last executing test programs: 34.156214187s ago: executing program 2 (id=110): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000000240)={[{@rootdir={'rootdir', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@anchor={'anchor', 0x3d, 0x4}}, {@shortad}, {@mode={'mode', 0x3d, 0x1}}, {@shortad}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2000005}}]}, 0x1, 0xc3d, &(0x7f0000000f00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00'], 0x1, 0x11aa, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) 31.948402959s ago: executing program 2 (id=115): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") userfaultfd(0x80001) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000000), 0x4) 31.450331491s ago: executing program 2 (id=117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 12.317792352s ago: executing program 2 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, 0x0) 11.134531838s ago: executing program 2 (id=162): socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000480)=0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5000000000000000100100000e"], 0x60}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB="3400000001040102000000000000000000006b00080004400000000008000540000000000500010001"], 0x34}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) syz_usb_connect(0x7, 0x223, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x74, 0xa7, 0xec, 0xff, 0x1b3d, 0x166, 0x1cbc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x211, 0x2, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0xc8, 0x1, 0x1, 0xda, 0xc6, 0xe8, 0x9, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x8, 0x5, 0x40}}]}}, {{0x9, 0x4, 0x12, 0x0, 0xd, 0x5d, 0x2c, 0x36, 0xff, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "b5af"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x4, 0x1}, {0x6}, [@country_functional={0x12, 0x24, 0x7, 0x57, 0x10, [0x6, 0x77c3, 0x9, 0x0, 0xc, 0x4]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x60, 0x2, 0x3}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x60, 0x5, "cd", "9a"}]}], [{{0x9, 0x5, 0x4, 0x1, 0x10, 0x1, 0x1, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x36, 0x85, [@generic={0x21, 0x6, "c912058a9442a6013bd33256aec873c11dae5ec9ec77488748fc0175b19660"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x2, 0x6, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x6, 0x4, 0x1}}, {{0x9, 0x5, 0xc, 0x1, 0x610, 0x5, 0xbc, 0x9}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x4, 0x3, 0x4, [@generic={0x61, 0x0, "41d891792c2caca485556c1598bfb25a614003f58a8c3278a90803bdd894e8c691ba4cd6832492c7d3728b0f6cb1575d155ba7b8b2af28c5c25b7f9ae9025389cf1b1737a44b275fec37be85ea0f01a92a1cc7ceeab05741d7db1029cf06e3"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x0, 0x5, 0x25}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x0, 0x0, 0xa1, [@generic={0x19, 0x9, "d69c6575646273457b16c9a1f4082c5545b608c9306275"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x95}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x7, 0xe, 0xc9, [@generic={0x6e, 0x3e, "99977920b70703a0b31146de3b483eeb719ea58df7672a81642eb90ed322e4e44bd954d044e02ddfc76b087f02c90e6fd7fb8dc1b2f622cbc5f125304e9f60a3560b6f8b72747f5e461a6b930b5880a854069a97252f0280ec8b7c472022ae96b80a233d7384a63b66c07296"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x6, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0xcde40e91f4e2cb8b, 0x8, 0x3c}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x1, 0x4, 0x20, 0x64}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1007}}]}) 9.288140309s ago: executing program 4 (id=165): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 8.77742249s ago: executing program 2 (id=166): sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a0, &(0x7f0000000840)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x51}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r4) 8.776811106s ago: executing program 3 (id=167): bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000001640)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1c, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000040) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 7.917868862s ago: executing program 0 (id=169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000003c0)='subflow_check_data_avail\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 7.708289237s ago: executing program 3 (id=170): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f00000002c0), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="06", 0x1}], 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) setpriority(0x1, 0x0, 0x8c1) setpriority(0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0xe184) setpriority(0x0, 0x0, 0x5) setpriority(0x2, 0xff, 0x9) setpriority(0x0, 0x0, 0x80) setpriority(0x0, 0x7fffffff, 0x3ff) setpriority(0x1, 0x1, 0x151d) 6.630375342s ago: executing program 0 (id=171): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000003180)="$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") ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) chdir(0x0) unshare(0x60480) open(&(0x7f0000000100)='./bus\x00', 0x121040, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) unlink(&(0x7f0000000080)='./bus\x00') 6.629829969s ago: executing program 3 (id=172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, 0x0) 6.578064799s ago: executing program 1 (id=173): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6.525127785s ago: executing program 4 (id=174): connect$inet(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 5.454353962s ago: executing program 4 (id=175): socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xfd7}, 0x48) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 5.421503021s ago: executing program 3 (id=176): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./bus\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="ca30046a95d924b89cd818fe6f1550a9301dc4be48ee3d897a30287c6d1b874bada068885827cbaffaf07763fddfcb057759a872798b0f71fd3715638dd0dac69fe339db70eec604e03d35903f46367f9513461082efbe568065167f73b9f51c46f41fce919e3aaf8d888170897d8cbce9718bd836c7bde5ba6407f53d0428a60c9c5bf65a58f9069e5ce1e67b1f243271e6cff08046dabdb59d5cc44c0a86d527796061c81efa4176f69d4867a9223d68be11158c1cb04e6b7e3021c8e736c58b02ec0afde7b154bbc5531281bc3af869eed0d2c3e241b1833a78ef00272f5bf0beaec07b9e176bc174420938ed597120dd69ef", @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000880)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x234) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) unlink(&(0x7f0000000000)='./file0/file0\x00') 5.334719667s ago: executing program 0 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) keyctl$join(0x1, &(0x7f0000000380)={'syz', 0x1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='qnx4\x00', 0x0, 0x0) 4.21836925s ago: executing program 0 (id=178): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x14, 0xfb, 0x66, 0x10, 0x61d, 0xc170, 0x855, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbe, 0x71, 0x9c, 0x0, [], [{{0x9, 0x5, 0x4, 0x13}}]}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r1, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000002240)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}}}, 0xb8}}, 0x0) write$cgroup_subtree(r3, &(0x7f00000009c0)=ANY=[], 0xda00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) readv(r4, &(0x7f0000001100)=[{&(0x7f0000000880)=""/1, 0x1}, {0x0, 0x2}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x4c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x2) 4.178193353s ago: executing program 4 (id=179): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_init1(0x0) 4.106881546s ago: executing program 1 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.946420336s ago: executing program 3 (id=181): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) 3.882442274s ago: executing program 1 (id=182): socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x3fffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x8}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}]}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 1.220728649s ago: executing program 1 (id=183): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x40}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x23, 0x0, 0x2, 0x0, 0x0, 0xed, 0x7}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'pim6reg0\x00', {}, {0xff}, 0x0, 0x2}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x5}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1.219982387s ago: executing program 3 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000007000000000000000100000000000000000000000000ddff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.093720608s ago: executing program 4 (id=185): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x8, 0x1, 0x9}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x8, 0x1, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 1.069253278s ago: executing program 0 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 253.343864ms ago: executing program 4 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, 0x0) 126.144775ms ago: executing program 1 (id=188): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDGKBDIACR(r0, 0x5451, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = accept4$packet(r1, 0x0, 0x0, 0x0) listen(r1, 0x7d24) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) 1.097498ms ago: executing program 0 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1d2, &(0x7f0000000580)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x2a065000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 0s ago: executing program 1 (id=190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x14ab4bb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 66.506709][ T5216] cgroup: Unknown subsys name 'net' [ 66.642015][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.212191][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.605403][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.611882][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.638773][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.676808][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.695059][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.703284][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.711919][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.720152][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.728319][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.736023][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.744947][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.753873][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.761921][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.764314][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.769873][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.785075][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.794420][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.805821][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.813613][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.821357][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.824560][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.829784][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.841664][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.843553][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.849430][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.857912][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.871648][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.871842][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.887162][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.897661][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.906254][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.914031][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.275092][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 72.436547][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 72.525761][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 72.538461][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 72.548837][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.558156][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.565599][ T5236] bridge_slave_0: entered allmulticast mode [ 72.572958][ T5236] bridge_slave_0: entered promiscuous mode [ 72.606285][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.613615][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.620833][ T5236] bridge_slave_1: entered allmulticast mode [ 72.627896][ T5236] bridge_slave_1: entered promiscuous mode [ 72.644368][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 72.716994][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.727022][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.734745][ T5228] bridge_slave_0: entered allmulticast mode [ 72.741495][ T5228] bridge_slave_0: entered promiscuous mode [ 72.767354][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.780179][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.790038][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.797709][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.805144][ T5228] bridge_slave_1: entered allmulticast mode [ 72.811906][ T5228] bridge_slave_1: entered promiscuous mode [ 72.881957][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.889231][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.896813][ T5234] bridge_slave_0: entered allmulticast mode [ 72.904189][ T5234] bridge_slave_0: entered promiscuous mode [ 72.924428][ T5236] team0: Port device team_slave_0 added [ 72.943383][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.950500][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.958269][ T5234] bridge_slave_1: entered allmulticast mode [ 72.965785][ T5234] bridge_slave_1: entered promiscuous mode [ 72.981722][ T5236] team0: Port device team_slave_1 added [ 72.992699][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.016358][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.023999][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.031158][ T5226] bridge_slave_0: entered allmulticast mode [ 73.038275][ T5226] bridge_slave_0: entered promiscuous mode [ 73.063854][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.098014][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.105374][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.113120][ T5226] bridge_slave_1: entered allmulticast mode [ 73.120317][ T5226] bridge_slave_1: entered promiscuous mode [ 73.128374][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.139155][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.165719][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.184877][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.191997][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.199883][ T5231] bridge_slave_0: entered allmulticast mode [ 73.206818][ T5231] bridge_slave_0: entered promiscuous mode [ 73.216790][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.244377][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.251372][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.279805][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.301483][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.309025][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.316503][ T5231] bridge_slave_1: entered allmulticast mode [ 73.323525][ T5231] bridge_slave_1: entered promiscuous mode [ 73.331514][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.355318][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.367642][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.394803][ T5228] team0: Port device team_slave_0 added [ 73.428542][ T5234] team0: Port device team_slave_0 added [ 73.443885][ T5228] team0: Port device team_slave_1 added [ 73.467584][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.478863][ T5234] team0: Port device team_slave_1 added [ 73.504822][ T5226] team0: Port device team_slave_0 added [ 73.521700][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.549699][ T5226] team0: Port device team_slave_1 added [ 73.567470][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.574690][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.600762][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.633970][ T5236] hsr_slave_0: entered promiscuous mode [ 73.640897][ T5236] hsr_slave_1: entered promiscuous mode [ 73.666515][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.674771][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.701477][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.725547][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.732665][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.758660][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.775894][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.782937][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.809610][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.824555][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.831540][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.857590][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.873977][ T5231] team0: Port device team_slave_0 added [ 73.880380][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.887464][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.913655][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.925213][ T5233] Bluetooth: hci2: command tx timeout [ 73.936653][ T5233] Bluetooth: hci3: command tx timeout [ 73.936663][ T5235] Bluetooth: hci0: command tx timeout [ 73.973449][ T5231] team0: Port device team_slave_1 added [ 73.998044][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.005531][ T5233] Bluetooth: hci4: command tx timeout [ 74.005549][ T5235] Bluetooth: hci1: command tx timeout [ 74.013169][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.043472][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.070594][ T5228] hsr_slave_0: entered promiscuous mode [ 74.076843][ T5228] hsr_slave_1: entered promiscuous mode [ 74.083356][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.091086][ T5228] Cannot create hsr debugfs directory [ 74.108713][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.116130][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.142225][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.177198][ T5234] hsr_slave_0: entered promiscuous mode [ 74.183896][ T5234] hsr_slave_1: entered promiscuous mode [ 74.190128][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.198075][ T5234] Cannot create hsr debugfs directory [ 74.250950][ T5226] hsr_slave_0: entered promiscuous mode [ 74.259583][ T5226] hsr_slave_1: entered promiscuous mode [ 74.266559][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.274224][ T5226] Cannot create hsr debugfs directory [ 74.348900][ T5231] hsr_slave_0: entered promiscuous mode [ 74.358583][ T5231] hsr_slave_1: entered promiscuous mode [ 74.365732][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.373850][ T5231] Cannot create hsr debugfs directory [ 74.632122][ T5236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.664302][ T5236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.696379][ T5236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.711121][ T5236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.736920][ T5228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.756829][ T5228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.777633][ T5228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.798519][ T5228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.818498][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.859526][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.889164][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.921237][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.933514][ T5234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.951916][ T5234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.986457][ T5234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.018633][ T5234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.095498][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.103194][ T5226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.112313][ T5226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.127799][ T5226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.155582][ T5226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.182174][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.238046][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.265220][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.285824][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.326576][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.333884][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.346669][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.353867][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.369045][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.389902][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.397112][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.407556][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.414719][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.429061][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.436227][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.461918][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.469106][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.508587][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.589922][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.629792][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.660480][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.685701][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.692945][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.727394][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.757715][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.764927][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.804809][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.811961][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.835804][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.843035][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.958050][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.000925][ T5234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.011632][ T5233] Bluetooth: hci0: command tx timeout [ 76.018217][ T55] Bluetooth: hci3: command tx timeout [ 76.023842][ T5235] Bluetooth: hci2: command tx timeout [ 76.083034][ T5233] Bluetooth: hci1: command tx timeout [ 76.088799][ T5233] Bluetooth: hci4: command tx timeout [ 76.141191][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.185250][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.313611][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.385375][ T5228] veth0_vlan: entered promiscuous mode [ 76.401622][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.419398][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.438735][ T5231] veth0_vlan: entered promiscuous mode [ 76.452333][ T5228] veth1_vlan: entered promiscuous mode [ 76.488840][ T5231] veth1_vlan: entered promiscuous mode [ 76.604374][ T5231] veth0_macvtap: entered promiscuous mode [ 76.612434][ T5228] veth0_macvtap: entered promiscuous mode [ 76.641053][ T5234] veth0_vlan: entered promiscuous mode [ 76.661199][ T5228] veth1_macvtap: entered promiscuous mode [ 76.669576][ T5226] veth0_vlan: entered promiscuous mode [ 76.695887][ T5234] veth1_vlan: entered promiscuous mode [ 76.718111][ T5231] veth1_macvtap: entered promiscuous mode [ 76.731206][ T5226] veth1_vlan: entered promiscuous mode [ 76.768668][ T5236] veth0_vlan: entered promiscuous mode [ 76.776944][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.790949][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.805848][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.817734][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.837643][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.847900][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.858608][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.873332][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.891357][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.900454][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.911014][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.920134][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.950242][ T5228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.959321][ T5228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.970083][ T5228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.980460][ T5228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.993249][ T5236] veth1_vlan: entered promiscuous mode [ 77.038352][ T5226] veth0_macvtap: entered promiscuous mode [ 77.059355][ T5234] veth0_macvtap: entered promiscuous mode [ 77.077879][ T5234] veth1_macvtap: entered promiscuous mode [ 77.089438][ T5226] veth1_macvtap: entered promiscuous mode [ 77.150223][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.161298][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.174192][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.184807][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.195953][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.207515][ T5236] veth0_macvtap: entered promiscuous mode [ 77.227299][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.240332][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.250722][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.261837][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.271895][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.284510][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.296248][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.308698][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.319860][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.329945][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.340809][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.354051][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.381114][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.391828][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.402143][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.413857][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.423737][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.435083][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.446704][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.458987][ T5234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468280][ T5234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.479735][ T5234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.488677][ T5234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.505305][ T5236] veth1_macvtap: entered promiscuous mode [ 77.515841][ T5226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.526977][ T5226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.536347][ T5226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.546011][ T5226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.572842][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.580911][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.589262][ T1837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.599123][ T1837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.656702][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.658933][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.678148][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.680510][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.689835][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.707311][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.717456][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.727950][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.737960][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.748423][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.759656][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.808914][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.822012][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.832575][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.843606][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.853591][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.864252][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.874225][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.884845][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.900905][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.938355][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.947475][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.976777][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.019239][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.083727][ T5235] Bluetooth: hci2: command tx timeout [ 78.089204][ T5235] Bluetooth: hci3: command tx timeout [ 78.095007][ T5233] Bluetooth: hci0: command tx timeout [ 78.141341][ T5236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.158166][ T5236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.169860][ T5235] Bluetooth: hci4: command tx timeout [ 78.180090][ T5233] Bluetooth: hci1: command tx timeout [ 78.189272][ T5236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.205853][ T5236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.265252][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.274056][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.387561][ T5314] hfs: can't find a HFS filesystem on dev nullb0 [ 78.696118][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.932486][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.067836][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.068984][ T5318] loop0: detected capacity change from 0 to 2048 [ 79.076088][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.812882][ T5324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.914765][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.926525][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.935961][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.944485][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.157631][ T5332] loop2: detected capacity change from 0 to 8 [ 80.164887][ T5233] Bluetooth: hci3: command tx timeout [ 80.171058][ T5233] Bluetooth: hci0: command tx timeout [ 80.177509][ T5233] Bluetooth: hci2: command tx timeout [ 80.243321][ T5235] Bluetooth: hci1: command tx timeout [ 80.250421][ T5233] Bluetooth: hci4: command tx timeout [ 80.565872][ T5332] loop2: detected capacity change from 0 to 32768 [ 81.150436][ T5341] read_mapping_page failed! [ 81.344385][ T5330] loop3: detected capacity change from 0 to 32768 [ 81.659732][ T5334] loop4: detected capacity change from 0 to 32768 [ 81.696538][ T5334] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (5334) [ 81.698063][ T5347] loop0: detected capacity change from 0 to 2048 [ 81.903284][ T5334] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.943788][ T5330] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 81.979523][ T5347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.000598][ T5334] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 82.032227][ T5355] loop1: detected capacity change from 0 to 128 [ 82.386237][ T5355] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 82.836378][ T5330] XFS (loop3): Ending clean mount [ 82.918270][ T5355] overlayfs: upper fs needs to support d_type. [ 82.947252][ T5334] BTRFS info (device loop4): rebuilding free space tree [ 82.994240][ T5355] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.051267][ T5355] overlayfs: failed to set xattr on upper [ 83.057170][ T5355] overlayfs: ...falling back to redirect_dir=nofollow. [ 83.064391][ T5355] overlayfs: ...falling back to index=off. [ 83.070246][ T5355] overlayfs: ...falling back to uuid=null. [ 83.086681][ T5231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.109293][ T5334] BTRFS info (device loop4): disabling free space tree [ 83.125132][ T5334] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.144407][ T5334] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.719924][ T5236] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 84.037772][ T5228] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 84.137166][ T5234] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh [ 84.178123][ T5234] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh [ 84.317289][ T5383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'. [ 84.340664][ T5383] vlan2: entered promiscuous mode [ 84.411669][ T5385] loop2: detected capacity change from 0 to 1024 [ 85.539063][ T5397] netlink: zone id is out of range [ 85.544982][ T5397] netlink: zone id is out of range [ 85.550387][ T5397] netlink: zone id is out of range [ 85.555757][ T5397] netlink: zone id is out of range [ 85.561081][ T5397] netlink: zone id is out of range [ 85.566434][ T5397] netlink: zone id is out of range [ 85.571767][ T5397] netlink: zone id is out of range [ 85.578134][ T5397] netlink: zone id is out of range [ 85.583619][ T5397] netlink: zone id is out of range [ 85.588936][ T5397] netlink: zone id is out of range [ 87.052733][ T5280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.112878][ T25] cfg80211: failed to load regulatory.db [ 87.773294][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 87.785013][ T5280] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 87.795804][ T5280] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.818231][ T5280] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.829176][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.840559][ T5280] usb 5-1: Product: Т [ 88.068700][ T5280] usb 5-1: Manufacturer: 㳶⒜茳蜿⃦拽避㒛ެ鄔匲搓쿒觲塘槔욦諐ꬳ춲᯳괢Ⴥﶕӵᠷ鮥蕆⸱챚忨閔屷팰⤻ᓻ捃蟆ූ皽갍鼊屿邠⏪Ꮙ暈辕砫斛჉໼臽祖띡バ堕㰑델ﲃꬴ䧳邊累曰爴겹猄틠 [ 88.550434][ T73] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.572118][ T5280] usb 5-1: SerialNumber: 膼泥璥赧ꊳ鐁麷騠လㅗ웬⦍⾈莱㋱婒ቺ᱾᷄쵱L؍莹훱㎄℮졝⚏ [ 88.752059][ T73] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.935462][ T73] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.100565][ T73] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.873376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.260731][ T5280] usb 5-1: 0:2 : does not exist [ 90.563826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.692551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.731762][ T5280] usb 5-1: USB disconnect, device number 2 [ 90.762838][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.777959][ T5249] udevd[5249]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.783695][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.897650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.021921][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.030286][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.038341][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.045899][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.414868][ T25] IPVS: starting estimator thread 0... [ 91.424203][ T5440] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.522864][ T5435] IPVS: using max 16 ests per chain, 38400 per kthread [ 91.534008][ T73] bridge_slave_1: left allmulticast mode [ 91.539892][ T73] bridge_slave_1: left promiscuous mode [ 91.590843][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.636551][ T73] bridge_slave_0: left allmulticast mode [ 91.638743][ T5420] loop2: detected capacity change from 0 to 40427 [ 91.646950][ T73] bridge_slave_0: left promiscuous mode [ 91.677007][ T5420] F2FS-fs (loop2): invalid crc value [ 91.680960][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.729088][ T5420] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.843373][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.243592][ T9] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 92.399859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.453687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.462122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.470650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.479288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.519361][ T9] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 92.528671][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.577683][ T9] usb 5-1: config 0 descriptor?? [ 92.640097][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.658835][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.671652][ T73] bond0 (unregistering): Released all slaves [ 92.841846][ T5440] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 92.848650][ T5440] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.896243][ T5440] vhci_hcd vhci_hcd.0: Device attached [ 92.929263][ T5425] chnl_net:caif_netlink_parms(): no params data found [ 92.937972][ T9] usb 5-1: string descriptor 0 read error: -71 [ 92.945795][ T5469] vhci_hcd: connection closed [ 92.948971][ T35] vhci_hcd: stop threads [ 92.966273][ T9] usb 5-1: USB disconnect, device number 3 [ 92.973453][ T35] vhci_hcd: release socket [ 92.983575][ T35] vhci_hcd: disconnect device [ 93.193379][ T73] hsr_slave_0: left promiscuous mode [ 93.199526][ T73] hsr_slave_1: left promiscuous mode [ 93.207271][ T5233] Bluetooth: hci4: command tx timeout [ 93.241782][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.250272][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.260420][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.269020][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.293497][ T73] veth1_macvtap: left promiscuous mode [ 93.299860][ T73] veth0_macvtap: left promiscuous mode [ 93.307444][ T73] veth1_vlan: left promiscuous mode [ 93.314039][ T73] veth0_vlan: left promiscuous mode [ 94.684418][ T5503] loop4: detected capacity change from 0 to 1024 [ 94.708220][ T5503] ======================================================= [ 94.708220][ T5503] WARNING: The mand mount option has been deprecated and [ 94.708220][ T5503] and is ignored by this kernel. Remove the mand [ 94.708220][ T5503] option from the mount to silence this warning. [ 94.708220][ T5503] ======================================================= [ 94.769400][ T5503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.809078][ T5503] UDF-fs: error (device loop4): udf_read_inode: (ino 832) failed !bh [ 94.818573][ T5503] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 95.092675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.285128][ T5233] Bluetooth: hci4: command tx timeout [ 95.346207][ T5509] loop3: detected capacity change from 0 to 2048 [ 95.419309][ T5509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.796340][ T5509] overlayfs: upper fs needs to support d_type. [ 95.858257][ T5509] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.009737][ T5509] overlayfs: failed to set xattr on upper [ 96.070523][ T5509] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.124448][ T5509] overlayfs: ...falling back to index=off. [ 96.130341][ T5509] overlayfs: ...falling back to uuid=null. [ 96.145427][ T5511] loop4: detected capacity change from 0 to 4096 [ 96.157324][ T5511] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 96.272830][ T5511] ntfs3: loop4: Failed to load $Extend (-22). [ 96.282775][ T5511] ntfs3: loop4: Failed to initialize $Extend. [ 96.297986][ T5514] loop2: detected capacity change from 0 to 2048 [ 96.368112][ T5514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.381886][ T5514] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.590647][ T5226] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 96.664717][ T5228] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 96.676268][ T5228] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 97.023664][ T73] team0 (unregistering): Port device team_slave_1 removed [ 97.104403][ T73] team0 (unregistering): Port device team_slave_0 removed [ 97.151594][ T5226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.375072][ T5233] Bluetooth: hci4: command tx timeout [ 97.767955][ T5527] kvm: emulating exchange as write [ 98.669590][ T5425] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.713967][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.721312][ T5425] bridge_slave_0: entered allmulticast mode [ 98.764591][ T5425] bridge_slave_0: entered promiscuous mode [ 98.774401][ T5425] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.782414][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.790013][ T5425] bridge_slave_1: entered allmulticast mode [ 98.797262][ T5425] bridge_slave_1: entered promiscuous mode [ 98.900827][ T5425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.944813][ T5425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.167526][ T5425] team0: Port device team_slave_0 added [ 99.236105][ T5425] team0: Port device team_slave_1 added [ 100.218608][ T5233] Bluetooth: hci4: command tx timeout [ 100.337947][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.361160][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.370123][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.378399][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.395201][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 100.403662][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.534420][ T5550] vlan2: entered promiscuous mode [ 100.539571][ T5550] team0: entered promiscuous mode [ 100.614287][ T5550] team_slave_0: entered promiscuous mode [ 100.620343][ T5550] team_slave_1: entered promiscuous mode [ 100.670718][ T5550] team0: Device vlan2 is already an upper device of the team interface [ 100.753211][ T5550] team0: left promiscuous mode [ 100.760054][ T5550] team_slave_0: left promiscuous mode [ 100.768892][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.778302][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.787376][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.796716][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.805474][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.814361][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.841622][ T5550] team_slave_1: left promiscuous mode [ 100.864550][ T5425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.871897][ T5425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.897882][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.907618][ T5425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.922130][ T5425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.929513][ T5425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.957338][ T5425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.360503][ T5425] hsr_slave_0: entered promiscuous mode [ 101.367358][ T5425] hsr_slave_1: entered promiscuous mode [ 101.380589][ T5425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.388708][ T5425] Cannot create hsr debugfs directory [ 102.109664][ T73] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.264847][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.484320][ T5233] Bluetooth: hci1: command tx timeout [ 102.591315][ T73] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.602490][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 102.656019][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.727962][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.892518][ T5233] Bluetooth: hci2: command tx timeout [ 102.912124][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 103.009774][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.045968][ T9] usb 3-1: config 0 descriptor?? [ 103.151567][ T73] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.396880][ T73] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.947462][ T9] apple 0003:05AC:0247.0001: unknown main item tag 0x0 [ 104.137263][ T9] apple 0003:05AC:0247.0001: unknown main item tag 0x0 [ 104.242094][ T9] apple 0003:05AC:0247.0001: item fetching failed at offset 2/160 [ 104.423092][ T9] apple 0003:05AC:0247.0001: parse failed [ 104.428994][ T9] apple 0003:05AC:0247.0001: probe with driver apple failed with error -22 [ 104.454230][ T9] usb 3-1: USB disconnect, device number 2 [ 104.566986][ T5545] chnl_net:caif_netlink_parms(): no params data found [ 104.576136][ T5233] Bluetooth: hci1: command tx timeout [ 104.718852][ T5609] loop4: detected capacity change from 0 to 256 [ 104.729781][ T5554] chnl_net:caif_netlink_parms(): no params data found [ 104.904304][ T73] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.963785][ T5233] Bluetooth: hci2: command tx timeout [ 105.141069][ T73] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.256022][ T73] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.277263][ T5622] netlink: 80 bytes leftover after parsing attributes in process `syz.4.62'. [ 105.309482][ T5545] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.327431][ T5545] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.340694][ T5545] bridge_slave_0: entered allmulticast mode [ 105.357306][ T5545] bridge_slave_0: entered promiscuous mode [ 105.408107][ T5622] netlink: 6 bytes leftover after parsing attributes in process `syz.4.62'. [ 105.467280][ T73] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.503467][ T5545] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.510808][ T5545] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.532888][ T5620] loop2: detected capacity change from 0 to 32768 [ 105.540493][ T5545] bridge_slave_1: entered allmulticast mode [ 105.549038][ T5620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.61 (5620) [ 105.567965][ T5545] bridge_slave_1: entered promiscuous mode [ 105.587340][ T5620] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.600731][ T5620] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 105.609823][ T5620] BTRFS info (device loop2): using free-space-tree [ 105.660415][ T5622] IPVS: Error connecting to the multicast addr [ 105.796814][ T5545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.834133][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.841371][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.853347][ T5554] bridge_slave_0: entered allmulticast mode [ 105.860654][ T5554] bridge_slave_0: entered promiscuous mode [ 105.948230][ T5545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.971077][ T5620] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 106.002966][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.011092][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.043658][ T5554] bridge_slave_1: entered allmulticast mode [ 106.051398][ T5554] bridge_slave_1: entered promiscuous mode [ 106.090783][ T5425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.100392][ T5226] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.642874][ T5233] Bluetooth: hci1: command tx timeout [ 106.736600][ T5554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.855051][ T5425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.996371][ T5545] team0: Port device team_slave_0 added [ 107.014646][ T5545] team0: Port device team_slave_1 added [ 107.041615][ T5554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.062588][ T5233] Bluetooth: hci2: command tx timeout [ 107.094449][ T73] bridge_slave_1: left allmulticast mode [ 107.100178][ T73] bridge_slave_1: left promiscuous mode [ 107.122723][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.145868][ T73] bridge_slave_0: left allmulticast mode [ 107.151598][ T73] bridge_slave_0: left promiscuous mode [ 107.173534][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.200496][ T5651] loop4: detected capacity change from 0 to 8192 [ 107.244648][ T5651] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.257313][ T73] bridge_slave_1: left allmulticast mode [ 107.263296][ T73] bridge_slave_1: left promiscuous mode [ 107.269021][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.281528][ T73] bridge_slave_0: left allmulticast mode [ 107.288109][ T73] bridge_slave_0: left promiscuous mode [ 107.293950][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.519913][ T5657] loop4: detected capacity change from 0 to 512 [ 107.558171][ T5657] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 107.590362][ T5657] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 107.603756][ T5657] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.66: Corrupt directory, running e2fsck is recommended [ 107.667233][ T5657] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 107.684096][ T5657] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.66: corrupted in-inode xattr: invalid ea_ino [ 107.701489][ T5657] EXT4-fs (loop4): Remounting filesystem read-only [ 107.710690][ T5657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.774011][ T5655] kvm: kvm [5654]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x1ae [ 107.964042][ T5655] kvm: kvm [5654]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x1c7 [ 107.977420][ T5655] kvm: kvm [5654]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x21a [ 107.987178][ T5655] kvm: kvm [5654]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x222 [ 107.996941][ T5655] kvm: kvm [5654]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x231 [ 108.016859][ T5655] kvm: kvm [5654]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x232 [ 108.049823][ T5655] kvm: kvm [5654]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x265 [ 108.075397][ T5663] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.088941][ T5663] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 108.102065][ T5663] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.66: Corrupt directory, running e2fsck is recommended [ 108.312842][ T5663] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.324619][ T5663] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 108.334893][ T5663] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.66: Corrupt directory, running e2fsck is recommended [ 108.564010][ T5655] kvm: kvm [5654]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x29a [ 108.765903][ T5233] Bluetooth: hci1: command tx timeout [ 109.085944][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.125369][ T5233] Bluetooth: hci2: command tx timeout [ 109.873781][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.888755][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.901166][ T73] bond0 (unregistering): Released all slaves [ 110.036747][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.058255][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.077907][ T73] bond0 (unregistering): Released all slaves [ 110.126169][ C0] net_ratelimit: 4 callbacks suppressed [ 110.126205][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 110.182030][ T5425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.221692][ T5425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.289756][ T5545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.298325][ T5545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.339355][ T5545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.437366][ T5675] loop2: detected capacity change from 0 to 128 [ 110.471267][ T5675] FAT-fs (loop2): bogus number of reserved sectors [ 110.481790][ T5675] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 110.491997][ T5545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.508882][ T5545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.535457][ T5675] FAT-fs (loop2): Can't find a valid FAT filesystem [ 110.554106][ T5545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.579503][ T5554] team0: Port device team_slave_0 added [ 110.596278][ T5554] team0: Port device team_slave_1 added [ 110.852147][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.861718][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.882172][ T5678] loop4: detected capacity change from 0 to 2048 [ 110.915059][ T5554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.955962][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.967700][ T5678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.972728][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.020495][ T5554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.293946][ T5684] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.307158][ T5684] Cannot find add_set index 0 as target [ 111.377424][ T5545] hsr_slave_0: entered promiscuous mode [ 111.386448][ T5545] hsr_slave_1: entered promiscuous mode [ 111.414038][ T5545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.445347][ T5545] Cannot create hsr debugfs directory [ 112.203837][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.233887][ T5554] hsr_slave_0: entered promiscuous mode [ 112.336896][ T5554] hsr_slave_1: entered promiscuous mode [ 112.357234][ T5554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.365101][ T5554] Cannot create hsr debugfs directory [ 112.534209][ T5695] loop4: detected capacity change from 0 to 1024 [ 112.580700][ T5695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.689757][ T5425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.774391][ T73] hsr_slave_0: left promiscuous mode [ 112.780508][ T73] hsr_slave_1: left promiscuous mode [ 112.787588][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.796942][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.820756][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.835498][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.851858][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.884390][ T73] hsr_slave_0: left promiscuous mode [ 112.930766][ T73] hsr_slave_1: left promiscuous mode [ 112.959907][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.967657][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.983585][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.001271][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.067907][ T73] veth1_macvtap: left promiscuous mode [ 113.076586][ T73] veth0_macvtap: left promiscuous mode [ 113.086882][ T73] veth1_vlan: left promiscuous mode [ 113.092226][ T73] veth0_vlan: left promiscuous mode [ 113.291054][ T73] veth1_macvtap: left promiscuous mode [ 113.300074][ T73] veth0_macvtap: left promiscuous mode [ 113.311238][ T73] veth1_vlan: left promiscuous mode [ 113.316718][ T73] veth0_vlan: left promiscuous mode [ 113.506662][ T5710] loop2: detected capacity change from 0 to 1024 [ 114.155603][ T1837] hfsplus: b-tree write err: -5, ino 4 [ 114.812523][ T5719] loop4: detected capacity change from 0 to 2048 [ 114.896074][ T5719] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 114.911585][ T5719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.272306][ T73] team0 (unregistering): Port device team_slave_1 removed [ 116.320757][ T73] team0 (unregistering): Port device team_slave_0 removed [ 116.367021][ T5285] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.391065][ T5727] loop2: detected capacity change from 0 to 32768 [ 116.443526][ T5727] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.541992][ T5727] XFS (loop2): Ending clean mount [ 116.573890][ T5727] XFS (loop2): Quotacheck needed: Please wait. [ 116.585220][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 116.598797][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.614584][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.627755][ T5285] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 116.637282][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.681887][ T5285] usb 5-1: config 0 descriptor?? [ 116.686366][ T5727] XFS (loop2): Quotacheck: Done. [ 116.705496][ T5285] hub 5-1:0.0: USB hub found [ 116.810624][ T5226] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.909627][ T5729] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.963368][ T5285] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 117.243553][ T5285] usbhid 5-1:0.0: can't add hid device: -71 [ 117.249664][ T5285] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 117.336387][ T5285] usb 5-1: USB disconnect, device number 4 [ 117.662158][ T73] team0 (unregistering): Port device team_slave_1 removed [ 117.701285][ T73] team0 (unregistering): Port device team_slave_0 removed [ 118.186963][ T5425] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.273027][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.280196][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.320756][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.328003][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.865551][ T5772] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 118.865551][ T5772] The task syz.4.85 (5772) triggered the difference, watch for misbehavior. [ 118.975937][ T5545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.009073][ T5545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.058291][ T5545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.120096][ T5545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.148192][ T73] IPVS: stop unused estimator thread 0... [ 119.175938][ T5425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.391819][ T5425] veth0_vlan: entered promiscuous mode [ 119.454957][ T5425] veth1_vlan: entered promiscuous mode [ 119.586582][ T5545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.737233][ T5794] loop4: detected capacity change from 0 to 65 [ 119.751702][ T5425] veth0_macvtap: entered promiscuous mode [ 119.801451][ T5794] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 119.809845][ T5794] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 119.826077][ T5554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.826094][ T5794] BFS-fs: bfs_fill_super(): Last block not available on loop4: 96 [ 119.854008][ T5545] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.928160][ T5554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.098235][ T5554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.307401][ T5425] veth1_macvtap: entered promiscuous mode [ 120.538889][ T5554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.674458][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.681620][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.747510][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.754825][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.811368][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.829354][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.840099][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.857900][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.870860][ T5425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.911573][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.923049][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.934067][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.944805][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.962310][ T5425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.026650][ T5425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.047682][ T5425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.062294][ T5425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.071669][ T5425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.318712][ T5554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.331190][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.371048][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.462055][ T5554] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.493497][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.516796][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.520839][ T5798] loop4: detected capacity change from 0 to 32768 [ 121.524080][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.530194][ T5545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.538591][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.607182][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.614416][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.668457][ T5798] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.701749][ T5554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.713764][ T5554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.874741][ T5827] loop2: detected capacity change from 0 to 1024 [ 121.915800][ T5832] loop1: detected capacity change from 0 to 1024 [ 121.926395][ T5545] veth0_vlan: entered promiscuous mode [ 121.939571][ T5545] veth1_vlan: entered promiscuous mode [ 121.965258][ T5545] veth0_macvtap: entered promiscuous mode [ 121.975419][ T5545] veth1_macvtap: entered promiscuous mode [ 121.991510][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.002210][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.012721][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.023293][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.033540][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.044266][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.055798][ T5545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.066879][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.077456][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.087455][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.098304][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.108385][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.119070][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.130740][ T5545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.142276][ T5545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.151207][ T5545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.160073][ T5545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.169340][ T5545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.216109][ T5827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.309921][ T5798] XFS (loop4): Ending clean mount [ 122.409605][ T5798] XFS (loop4): Quotacheck needed: Please wait. [ 122.482216][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.526689][ T5798] XFS (loop4): Quotacheck: Done. [ 122.539610][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.625600][ T29] audit: type=1804 audit(1724348400.202:2): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.90" name="/newroot/31/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 122.703345][ T5554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.720728][ T29] audit: type=1804 audit(1724348400.292:3): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.90" name="/newroot/31/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 122.737585][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.789220][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.829725][ T5554] veth0_vlan: entered promiscuous mode [ 122.835511][ T29] audit: type=1804 audit(1724348400.292:4): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.90" name="/newroot/31/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 122.882149][ T5554] veth1_vlan: entered promiscuous mode [ 122.929822][ T29] audit: type=1804 audit(1724348400.352:5): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.90" name="/newroot/31/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 122.979208][ T5554] veth0_macvtap: entered promiscuous mode [ 122.991215][ T5226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.991525][ T5554] veth1_macvtap: entered promiscuous mode [ 123.017239][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.028076][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.038219][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.049059][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.059581][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.070589][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.080886][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.091636][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.104752][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.114722][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.125586][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.135736][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.146314][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.156580][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.167417][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.177948][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.188539][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.200771][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.212088][ T5554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.221010][ T5554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.229995][ T5554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.232235][ T5236] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.238838][ T5554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.266062][ T5859] loop0: detected capacity change from 0 to 512 [ 123.301570][ T5859] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 123.336169][ T5859] EXT4-fs (loop0): invalid journal inode [ 123.342029][ T5859] EXT4-fs (loop0): can't get journal size [ 123.354650][ T5280] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.434216][ T5859] EXT4-fs (loop0): 1 truncate cleaned up [ 123.458923][ T5859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.489565][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.511533][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.568213][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.613148][ T5280] usb 2-1: Using ep0 maxpacket: 16 [ 123.620344][ T5280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.620351][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.631270][ T5862] sd 0:0:1:0: device reset [ 123.670143][ T5280] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.728452][ T5280] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.756627][ T5545] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.769406][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.827852][ T5280] usb 2-1: config 0 descriptor?? [ 124.021196][ T5870] loop3: detected capacity change from 0 to 256 [ 124.105720][ T5869] syzkaller0: entered promiscuous mode [ 124.111242][ T5869] syzkaller0: entered allmulticast mode [ 124.338720][ T5868] kvm: pic: non byte read [ 124.498110][ T8] usb 2-1: USB disconnect, device number 2 [ 124.562922][ T5280] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.483982][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 126.319459][ T5280] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.330441][ T5280] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.341183][ T5280] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 126.359694][ T5280] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.373444][ T5280] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.382647][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.047805][ T5280] usb 3-1: GET_CAPABILITIES returned 0 [ 127.055822][ T5280] usbtmc 3-1:16.0: can't read capabilities [ 127.259240][ T5880] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32 [ 127.329251][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.748831][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.769279][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.119860][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.133184][ T25] usb 2-1: config 0 descriptor?? [ 128.571235][ T25] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 128.688173][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input5 [ 128.715134][ T5227] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.906201][ T5227] usb 5-1: Using ep0 maxpacket: 8 [ 128.956779][ T25] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 129.006758][ T5227] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.018016][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.034849][ T5227] usb 5-1: Product: syz [ 129.039123][ T5227] usb 5-1: Manufacturer: syz [ 129.044476][ T5227] usb 5-1: SerialNumber: syz [ 129.051585][ T5227] usb 5-1: config 0 descriptor?? [ 129.242257][ T5882] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 129.321400][ T5227] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 129.334622][ T5283] usb 2-1: USB disconnect, device number 3 [ 129.453247][ T1177] usb 3-1: USB disconnect, device number 3 [ 129.812825][ T5233] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 129.823602][ T5233] CPU: 1 UID: 0 PID: 5233 Comm: kworker/u9:3 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 129.833992][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 129.844079][ T5233] Workqueue: hci1 hci_rx_work [ 129.848845][ T5233] Call Trace: [ 129.852147][ T5233] [ 129.855098][ T5233] dump_stack_lvl+0x241/0x360 [ 129.859819][ T5233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.865054][ T5233] ? __pfx__printk+0x10/0x10 [ 129.869686][ T5233] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 129.875007][ T5233] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 129.880606][ T5233] sysfs_create_dir_ns+0x2ce/0x3a0 [ 129.885753][ T5233] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 129.891425][ T5233] kobject_add_internal+0x435/0x8d0 [ 129.896668][ T5233] kobject_add+0x152/0x220 [ 129.901131][ T5233] ? preempt_schedule_thunk+0x1a/0x30 [ 129.906530][ T5233] ? device_add+0x3e7/0xbf0 [ 129.911066][ T5233] ? __pfx_kobject_add+0x10/0x10 [ 129.916046][ T5233] ? _raw_spin_unlock+0x3e/0x50 [ 129.920936][ T5233] ? get_device_parent+0x165/0x410 [ 129.926083][ T5233] device_add+0x4e5/0xbf0 [ 129.930458][ T5233] hci_conn_add_sysfs+0xe8/0x200 [ 129.935439][ T5233] le_conn_complete_evt+0xc9f/0x12e0 [ 129.940765][ T5233] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.946793][ T5233] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 129.952590][ T5233] ? irqentry_exit+0x63/0x90 [ 129.957219][ T5233] ? lockdep_hardirqs_on+0x99/0x150 [ 129.962465][ T5233] hci_le_enh_conn_complete_evt+0x185/0x420 [ 129.968404][ T5233] hci_event_packet+0xa55/0x1540 [ 129.973392][ T5233] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 129.978718][ T5233] ? __pfx_hci_event_packet+0x10/0x10 [ 129.984152][ T5233] ? hci_send_to_monitor+0xd8/0x7f0 [ 129.989387][ T5233] ? kcov_remote_start+0x97/0x7d0 [ 129.994447][ T5233] hci_rx_work+0x3e8/0xca0 [ 129.998913][ T5233] ? process_scheduled_works+0x976/0x1850 [ 130.004674][ T5233] process_scheduled_works+0xa63/0x1850 [ 130.010294][ T5233] ? __pfx_process_scheduled_works+0x10/0x10 [ 130.016329][ T5233] ? assign_work+0x364/0x3d0 [ 130.020963][ T5233] worker_thread+0x86d/0xd10 [ 130.025615][ T5233] ? __kthread_parkme+0x169/0x1d0 [ 130.030696][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 130.035856][ T5233] kthread+0x2f0/0x390 [ 130.039956][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 130.045112][ T5233] ? __pfx_kthread+0x10/0x10 [ 130.049729][ T5233] ret_from_fork+0x4b/0x80 [ 130.054188][ T5233] ? __pfx_kthread+0x10/0x10 [ 130.058888][ T5233] ret_from_fork_asm+0x1a/0x30 [ 130.063707][ T5233] [ 130.103361][ T5233] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.120384][ T5233] Bluetooth: hci1: failed to register connection device [ 130.197963][ T5917] loop2: detected capacity change from 0 to 2048 [ 130.208816][ T5917] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 130.419948][ T5917] overlayfs: upper fs needs to support d_type. [ 130.467131][ T5917] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.528391][ T5917] overlayfs: failed to set xattr on upper [ 130.550382][ T5917] overlayfs: ...falling back to redirect_dir=nofollow. [ 130.557026][ T5925] loop1: detected capacity change from 0 to 2048 [ 130.596405][ T5917] overlayfs: ...falling back to index=off. [ 130.632912][ T5925] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.644609][ T5249] udevd[5249]: incorrect nilfs2 checksum on /dev/loop1 [ 130.718494][ T5929] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.733442][ T5917] overlayfs: ...falling back to uuid=null. [ 131.507615][ T5932] overlayfs: upper fs does not support tmpfile. [ 131.625588][ T5932] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.692868][ T5932] overlayfs: failed to set xattr on upper [ 131.733950][ T5932] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.745233][ T5226] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 131.763279][ T5226] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 131.765349][ T5932] overlayfs: ...falling back to index=off. [ 131.793502][ T5932] overlayfs: ...falling back to uuid=null. [ 132.056392][ T5227] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 132.085669][ T5227] usb 5-1: USB disconnect, device number 5 [ 132.162470][ T5233] Bluetooth: hci1: command tx timeout [ 132.457022][ T3038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.729330][ T3038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.952733][ T3038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.053017][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059489][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.148475][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.196248][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.217868][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.229083][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.239077][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.248081][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.293586][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.320128][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.337977][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.348341][ T3038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.364655][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.378489][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.387341][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.871686][ T3038] bridge_slave_1: left allmulticast mode [ 133.959776][ T5963] loop4: detected capacity change from 0 to 256 [ 134.187106][ T3038] bridge_slave_1: left promiscuous mode [ 134.360027][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.562315][ T3038] bridge_slave_0: left allmulticast mode [ 134.568253][ T3038] bridge_slave_0: left promiscuous mode [ 134.658025][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.802014][ T5970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.907467][ T5970] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 134.940209][ T5970] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.125'. [ 134.953376][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.166049][ T47] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 135.190645][ T47] usb 1-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 135.200541][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.211727][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.220852][ T47] usb 1-1: Product: syz [ 135.229531][ T47] usb 1-1: Manufacturer: syz [ 135.240778][ T47] usb 1-1: SerialNumber: syz [ 135.256719][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.274620][ T47] usb 1-1: config 0 descriptor?? [ 135.289345][ T3038] bond0 (unregistering): Released all slaves [ 135.297116][ T47] usb 1-1: bad CDC descriptors [ 135.309242][ T47] option 1-1:0.0: GSM modem (1-port) converter detected [ 135.362810][ T55] Bluetooth: hci0: command tx timeout [ 135.372151][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 135.454086][ T55] Bluetooth: hci4: command tx timeout [ 135.777662][ T5981] Bluetooth: MGMT ver 1.23 [ 135.782272][ T5981] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 135.922070][ T5282] usb 1-1: USB disconnect, device number 2 [ 135.963160][ T5282] option 1-1:0.0: device disconnected [ 136.177817][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.193339][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.201874][ T5952] bridge_slave_0: entered allmulticast mode [ 136.224970][ T5952] bridge_slave_0: entered promiscuous mode [ 136.265115][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.279510][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.288660][ T5952] bridge_slave_1: entered allmulticast mode [ 136.332152][ T5952] bridge_slave_1: entered promiscuous mode [ 136.431186][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 136.490661][ T3038] hsr_slave_0: left promiscuous mode [ 136.538776][ T3038] hsr_slave_1: left promiscuous mode [ 136.670306][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.688968][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.735363][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.773324][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.853518][ T3038] veth1_macvtap: left promiscuous mode [ 136.859115][ T3038] veth0_macvtap: left promiscuous mode [ 136.864872][ T3038] veth1_vlan: left promiscuous mode [ 136.870260][ T3038] veth0_vlan: left promiscuous mode [ 136.927101][ T5990] loop4: detected capacity change from 0 to 40427 [ 136.938877][ T6000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.960905][ T5990] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 137.033184][ T5990] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 137.047048][ T5990] F2FS-fs (loop4): invalid crc value [ 137.084677][ T5990] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.222845][ T5990] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 137.232815][ T5990] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 137.291265][ T5990] syz.4.129: attempt to access beyond end of device [ 137.291265][ T5990] loop4: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 137.322890][ T5990] syz.4.129: attempt to access beyond end of device [ 137.322890][ T5990] loop4: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 137.396486][ T5990] F2FS-fs (loop4): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 137.414984][ T5990] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 137.448170][ T55] Bluetooth: hci0: command tx timeout [ 137.534292][ T55] Bluetooth: hci4: command tx timeout [ 137.882502][ T5282] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.007896][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 138.089090][ T5282] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 138.109279][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.118779][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 138.137248][ T5282] usb 4-1: config 0 descriptor?? [ 138.232812][ T5285] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.444267][ T5285] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 138.473123][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.495578][ T5285] usb 5-1: config 0 descriptor?? [ 138.642669][ T6017] loop0: detected capacity change from 0 to 32768 [ 138.655665][ T6017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.135 (6017) [ 138.699295][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.716564][ T6017] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.739713][ T6017] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 138.749318][ T6017] BTRFS info (device loop0): using free-space-tree [ 138.754759][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.938185][ T5952] team0: Port device team_slave_0 added [ 138.990605][ T5952] team0: Port device team_slave_1 added [ 139.052688][ C0] hrtimer: interrupt took 376490 ns [ 139.154841][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.162281][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.170405][ T5950] bridge_slave_0: entered allmulticast mode [ 139.184780][ T5950] bridge_slave_0: entered promiscuous mode [ 139.198212][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.205488][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.208010][ T6017] loop0: detected capacity change from 32768 to 0 [ 139.238924][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.246361][ T11] kworker/u8:0: attempt to access beyond end of device [ 139.246361][ T11] loop0: rw=1, sector=10456, nr_sectors = 8 limit=0 [ 139.255187][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.272877][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.281645][ T11] kworker/u8:0: attempt to access beyond end of device [ 139.281645][ T11] loop0: rw=1, sector=10496, nr_sectors = 8 limit=0 [ 139.308988][ T6017] syz.0.135: attempt to access beyond end of device [ 139.308988][ T6017] loop0: rw=2049, sector=10504, nr_sectors = 16 limit=0 [ 139.327619][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.328426][ T11] kworker/u8:0: attempt to access beyond end of device [ 139.328426][ T11] loop0: rw=1, sector=10536, nr_sectors = 24 limit=0 [ 139.355218][ T6017] syz.0.135: attempt to access beyond end of device [ 139.355218][ T6017] loop0: rw=2049, sector=10240, nr_sectors = 8 limit=0 [ 139.376257][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.381200][ T35] kworker/u8:2: attempt to access beyond end of device [ 139.381200][ T35] loop0: rw=6145, sector=10440, nr_sectors = 8 limit=0 [ 139.383440][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.383628][ T5950] bridge_slave_1: entered allmulticast mode [ 139.384922][ T5950] bridge_slave_1: entered promiscuous mode [ 139.409725][ T35] kworker/u8:2: attempt to access beyond end of device [ 139.409725][ T35] loop0: rw=6145, sector=10448, nr_sectors = 8 limit=0 [ 139.433113][ T35] kworker/u8:2: attempt to access beyond end of device [ 139.433113][ T35] loop0: rw=6145, sector=10560, nr_sectors = 8 limit=0 [ 139.484171][ T6037] BTRFS error (device loop0 state A): Transaction aborted (error -5) [ 139.494342][ T6037] BTRFS: error (device loop0 state A) in btrfs_start_dirty_block_groups:3462: errno=-5 IO failure [ 139.503588][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.506458][ T6037] BTRFS info (device loop0 state EA): forced readonly [ 139.523431][ T55] Bluetooth: hci0: command tx timeout [ 139.529140][ T6037] BTRFS error (device loop0 state EMA): remounting read-write after error is not allowed [ 139.598819][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.604279][ T5545] BTRFS info (device loop0 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.621251][ T55] Bluetooth: hci4: command tx timeout [ 139.726643][ T5952] hsr_slave_0: entered promiscuous mode [ 139.755657][ T5952] hsr_slave_1: entered promiscuous mode [ 139.780361][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.789063][ T5952] Cannot create hsr debugfs directory [ 139.945751][ T5950] team0: Port device team_slave_0 added [ 139.979702][ T5950] team0: Port device team_slave_1 added [ 140.058663][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.068745][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.094644][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.113741][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.142085][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.165176][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.206442][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.330483][ T3038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.361044][ T5950] hsr_slave_0: entered promiscuous mode [ 140.389017][ T5950] hsr_slave_1: entered promiscuous mode [ 140.403647][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.411250][ T5950] Cannot create hsr debugfs directory [ 140.448555][ T5282] pegasus 4-1:0.0: setup Pegasus II specific registers [ 140.494554][ T3038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.586897][ T3038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.650193][ T5952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.731048][ T3038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.794100][ T5952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.877158][ T5282] pegasus 4-1:0.0: can't locate MII phy, using default [ 140.903264][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.913505][ T5952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.931398][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.945188][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.958627][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.968009][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 140.976625][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.998656][ T5282] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, fa:48:bc:dd:ea:ee [ 141.018508][ T5282] usb 4-1: USB disconnect, device number 2 [ 141.094102][ T5952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.199976][ T3038] bridge_slave_1: left allmulticast mode [ 141.206087][ T3038] bridge_slave_1: left promiscuous mode [ 141.222324][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.251654][ T3038] bridge_slave_0: left allmulticast mode [ 141.276188][ T3038] bridge_slave_0: left promiscuous mode [ 141.285498][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.480189][ T5285] usb 5-1: Cannot set autoneg [ 141.496398][ T5285] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 141.533900][ T5285] usb 5-1: USB disconnect, device number 6 [ 141.602451][ T5233] Bluetooth: hci0: command tx timeout [ 141.695585][ T5233] Bluetooth: hci4: command tx timeout [ 141.762068][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.778020][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.788600][ T3038] bond0 (unregistering): Released all slaves [ 141.958316][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.990259][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.002202][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.414421][ T5285] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.534520][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.700562][ T5285] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 142.763023][ T5285] usb 5-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 142.778302][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.787210][ T5285] usb 5-1: Product: syz [ 142.791495][ T5285] usb 5-1: Manufacturer: syz [ 142.796741][ T5285] usb 5-1: SerialNumber: syz [ 142.807413][ T5285] usb 5-1: config 0 descriptor?? [ 142.818790][ T5285] usb 5-1: bad CDC descriptors [ 142.825680][ T5285] option 5-1:0.0: GSM modem (1-port) converter detected [ 142.902644][ T3038] hsr_slave_0: left promiscuous mode [ 142.942527][ T3038] hsr_slave_1: left promiscuous mode [ 142.967498][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.982780][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.003024][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.010449][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.042574][ T5233] Bluetooth: hci1: command tx timeout [ 143.084584][ T3038] veth1_macvtap: left promiscuous mode [ 143.090113][ T3038] veth0_macvtap: left promiscuous mode [ 143.142837][ T3038] veth1_vlan: left promiscuous mode [ 143.148201][ T3038] veth0_vlan: left promiscuous mode [ 143.367360][ T1177] usb 5-1: USB disconnect, device number 7 [ 143.379591][ T1177] option 5-1:0.0: device disconnected [ 144.023814][ T6102] loop3: detected capacity change from 0 to 2048 [ 144.057645][ T6102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.101530][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 144.197774][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 144.296404][ T6108] input: syz0 as /devices/virtual/input/input6 [ 145.043853][ T6112] loop3: detected capacity change from 0 to 32768 [ 145.115444][ T6112] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.124288][ T5233] Bluetooth: hci1: command tx timeout [ 145.209386][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 145.292104][ T6112] XFS (loop3): Ending clean mount [ 145.307442][ T6112] XFS (loop3): Quotacheck needed: Please wait. [ 145.361543][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.369926][ T6112] XFS (loop3): Quotacheck: Done. [ 145.401628][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.427383][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.482012][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.499594][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.507181][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.514620][ T6053] bridge_slave_0: entered allmulticast mode [ 145.521335][ T6053] bridge_slave_0: entered promiscuous mode [ 145.531009][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.538861][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.546941][ T6112] loop3: detected capacity change from 32768 to 0 [ 145.552878][ T6053] bridge_slave_1: entered allmulticast mode [ 145.556638][ T6129] bio_check_eod: 2 callbacks suppressed [ 145.556654][ T6129] syz.3.147: attempt to access beyond end of device [ 145.556654][ T6129] loop3: rw=2049, sector=18744, nr_sectors = 4 limit=0 [ 145.561393][ T6053] bridge_slave_1: entered promiscuous mode [ 145.572097][ T6129] loop3: writeback error on inode 9291, offset 8192, sector 18744 [ 145.585673][ T6129] syz.3.147: attempt to access beyond end of device [ 145.585673][ T6129] loop3: rw=2049, sector=18748, nr_sectors = 28 limit=0 [ 145.608635][ T5282] loop3: writeback error on inode 9291, offset 10240, sector 18748 [ 145.608925][ T6129] syz.3.147: attempt to access beyond end of device [ 145.608925][ T6129] loop3: rw=2049, sector=18808, nr_sectors = 48 limit=0 [ 145.631892][ T1177] loop3: writeback error on inode 9291, offset 40960, sector 18808 [ 145.646698][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.674779][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.709351][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.713352][ T5554] syz-executor: attempt to access beyond end of device [ 145.713352][ T5554] loop3: rw=432129, sector=1280, nr_sectors = 128 limit=0 [ 145.746088][ T10] XFS (loop3): log I/O error -5 [ 145.751208][ T10] XFS (loop3): Filesystem has been shut down due to log error (0x2). [ 145.760227][ T10] XFS (loop3): Please unmount the filesystem and rectify the problem(s). [ 145.769232][ T5554] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.835641][ T6053] team0: Port device team_slave_0 added [ 145.864864][ T6053] team0: Port device team_slave_1 added [ 145.955153][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.011546][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.039662][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.066707][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.088781][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.106265][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.120673][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.127928][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.174027][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.181111][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.224528][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.263052][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.270237][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.286353][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.293526][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.389677][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.396897][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.487025][ T6053] hsr_slave_0: entered promiscuous mode [ 146.507804][ T6053] hsr_slave_1: entered promiscuous mode [ 146.521613][ T6053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.533071][ T6053] Cannot create hsr debugfs directory [ 147.204772][ T5233] Bluetooth: hci1: command tx timeout [ 148.112970][ T5227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.313501][ T5227] usb 4-1: config 0 has no interfaces? [ 148.319291][ T5227] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 148.329675][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.508544][ T5227] usb 4-1: config 0 descriptor?? [ 148.667343][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.686823][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.757322][ T47] usb 4-1: USB disconnect, device number 3 [ 148.923920][ T5952] veth0_vlan: entered promiscuous mode [ 148.937641][ T5952] veth1_vlan: entered promiscuous mode [ 148.962424][ T5952] veth0_macvtap: entered promiscuous mode [ 148.971662][ T5952] veth1_macvtap: entered promiscuous mode [ 148.989044][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.999756][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.009934][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.020592][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.030611][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.041267][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.056830][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.104358][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.115592][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.132444][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.151497][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.161813][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.192502][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.223691][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.236018][ T5950] veth0_vlan: entered promiscuous mode [ 149.287351][ T5233] Bluetooth: hci1: command tx timeout [ 149.295913][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.305741][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.324028][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.350819][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.395947][ T5950] veth1_vlan: entered promiscuous mode [ 149.495692][ T6053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.525708][ T6053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.538087][ T6197] loop3: detected capacity change from 0 to 2048 [ 149.573172][ T6053] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.585001][ T6197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.605625][ T6053] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.622976][ T5950] veth0_macvtap: entered promiscuous mode [ 149.722093][ T5950] veth1_macvtap: entered promiscuous mode [ 149.817133][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.865293][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.876032][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.889260][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.129955][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.282826][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.400976][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.448169][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.518468][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.674651][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.706746][ T5554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.722597][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.743578][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.756339][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.769294][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.794344][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.815417][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.850216][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.877267][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.929905][ T5950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.954396][ T5950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.972425][ T5950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.981244][ T5950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.012006][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.026027][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.204403][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.224300][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.330514][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.371352][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.527684][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.547034][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.565071][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.745913][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.826309][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.833467][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.899980][ T6237] hfs: can't find a HFS filesystem on dev nullb0 [ 152.464254][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.471437][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.993052][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.035747][ T6242] loop1: detected capacity change from 0 to 1024 [ 153.224644][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 153.338588][ T25] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 153.492556][ T6242] hfsplus: uid requires an argument [ 153.498119][ T6242] hfsplus: unable to parse mount options [ 153.554149][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.618592][ T25] usb 3-1: Product: syz [ 153.646082][ T25] usb 3-1: Manufacturer: syz [ 153.712592][ T25] usb 3-1: SerialNumber: syz [ 153.747287][ T25] usb 3-1: config 0 descriptor?? [ 153.747527][ T6255] loop4: detected capacity change from 0 to 1024 [ 153.759406][ T6255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.785268][ T25] usb 3-1: bad CDC descriptors [ 153.801258][ T6255] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 153.862518][ T6255] System zones: 0-1, 3-36 [ 153.885739][ T6255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.969248][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.002255][ T29] audit: type=1800 audit(1724348431.572:6): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.163" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 154.029261][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 154.133728][ T5227] usb 3-1: USB disconnect, device number 4 [ 154.169778][ T6053] veth0_vlan: entered promiscuous mode [ 154.228600][ T6053] veth1_vlan: entered promiscuous mode [ 154.232713][ T29] audit: type=1800 audit(1724348431.812:7): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.163" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 154.275044][ T29] audit: type=1804 audit(1724348431.822:8): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.163" name="/newroot/53/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 154.308090][ T6053] veth0_macvtap: entered promiscuous mode [ 154.370772][ T6053] veth1_macvtap: entered promiscuous mode [ 154.424799][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.428090][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.449052][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.459496][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.470261][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.480448][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.491568][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.501930][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.512487][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.522311][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.533086][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.544430][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.554995][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.565566][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.575583][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.586084][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.596519][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.607364][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.617276][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.627809][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.637751][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.648338][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.659472][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.684859][ T6053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.702451][ T6053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.711204][ T6053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.742433][ T6053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.962109][ T6287] loop4: detected capacity change from 0 to 256 [ 154.995138][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.054892][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.113138][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.120977][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.253950][ T6292] loop2: detected capacity change from 0 to 256 [ 155.449622][ T6301] syz.0.138 uses obsolete (PF_INET,SOCK_PACKET) [ 155.580596][ T6305] loop1: detected capacity change from 0 to 512 [ 155.718661][ T6305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.812531][ T6305] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.898435][ T6292] PKCS8: Unsupported PKCS#8 version [ 156.505101][ T29] audit: type=1804 audit(1724348434.062:9): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.168" name="/newroot/2/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 157.138107][ T6328] loop0: detected capacity change from 0 to 1024 [ 157.199470][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.514812][ T6340] hfs: can't find a HFS filesystem on dev nullb0 [ 158.361919][ T6345] loop3: detected capacity change from 0 to 1024 [ 158.528412][ T6345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.616801][ T6355] syz.0.177: attempt to access beyond end of device [ 158.616801][ T6355] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 158.630416][ T6355] qnx4: unable to read the superblock [ 159.641509][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 159.869416][ T5285] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 162.588351][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 162.606370][ T5285] usb 1-1: device descriptor read/all, error -71 [ 163.310804][ T6397] xt_hashlimit: overflow, rate too high: 0 [ 163.820693][ T6415] loop0: detected capacity change from 0 to 8 [ 163.847624][ T6415] ================================================================== [ 163.855828][ T6415] BUG: KASAN: slab-use-after-free in squashfs_readahead+0x210c/0x2680 [ 163.864010][ T6415] Read of size 4 at addr ffff888029b861c0 by task syz.0.189/6415 [ 163.871746][ T6415] [ 163.874156][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: syz.0.189 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 163.884236][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 163.894304][ T6415] Call Trace: [ 163.897678][ T6415] [ 163.900634][ T6415] dump_stack_lvl+0x241/0x360 [ 163.905345][ T6415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.910574][ T6415] ? __pfx__printk+0x10/0x10 [ 163.915222][ T6415] ? _printk+0xd5/0x120 [ 163.919413][ T6415] ? __virt_addr_valid+0x183/0x530 [ 163.924550][ T6415] ? __virt_addr_valid+0x183/0x530 [ 163.929686][ T6415] print_report+0x169/0x550 [ 163.934227][ T6415] ? __virt_addr_valid+0x183/0x530 [ 163.939375][ T6415] ? __virt_addr_valid+0x183/0x530 [ 163.944508][ T6415] ? __virt_addr_valid+0x45f/0x530 [ 163.949641][ T6415] ? __phys_addr+0xba/0x170 [ 163.954164][ T6415] ? squashfs_readahead+0x210c/0x2680 [ 163.959590][ T6415] kasan_report+0x143/0x180 [ 163.964125][ T6415] ? squashfs_readahead+0x210c/0x2680 [ 163.969551][ T6415] squashfs_readahead+0x210c/0x2680 [ 163.974790][ T6415] ? squashfs_readahead+0x6f0/0x2680 [ 163.980109][ T6415] ? __pfx_squashfs_readahead+0x10/0x10 [ 163.985701][ T6415] ? blk_start_plug+0x70/0x1b0 [ 163.990495][ T6415] read_pages+0x17e/0x840 [ 163.994845][ T6415] ? percpu_ref_put+0x19/0x180 [ 163.999652][ T6415] ? __pfx_read_pages+0x10/0x10 [ 164.004522][ T6415] ? filemap_add_folio+0x26d/0x650 [ 164.009656][ T6415] ? __pfx_filemap_add_folio+0x10/0x10 [ 164.015159][ T6415] page_cache_ra_unbounded+0x6ce/0x7f0 [ 164.020660][ T6415] filemap_get_pages+0x543/0x2330 [ 164.025730][ T6415] ? __pfx_filemap_get_pages+0x10/0x10 [ 164.031220][ T6415] ? __pfx___might_resched+0x10/0x10 [ 164.036546][ T6415] ? unwind_next_frame+0x18e6/0x22d0 [ 164.041882][ T6415] filemap_read+0x457/0xfa0 [ 164.046417][ T6415] ? 0xffffffffa000065c [ 164.050608][ T6415] ? __pfx_filemap_read+0x10/0x10 [ 164.055754][ T6415] ? iov_iter_kvec+0x4e/0x180 [ 164.060461][ T6415] __kernel_read+0x532/0x9f0 [ 164.065073][ T6415] ? do_sys_openat2+0x13e/0x1d0 [ 164.069973][ T6415] ? __x64_sys_openat+0x247/0x2a0 [ 164.075037][ T6415] ? __pfx___kernel_read+0x10/0x10 [ 164.080182][ T6415] integrity_kernel_read+0xb0/0x100 [ 164.085410][ T6415] ? __pfx_integrity_kernel_read+0x10/0x10 [ 164.091241][ T6415] ? ima_calc_file_hash+0xab7/0x1b30 [ 164.096548][ T6415] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 164.102225][ T6415] ima_calc_file_hash+0xaef/0x1b30 [ 164.107372][ T6415] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.113730][ T6415] ? lockdep_hardirqs_on+0x99/0x150 [ 164.119471][ T6415] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 164.125066][ T6415] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.131000][ T6415] ? __x64_sys_openat+0x247/0x2a0 [ 164.136057][ T6415] ? do_syscall_64+0xf3/0x230 [ 164.140765][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.146862][ T6415] ? mark_lock+0x9a/0x360 [ 164.151229][ T6415] ? make_vfsgid+0x46/0x90 [ 164.155679][ T6415] ? generic_fillattr+0x59c/0x840 [ 164.160789][ T6415] ima_collect_measurement+0x526/0xb20 [ 164.166312][ T6415] ? __pfx_ima_collect_measurement+0x10/0x10 [ 164.172321][ T6415] ? squashfs_xattr_handler_get+0x585/0x900 [ 164.178259][ T6415] ? trace_contention_end+0x3c/0x120 [ 164.183563][ T6415] ? __mutex_lock+0x2ef/0xd70 [ 164.188356][ T6415] ? ima_get_hash_algo+0x156/0x4d0 [ 164.193495][ T6415] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 164.198977][ T6415] process_measurement+0x1357/0x1fb0 [ 164.204306][ T6415] ? __pfx_process_measurement+0x10/0x10 [ 164.209974][ T6415] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 164.216436][ T6415] ? __pfx_apparmor_file_open+0x10/0x10 [ 164.222012][ T6415] ? tomoyo_file_open+0x168/0x220 [ 164.227058][ T6415] ? inode_to_bdi+0x69/0xf0 [ 164.231603][ T6415] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 164.233325][ T6417] hfs: can't find a HFS filesystem on dev nullb0 [ 164.237781][ T6415] ima_file_check+0xf2/0x170 [ 164.248707][ T6415] ? __pfx_ima_file_check+0x10/0x10 [ 164.253930][ T6415] security_file_post_open+0xb9/0x280 [ 164.259312][ T6415] path_openat+0x2cd0/0x3590 [ 164.263924][ T6415] ? __pfx_path_openat+0x10/0x10 [ 164.268873][ T6415] do_filp_open+0x235/0x490 [ 164.273384][ T6415] ? __pfx_do_filp_open+0x10/0x10 [ 164.278422][ T6415] ? _raw_spin_unlock+0x28/0x50 [ 164.283274][ T6415] ? alloc_fd+0x5a1/0x640 [ 164.287619][ T6415] do_sys_openat2+0x13e/0x1d0 [ 164.292331][ T6415] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.297653][ T6415] __x64_sys_openat+0x247/0x2a0 [ 164.302522][ T6415] ? __pfx___x64_sys_openat+0x10/0x10 [ 164.307909][ T6415] ? do_syscall_64+0x100/0x230 [ 164.312681][ T6415] ? do_syscall_64+0xb6/0x230 [ 164.317369][ T6415] do_syscall_64+0xf3/0x230 [ 164.321890][ T6415] ? clear_bhb_loop+0x35/0x90 [ 164.326577][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.332487][ T6415] RIP: 0033:0x7f1e0cb79e79 [ 164.336908][ T6415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.356550][ T6415] RSP: 002b:00007f1e0d9cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.364973][ T6415] RAX: ffffffffffffffda RBX: 00007f1e0cd15f80 RCX: 00007f1e0cb79e79 [ 164.372950][ T6415] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 164.380926][ T6415] RBP: 00007f1e0cbe7916 R08: 0000000000000000 R09: 0000000000000000 [ 164.388903][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.396878][ T6415] R13: 0000000000000000 R14: 00007f1e0cd15f80 R15: 00007ffe9e8bfef8 [ 164.404866][ T6415] [ 164.407891][ T6415] [ 164.410213][ T6415] Allocated by task 6415: [ 164.414534][ T6415] kasan_save_track+0x3f/0x80 [ 164.419238][ T6415] __kasan_kmalloc+0x98/0xb0 [ 164.423849][ T6415] __kmalloc_cache_noprof+0x19c/0x2c0 [ 164.429256][ T6415] squashfs_page_actor_init_special+0x64/0x440 [ 164.435423][ T6415] squashfs_readahead+0x188f/0x2680 [ 164.440630][ T6415] read_pages+0x17e/0x840 [ 164.444965][ T6415] page_cache_ra_unbounded+0x6ce/0x7f0 [ 164.450429][ T6415] filemap_get_pages+0x543/0x2330 [ 164.455461][ T6415] filemap_read+0x457/0xfa0 [ 164.459972][ T6415] __kernel_read+0x532/0x9f0 [ 164.464570][ T6415] integrity_kernel_read+0xb0/0x100 [ 164.469778][ T6415] ima_calc_file_hash+0xaef/0x1b30 [ 164.474900][ T6415] ima_collect_measurement+0x526/0xb20 [ 164.480376][ T6415] process_measurement+0x1357/0x1fb0 [ 164.485675][ T6415] ima_file_check+0xf2/0x170 [ 164.490273][ T6415] security_file_post_open+0xb9/0x280 [ 164.495654][ T6415] path_openat+0x2cd0/0x3590 [ 164.500354][ T6415] do_filp_open+0x235/0x490 [ 164.504862][ T6415] do_sys_openat2+0x13e/0x1d0 [ 164.509550][ T6415] __x64_sys_openat+0x247/0x2a0 [ 164.514414][ T6415] do_syscall_64+0xf3/0x230 [ 164.518926][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.524828][ T6415] [ 164.527151][ T6415] Freed by task 6415: [ 164.531161][ T6415] kasan_save_track+0x3f/0x80 [ 164.535845][ T6415] kasan_save_free_info+0x40/0x50 [ 164.540879][ T6415] __kasan_slab_free+0x59/0x70 [ 164.545665][ T6415] kfree+0x196/0x3e0 [ 164.549570][ T6415] squashfs_readahead+0x195b/0x2680 [ 164.554776][ T6415] read_pages+0x17e/0x840 [ 164.559107][ T6415] page_cache_ra_unbounded+0x6ce/0x7f0 [ 164.564567][ T6415] filemap_get_pages+0x543/0x2330 [ 164.569596][ T6415] filemap_read+0x457/0xfa0 [ 164.574105][ T6415] __kernel_read+0x532/0x9f0 [ 164.578697][ T6415] integrity_kernel_read+0xb0/0x100 [ 164.583907][ T6415] ima_calc_file_hash+0xaef/0x1b30 [ 164.589026][ T6415] ima_collect_measurement+0x526/0xb20 [ 164.594493][ T6415] process_measurement+0x1357/0x1fb0 [ 164.599785][ T6415] ima_file_check+0xf2/0x170 [ 164.604383][ T6415] security_file_post_open+0xb9/0x280 [ 164.609801][ T6415] path_openat+0x2cd0/0x3590 [ 164.614393][ T6415] do_filp_open+0x235/0x490 [ 164.618898][ T6415] do_sys_openat2+0x13e/0x1d0 [ 164.623583][ T6415] __x64_sys_openat+0x247/0x2a0 [ 164.628468][ T6415] do_syscall_64+0xf3/0x230 [ 164.632975][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.638868][ T6415] [ 164.641186][ T6415] The buggy address belongs to the object at ffff888029b86180 [ 164.641186][ T6415] which belongs to the cache kmalloc-96 of size 96 [ 164.655144][ T6415] The buggy address is located 64 bytes inside of [ 164.655144][ T6415] freed 96-byte region [ffff888029b86180, ffff888029b861e0) [ 164.668765][ T6415] [ 164.671085][ T6415] The buggy address belongs to the physical page: [ 164.677499][ T6415] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29b86 [ 164.686253][ T6415] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 164.693359][ T6415] page_type: 0xfdffffff(slab) [ 164.698039][ T6415] raw: 00fff00000000000 ffff888015841280 ffffea00008aa080 dead000000000002 [ 164.706619][ T6415] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000 [ 164.715196][ T6415] page dumped because: kasan: bad access detected [ 164.721608][ T6415] page_owner tracks the page as allocated [ 164.727318][ T6415] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4705, tgid 4705 (v4l_id), ts 28800036069, free_ts 28769562000 [ 164.745994][ T6415] post_alloc_hook+0x1f3/0x230 [ 164.750777][ T6415] get_page_from_freelist+0x3131/0x3280 [ 164.756327][ T6415] __alloc_pages_noprof+0x29e/0x780 [ 164.761528][ T6415] alloc_slab_page+0x5f/0x120 [ 164.766207][ T6415] allocate_slab+0x5a/0x2f0 [ 164.770730][ T6415] ___slab_alloc+0xcd1/0x14b0 [ 164.775417][ T6415] __slab_alloc+0x58/0xa0 [ 164.779741][ T6415] __kmalloc_noprof+0x25a/0x400 [ 164.784603][ T6415] tomoyo_commit_ok+0x29/0x1d0 [ 164.789392][ T6415] tomoyo_update_domain+0x557/0x8b0 [ 164.794592][ T6415] tomoyo_write_file+0x80d/0xe50 [ 164.799551][ T6415] tomoyo_write_domain2+0x1e0/0x250 [ 164.804762][ T6415] tomoyo_supervisor+0xf09/0x11f0 [ 164.809817][ T6415] tomoyo_path_number_perm+0x5e8/0x880 [ 164.815279][ T6415] security_file_ioctl+0xc6/0x2a0 [ 164.820315][ T6415] __se_sys_ioctl+0x47/0x170 [ 164.824908][ T6415] page last free pid 4707 tgid 4707 stack trace: [ 164.831228][ T6415] free_unref_folios+0xe8a/0x1850 [ 164.836269][ T6415] folios_put_refs+0x76e/0x860 [ 164.841037][ T6415] free_pages_and_swap_cache+0x5c8/0x690 [ 164.846677][ T6415] tlb_flush_mmu+0x3a3/0x680 [ 164.851290][ T6415] tlb_finish_mmu+0xd4/0x200 [ 164.855882][ T6415] exit_mmap+0x496/0xc40 [ 164.860123][ T6415] __mmput+0x115/0x390 [ 164.864199][ T6415] exit_mm+0x220/0x310 [ 164.868268][ T6415] do_exit+0x9b2/0x28e0 [ 164.872417][ T6415] do_group_exit+0x207/0x2c0 [ 164.877002][ T6415] __x64_sys_exit_group+0x3f/0x40 [ 164.882029][ T6415] x64_sys_call+0x26a8/0x26b0 [ 164.886713][ T6415] do_syscall_64+0xf3/0x230 [ 164.891217][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.897279][ T6415] [ 164.899603][ T6415] Memory state around the buggy address: [ 164.905224][ T6415] ffff888029b86080: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 164.913276][ T6415] ffff888029b86100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 164.921325][ T6415] >ffff888029b86180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 164.929377][ T6415] ^ [ 164.935529][ T6415] ffff888029b86200: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 164.944111][ T6415] ffff888029b86280: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 164.952166][ T6415] ================================================================== [ 165.019498][ T6415] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.026751][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: syz.0.189 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 165.036914][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 165.046983][ T6415] Call Trace: [ 165.050273][ T6415] [ 165.053221][ T6415] dump_stack_lvl+0x241/0x360 [ 165.057920][ T6415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.063140][ T6415] ? __pfx__printk+0x10/0x10 [ 165.067758][ T6415] ? preempt_schedule+0xe1/0xf0 [ 165.072725][ T6415] ? vscnprintf+0x5d/0x90 [ 165.077079][ T6415] panic+0x349/0x880 [ 165.080995][ T6415] ? check_panic_on_warn+0x21/0xb0 [ 165.086122][ T6415] ? __pfx_panic+0x10/0x10 [ 165.090585][ T6415] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 165.096574][ T6415] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 165.102909][ T6415] ? print_report+0x502/0x550 [ 165.107593][ T6415] check_panic_on_warn+0x86/0xb0 [ 165.112532][ T6415] ? squashfs_readahead+0x210c/0x2680 [ 165.117907][ T6415] end_report+0x77/0x160 [ 165.122155][ T6415] kasan_report+0x154/0x180 [ 165.126671][ T6415] ? squashfs_readahead+0x210c/0x2680 [ 165.132063][ T6415] squashfs_readahead+0x210c/0x2680 [ 165.137274][ T6415] ? squashfs_readahead+0x6f0/0x2680 [ 165.142566][ T6415] ? __pfx_squashfs_readahead+0x10/0x10 [ 165.148128][ T6415] ? blk_start_plug+0x70/0x1b0 [ 165.152907][ T6415] read_pages+0x17e/0x840 [ 165.157234][ T6415] ? percpu_ref_put+0x19/0x180 [ 165.162004][ T6415] ? __pfx_read_pages+0x10/0x10 [ 165.166846][ T6415] ? filemap_add_folio+0x26d/0x650 [ 165.171956][ T6415] ? __pfx_filemap_add_folio+0x10/0x10 [ 165.177416][ T6415] page_cache_ra_unbounded+0x6ce/0x7f0 [ 165.182878][ T6415] filemap_get_pages+0x543/0x2330 [ 165.187915][ T6415] ? __pfx_filemap_get_pages+0x10/0x10 [ 165.193376][ T6415] ? __pfx___might_resched+0x10/0x10 [ 165.198664][ T6415] ? unwind_next_frame+0x18e6/0x22d0 [ 165.203963][ T6415] filemap_read+0x457/0xfa0 [ 165.208468][ T6415] ? 0xffffffffa000065c [ 165.212630][ T6415] ? __pfx_filemap_read+0x10/0x10 [ 165.217660][ T6415] ? iov_iter_kvec+0x4e/0x180 [ 165.222347][ T6415] __kernel_read+0x532/0x9f0 [ 165.226939][ T6415] ? do_sys_openat2+0x13e/0x1d0 [ 165.231792][ T6415] ? __x64_sys_openat+0x247/0x2a0 [ 165.236825][ T6415] ? __pfx___kernel_read+0x10/0x10 [ 165.241948][ T6415] integrity_kernel_read+0xb0/0x100 [ 165.247155][ T6415] ? __pfx_integrity_kernel_read+0x10/0x10 [ 165.252963][ T6415] ? ima_calc_file_hash+0xab7/0x1b30 [ 165.258270][ T6415] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 165.263823][ T6415] ima_calc_file_hash+0xaef/0x1b30 [ 165.269030][ T6415] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.275366][ T6415] ? lockdep_hardirqs_on+0x99/0x150 [ 165.280565][ T6415] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 165.286122][ T6415] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 165.292028][ T6415] ? __x64_sys_openat+0x247/0x2a0 [ 165.297073][ T6415] ? do_syscall_64+0xf3/0x230 [ 165.301751][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.307819][ T6415] ? mark_lock+0x9a/0x360 [ 165.312146][ T6415] ? make_vfsgid+0x46/0x90 [ 165.316572][ T6415] ? generic_fillattr+0x59c/0x840 [ 165.321609][ T6415] ima_collect_measurement+0x526/0xb20 [ 165.327077][ T6415] ? __pfx_ima_collect_measurement+0x10/0x10 [ 165.333087][ T6415] ? squashfs_xattr_handler_get+0x585/0x900 [ 165.338988][ T6415] ? trace_contention_end+0x3c/0x120 [ 165.344277][ T6415] ? __mutex_lock+0x2ef/0xd70 [ 165.348965][ T6415] ? ima_get_hash_algo+0x156/0x4d0 [ 165.354078][ T6415] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 165.359589][ T6415] process_measurement+0x1357/0x1fb0 [ 165.364889][ T6415] ? __pfx_process_measurement+0x10/0x10 [ 165.370526][ T6415] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 165.376956][ T6415] ? __pfx_apparmor_file_open+0x10/0x10 [ 165.382509][ T6415] ? tomoyo_file_open+0x168/0x220 [ 165.387547][ T6415] ? inode_to_bdi+0x69/0xf0 [ 165.392052][ T6415] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 165.398211][ T6415] ima_file_check+0xf2/0x170 [ 165.402805][ T6415] ? __pfx_ima_file_check+0x10/0x10 [ 165.408007][ T6415] security_file_post_open+0xb9/0x280 [ 165.413381][ T6415] path_openat+0x2cd0/0x3590 [ 165.417987][ T6415] ? __pfx_path_openat+0x10/0x10 [ 165.422932][ T6415] do_filp_open+0x235/0x490 [ 165.427447][ T6415] ? __pfx_do_filp_open+0x10/0x10 [ 165.432477][ T6415] ? _raw_spin_unlock+0x28/0x50 [ 165.437408][ T6415] ? alloc_fd+0x5a1/0x640 [ 165.441747][ T6415] do_sys_openat2+0x13e/0x1d0 [ 165.446449][ T6415] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.451664][ T6415] __x64_sys_openat+0x247/0x2a0 [ 165.456534][ T6415] ? __pfx___x64_sys_openat+0x10/0x10 [ 165.461923][ T6415] ? do_syscall_64+0x100/0x230 [ 165.466693][ T6415] ? do_syscall_64+0xb6/0x230 [ 165.471373][ T6415] do_syscall_64+0xf3/0x230 [ 165.475882][ T6415] ? clear_bhb_loop+0x35/0x90 [ 165.480583][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.486482][ T6415] RIP: 0033:0x7f1e0cb79e79 [ 165.490908][ T6415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.510513][ T6415] RSP: 002b:00007f1e0d9cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.518932][ T6415] RAX: ffffffffffffffda RBX: 00007f1e0cd15f80 RCX: 00007f1e0cb79e79 [ 165.526915][ T6415] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 165.534893][ T6415] RBP: 00007f1e0cbe7916 R08: 0000000000000000 R09: 0000000000000000 [ 165.542866][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.550840][ T6415] R13: 0000000000000000 R14: 00007f1e0cd15f80 R15: 00007ffe9e8bfef8 [ 165.558820][ T6415] [ 165.562158][ T6415] Kernel Offset: disabled [ 165.566477][ T6415] Rebooting in 86400 seconds..