock_acquire+0x1db/0x4f0 [ 112.111616][ T5611] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.119101][ T5611] input_event+0x8a/0xd0 [ 112.125538][ T5611] psmouse_report_standard_packet+0x50/0x200 [ 112.133694][ T5611] psmouse_process_byte+0x45b/0x640 [ 112.141077][ T5611] psmouse_handle_byte+0x46/0x4b0 [ 112.148388][ T5611] psmouse_interrupt+0x697/0x10a0 [ 112.155615][ T5611] serio_interrupt+0x88/0x130 [ 112.162473][ T5611] i8042_interrupt+0x355/0x750 [ 112.169404][ T5611] __handle_irq_event_percpu+0x292/0xa70 [ 112.177250][ T5611] handle_irq_event+0xff/0x2b0 [ 112.184195][ T5611] handle_edge_irq+0x245/0xbf0 [ 112.191124][ T5611] __common_interrupt+0xd7/0x1f0 [ 112.198248][ T5611] common_interrupt+0xae/0xd0 [ 112.205089][ T5611] asm_common_interrupt+0x22/0x40 [ 112.212285][ T5611] lock_acquire+0x252/0x4f0 [ 112.218959][ T5611] _raw_spin_lock+0x2a/0x40 [ 112.225647][ T5611] usb_device_match+0x474/0x560 [ 112.232691][ T5611] __driver_attach+0x66/0x690 [ 112.239533][ T5611] bus_for_each_dev+0x17c/0x1f0 [ 112.246552][ T5611] bus_add_driver+0x334/0x600 [ 112.253422][ T5611] driver_register+0x2bf/0x3a0 [ 112.260350][ T5611] usb_register_driver+0x206/0x3d0 [ 112.267640][ T5611] do_one_initcall+0x22b/0x7a0 [ 112.274591][ T5611] do_initcall_level+0x157/0x210 [ 112.281715][ T5611] do_initcalls+0x49/0x90 [ 112.288210][ T5611] kernel_init_freeable+0x425/0x5c0 [ 112.295574][ T5611] kernel_init+0x19/0x290 [ 112.302068][ T5611] ret_from_fork+0x1f/0x30 [ 112.308684][ T5611] INITIAL USE at: [ 112.312850][ T5611] lock_acquire+0x1db/0x4f0 [ 112.319434][ T5611] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.326815][ T5611] input_inject_event+0xc0/0x300 [ 112.333852][ T5611] led_trigger_event+0x109/0x1e0 [ 112.340880][ T5611] kbd_led_trigger_activate+0xb9/0x100 [ 112.348512][ T5611] led_trigger_set+0x55a/0x970 [ 112.355357][ T5611] led_trigger_set_default+0x1c2/0x200 [ 112.362952][ T5611] led_classdev_register_ext+0x6cf/0x8d0 [ 112.370702][ T5611] input_leds_connect+0x503/0x740 [ 112.377844][ T5611] input_register_device+0xdae/0x1150 [ 112.385307][ T5611] atkbd_connect+0x7a7/0xa70 [ 112.392005][ T5611] serio_driver_probe+0x74/0x90 [ 112.398957][ T5611] really_probe+0x24e/0xb60 [ 112.405539][ T5611] __driver_probe_device+0x1a2/0x3d0 [ 112.412903][ T5611] driver_probe_device+0x50/0x420 [ 112.420008][ T5611] __driver_attach+0x479/0x690 [ 112.426869][ T5611] bus_for_each_dev+0x17c/0x1f0 [ 112.433841][ T5611] serio_handle_event+0x56a/0x8f0 [ 112.440962][ T5611] process_one_work+0x8a1/0x10c0 [ 112.447979][ T5611] worker_thread+0xaca/0x1280 [ 112.454734][ T5611] kthread+0x3f6/0x4f0 [ 112.460894][ T5611] ret_from_fork+0x1f/0x30 [ 112.467396][ T5611] } [ 112.470163][ T5611] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 112.479447][ T5611] -> (&client->buffer_lock){....}-{2:2} { [ 112.485357][ T5611] INITIAL USE at: [ 112.489427][ T5611] lock_acquire+0x1db/0x4f0 [ 112.496000][ T5611] _raw_spin_lock+0x2a/0x40 [ 112.502444][ T5611] evdev_pass_values+0xe7/0xb60 [ 112.509214][ T5611] evdev_events+0x198/0x2c0 [ 112.515660][ T5611] input_pass_values+0x873/0x1200 [ 112.522627][ T5611] input_handle_event+0xc9b/0x1600 [ 112.529680][ T5611] input_inject_event+0x1fc/0x300 [ 112.536643][ T5611] evdev_write+0x668/0x7c0 [ 112.542996][ T5611] vfs_write+0x30c/0xe50 [ 112.549145][ T5611] ksys_write+0x1a2/0x2c0 [ 112.555383][ T5611] do_syscall_64+0x3b/0xb0 [ 112.561877][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.569688][ T5611] } [ 112.572354][ T5611] ... key at: [] evdev_open.__key.23+0x0/0x20 [ 112.580695][ T5611] ... acquired at: [ 112.584663][ T5611] lock_acquire+0x1db/0x4f0 [ 112.589418][ T5611] _raw_spin_lock+0x2a/0x40 [ 112.594087][ T5611] evdev_pass_values+0xe7/0xb60 [ 112.599126][ T5611] evdev_events+0x198/0x2c0 [ 112.603796][ T5611] input_pass_values+0x873/0x1200 [ 112.609010][ T5611] input_handle_event+0xc9b/0x1600 [ 112.614295][ T5611] input_inject_event+0x1fc/0x300 [ 112.619495][ T5611] evdev_write+0x668/0x7c0 [ 112.624104][ T5611] vfs_write+0x30c/0xe50 [ 112.628521][ T5611] ksys_write+0x1a2/0x2c0 [ 112.633042][ T5611] do_syscall_64+0x3b/0xb0 [ 112.637713][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.643781][ T5611] [ 112.646098][ T5611] -> (&new->fa_lock){....}-{2:2} { [ 112.651301][ T5611] INITIAL USE at: [ 112.655286][ T5611] lock_acquire+0x1db/0x4f0 [ 112.661551][ T5611] _raw_write_lock_irq+0xcf/0x110 [ 112.668313][ T5611] fasync_remove_entry+0xfb/0x1d0 [ 112.675123][ T5611] lease_modify+0x19c/0x380 [ 112.681365][ T5611] locks_remove_file+0x5d3/0x1040 [ 112.688119][ T5611] __fput+0x368/0x8e0 [ 112.693836][ T5611] task_work_run+0x129/0x1a0 [ 112.700157][ T5611] exit_to_user_mode_loop+0x106/0x130 [ 112.707284][ T5611] exit_to_user_mode_prepare+0xb1/0x140 [ 112.714564][ T5611] syscall_exit_to_user_mode+0x5d/0x240 [ 112.721862][ T5611] do_syscall_64+0x47/0xb0 [ 112.728010][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.735683][ T5611] INITIAL READ USE at: [ 112.740179][ T5611] lock_acquire+0x1db/0x4f0 [ 112.746844][ T5611] _raw_read_lock_irqsave+0xd9/0x120 [ 112.754297][ T5611] kill_fasync+0x16a/0x490 [ 112.760875][ T5611] lease_break_callback+0x22/0x30 [ 112.768062][ T5611] __break_lease+0x4d1/0x13b0 [ 112.774928][ T5611] do_dentry_open+0x77a/0xfb0 [ 112.781771][ T5611] path_openat+0x2705/0x2f20 [ 112.788523][ T5611] do_filp_open+0x21c/0x460 [ 112.795187][ T5611] do_sys_openat2+0x13b/0x4f0 [ 112.802032][ T5611] __x64_sys_openat+0x243/0x290 [ 112.809063][ T5611] do_syscall_64+0x3b/0xb0 [ 112.815649][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.823802][ T5611] } [ 112.826398][ T5611] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 112.835156][ T5611] ... acquired at: [ 112.839061][ T5611] lock_acquire+0x1db/0x4f0 [ 112.843751][ T5611] _raw_read_lock_irqsave+0xd9/0x120 [ 112.849219][ T5611] kill_fasync+0x16a/0x490 [ 112.853805][ T5611] evdev_pass_values+0x5ad/0xb60 [ 112.858909][ T5611] evdev_events+0x198/0x2c0 [ 112.863577][ T5611] input_pass_values+0x873/0x1200 [ 112.868771][ T5611] input_handle_event+0xc9b/0x1600 [ 112.874050][ T5611] input_inject_event+0x1fc/0x300 [ 112.879242][ T5611] evdev_write+0x668/0x7c0 [ 112.883843][ T5611] vfs_write+0x30c/0xe50 [ 112.888270][ T5611] ksys_write+0x1a2/0x2c0 [ 112.892764][ T5611] do_syscall_64+0x3b/0xb0 [ 112.897355][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.903417][ T5611] [ 112.905757][ T5611] -> (&f->f_owner.lock){....}-{2:2} { [ 112.911130][ T5611] INITIAL USE at: [ 112.915022][ T5611] lock_acquire+0x1db/0x4f0 [ 112.921100][ T5611] _raw_write_lock_irq+0xcf/0x110 [ 112.927687][ T5611] __f_setown+0x38/0x350 [ 112.933500][ T5611] generic_setlease+0xf12/0x1390 [ 112.940015][ T5611] fcntl_setlease+0x341/0x3f0 [ 112.946259][ T5611] do_fcntl+0x10a/0x1600 [ 112.952071][ T5611] __se_sys_fcntl+0xd8/0x1b0 [ 112.958220][ T5611] do_syscall_64+0x3b/0xb0 [ 112.964200][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.971662][ T5611] INITIAL READ USE at: [ 112.975983][ T5611] lock_acquire+0x1db/0x4f0 [ 112.982490][ T5611] _raw_read_lock_irqsave+0xd9/0x120 [ 112.989878][ T5611] send_sigio+0x2f/0x330 [ 112.996139][ T5611] kill_fasync+0x20c/0x490 [ 113.002553][ T5611] lease_break_callback+0x22/0x30 [ 113.009573][ T5611] __break_lease+0x4d1/0x13b0 [ 113.016241][ T5611] do_dentry_open+0x77a/0xfb0 [ 113.022916][ T5611] path_openat+0x2705/0x2f20 [ 113.029514][ T5611] do_filp_open+0x21c/0x460 [ 113.036017][ T5611] do_sys_openat2+0x13b/0x4f0 [ 113.042687][ T5611] __x64_sys_openat+0x243/0x290 [ 113.049533][ T5611] do_syscall_64+0x3b/0xb0 [ 113.055958][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.063843][ T5611] } [ 113.066331][ T5611] ... key at: [] __alloc_file.__key+0x0/0x10 [ 113.074399][ T5611] ... acquired at: [ 113.078211][ T5611] lock_acquire+0x1db/0x4f0 [ 113.082881][ T5611] _raw_read_lock_irqsave+0xd9/0x120 [ 113.088332][ T5611] send_sigio+0x2f/0x330 [ 113.092737][ T5611] kill_fasync+0x20c/0x490 [ 113.097328][ T5611] lease_break_callback+0x22/0x30 [ 113.102540][ T5611] __break_lease+0x4d1/0x13b0 [ 113.107386][ T5611] do_dentry_open+0x77a/0xfb0 [ 113.112233][ T5611] path_openat+0x2705/0x2f20 [ 113.116999][ T5611] do_filp_open+0x21c/0x460 [ 113.121668][ T5611] do_sys_openat2+0x13b/0x4f0 [ 113.126511][ T5611] __x64_sys_openat+0x243/0x290 [ 113.131542][ T5611] do_syscall_64+0x3b/0xb0 [ 113.136129][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.142362][ T5611] [ 113.144697][ T5611] [ 113.144697][ T5611] the dependencies between the lock to be acquired [ 113.144705][ T5611] and HARDIRQ-irq-unsafe lock: [ 113.158540][ T5611] -> (tasklist_lock){.+.+}-{2:2} { [ 113.163658][ T5611] HARDIRQ-ON-R at: [ 113.167628][ T5611] lock_acquire+0x1db/0x4f0 [ 113.173798][ T5611] _raw_read_lock+0x32/0x40 [ 113.179967][ T5611] do_wait+0x2a7/0xaf0 [ 113.185678][ T5611] kernel_wait+0xe5/0x230 [ 113.191676][ T5611] call_usermodehelper_exec_work+0xb5/0x220 [ 113.199209][ T5611] process_one_work+0x8a1/0x10c0 [ 113.205792][ T5611] worker_thread+0xaca/0x1280 [ 113.212112][ T5611] kthread+0x3f6/0x4f0 [ 113.217840][ T5611] ret_from_fork+0x1f/0x30 [ 113.223913][ T5611] SOFTIRQ-ON-R at: [ 113.227885][ T5611] lock_acquire+0x1db/0x4f0 [ 113.234029][ T5611] _raw_read_lock+0x32/0x40 [ 113.240175][ T5611] do_wait+0x2a7/0xaf0 [ 113.245884][ T5611] kernel_wait+0xe5/0x230 [ 113.251854][ T5611] call_usermodehelper_exec_work+0xb5/0x220 [ 113.259386][ T5611] process_one_work+0x8a1/0x10c0 [ 113.265967][ T5611] worker_thread+0xaca/0x1280 [ 113.272290][ T5611] kthread+0x3f6/0x4f0 [ 113.278053][ T5611] ret_from_fork+0x1f/0x30 [ 113.284136][ T5611] INITIAL USE at: [ 113.288021][ T5611] lock_acquire+0x1db/0x4f0 [ 113.294096][ T5611] _raw_write_lock_irq+0xcf/0x110 [ 113.300810][ T5611] copy_process+0x22be/0x3ef0 [ 113.307049][ T5611] kernel_clone+0x210/0x960 [ 113.313131][ T5611] kernel_thread+0x168/0x1e0 [ 113.319276][ T5611] rest_init+0x21/0x330 [ 113.324989][ T5611] start_kernel+0x48c/0x540 [ 113.331052][ T5611] secondary_startup_64_no_verify+0xb1/0xbb [ 113.338615][ T5611] INITIAL READ USE at: [ 113.342934][ T5611] lock_acquire+0x1db/0x4f0 [ 113.349428][ T5611] _raw_read_lock+0x32/0x40 [ 113.355930][ T5611] do_wait+0x2a7/0xaf0 [ 113.362036][ T5611] kernel_wait+0xe5/0x230 [ 113.368362][ T5611] call_usermodehelper_exec_work+0xb5/0x220 [ 113.376282][ T5611] process_one_work+0x8a1/0x10c0 [ 113.383239][ T5611] worker_thread+0xaca/0x1280 [ 113.389930][ T5611] kthread+0x3f6/0x4f0 [ 113.396001][ T5611] ret_from_fork+0x1f/0x30 [ 113.402404][ T5611] } [ 113.404890][ T5611] ... key at: [] tasklist_lock+0x18/0x40 [ 113.412598][ T5611] ... acquired at: [ 113.416385][ T5611] lock_acquire+0x1db/0x4f0 [ 113.421051][ T5611] _raw_read_lock+0x32/0x40 [ 113.425731][ T5611] send_sigurg+0xc8/0x380 [ 113.430247][ T5611] sk_send_sigurg+0x6a/0xb0 [ 113.434914][ T5611] tcp_urg+0x2b8/0xb40 [ 113.439147][ T5611] tcp_rcv_established+0xe33/0x1e20 [ 113.444600][ T5611] tcp_v4_do_rcv+0x423/0x960 [ 113.449360][ T5611] __release_sock+0x198/0x4b0 [ 113.454221][ T5611] release_sock+0x5d/0x1c0 [ 113.458802][ T5611] tcp_sendmsg+0x36/0x40 [ 113.463236][ T5611] ____sys_sendmsg+0x59e/0x8f0 [ 113.468167][ T5611] ___sys_sendmsg+0x252/0x2e0 [ 113.473022][ T5611] __sys_sendmmsg+0x2bf/0x560 [ 113.477880][ T5611] __x64_sys_sendmmsg+0x9c/0xb0 [ 113.482906][ T5611] do_syscall_64+0x3b/0xb0 [ 113.487486][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.493546][ T5611] [ 113.495871][ T5611] [ 113.495871][ T5611] stack backtrace: [ 113.501743][ T5611] CPU: 1 PID: 5611 Comm: syz.2.405 Not tainted 5.15.175-syzkaller #0 [ 113.509793][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 113.519835][ T5611] Call Trace: [ 113.523110][ T5611] [ 113.526044][ T5611] dump_stack_lvl+0x1e3/0x2d0 [ 113.530716][ T5611] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 113.536338][ T5611] ? panic+0x860/0x860 [ 113.540405][ T5611] ? print_shortest_lock_dependencies+0xee/0x150 [ 113.546727][ T5611] validate_chain+0x4d01/0x5930 [ 113.551581][ T5611] ? reacquire_held_locks+0x660/0x660 [ 113.556948][ T5611] ? do_raw_spin_unlock+0x137/0x8b0 [ 113.562154][ T5611] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 113.568044][ T5611] ? __lock_acquire+0x1295/0x1ff0 [ 113.573065][ T5611] ? mark_lock+0x98/0x340 [ 113.577410][ T5611] __lock_acquire+0x1295/0x1ff0 [ 113.582275][ T5611] lock_acquire+0x1db/0x4f0 [ 113.586782][ T5611] ? send_sigurg+0xc8/0x380 [ 113.591301][ T5611] ? read_lock_is_recursive+0x10/0x10 [ 113.596668][ T5611] ? _raw_read_lock_irqsave+0xac/0x120 [ 113.602123][ T5611] ? lockdep_hardirqs_off+0x70/0x100 [ 113.607402][ T5611] ? do_raw_read_lock+0x38/0x80 [ 113.612251][ T5611] ? _raw_read_lock_irqsave+0xe5/0x120 [ 113.617737][ T5611] ? _raw_read_lock+0x40/0x40 [ 113.622439][ T5611] _raw_read_lock+0x32/0x40 [ 113.626951][ T5611] ? send_sigurg+0xc8/0x380 [ 113.631446][ T5611] send_sigurg+0xc8/0x380 [ 113.635770][ T5611] sk_send_sigurg+0x6a/0xb0 [ 113.640265][ T5611] tcp_urg+0x2b8/0xb40 [ 113.644340][ T5611] ? tcp_validate_incoming+0x2640/0x2640 [ 113.650033][ T5611] ? ktime_get+0x242/0x270 [ 113.654452][ T5611] ? inet_sk_rx_dst_set+0x1b6/0x240 [ 113.659651][ T5611] tcp_rcv_established+0xe33/0x1e20 [ 113.664872][ T5611] ? tcp_check_space+0x930/0x930 [ 113.669806][ T5611] tcp_v4_do_rcv+0x423/0x960 [ 113.674395][ T5611] __release_sock+0x198/0x4b0 [ 113.679073][ T5611] release_sock+0x5d/0x1c0 [ 113.683503][ T5611] tcp_sendmsg+0x36/0x40 [ 113.687758][ T5611] ? inet_send_prepare+0x250/0x250 [ 113.692861][ T5611] ____sys_sendmsg+0x59e/0x8f0 [ 113.697626][ T5611] ? iovec_from_user+0x300/0x390 [ 113.702569][ T5611] ? __sys_sendmsg_sock+0x30/0x30 [ 113.707596][ T5611] ___sys_sendmsg+0x252/0x2e0 [ 113.712291][ T5611] ? __sys_sendmsg+0x260/0x260 [ 113.717072][ T5611] ? __fdget+0x191/0x220 [ 113.721315][ T5611] __sys_sendmmsg+0x2bf/0x560 [ 113.725988][ T5611] ? __ia32_sys_sendmsg+0x80/0x80 [ 113.731019][ T5611] ? __lock_acquire+0x1ff0/0x1ff0 [ 113.736041][ T5611] ? __sys_connect+0x18a/0x410 [ 113.740806][ T5611] ? print_irqtrace_events+0x210/0x210 [ 113.746270][ T5611] ? vtime_user_exit+0x2d1/0x400 [ 113.751207][ T5611] ? syscall_enter_from_user_mode+0x2e/0x240 [ 113.757182][ T5611] __x64_sys_sendmmsg+0x9c/0xb0 [ 113.762056][ T5611] do_syscall_64+0x3b/0xb0 [ 113.766492][ T5611] ? clear_bhb_loop+0x15/0x70 [ 113.771177][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.777067][ T5611] RIP: 0033:0x7f977f593d29 [ 113.781478][ T5611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.801174][ T5611] RSP: 002b:00007f977d404038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.809671][ T5611] RAX: ffffffffffffffda RBX: 00007f977f783fa0 RCX: 00007f977f593d29 [ 113.817642][ T5611] RDX: 0000000000000001 RSI: 000000002000a2c0 RDI: 0000000000000003 [ 113.825613][ T5611] RBP: 00007f977f60faa8 R08: 0000000000000000 R09: 0000000000000000 [ 113.833579][ T5611] R10: 0000000000040805 R11: 0000000000000246 R12: 0000000000000000 [ 113.841571][ T5611] R13: 0000000000000000 R14: 00007f977f783fa0 R15: 00007ffe0dbdb6f8 [ 113.849548][ T5611] [ 113.876454][ T5615] device batadv0 entered promiscuous mode [ 113.936944][ T5615] device veth0_to_batadv entered promiscuous mode [ 113.951968][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready