last executing test programs: 1m17.630927766s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005002e000100000005040800010000001830000005"], 0x0}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 1m1.602169647s ago: executing program 2: socket$inet6(0xa, 0x1, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x819008, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r6, r3, 0x2, 0x0, 0x4000}, 0x10) socket$inet6(0xa, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0xffffffc8) socket$inet_udp(0x2, 0x2, 0x0) 1m0.390100403s ago: executing program 2: io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) 59.652399387s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005002e000100000005040800010000001830000005"], 0x0}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 45.250930407s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005002e000100000005040800010000001830000005"], 0x0}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 43.321936244s ago: executing program 2: io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) 32.701052421s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005002e000100000005040800010000001830000005"], 0x0}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 31.2119246s ago: executing program 2: io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) 19.426936136s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005002e000100000005040800010000001830000005"], 0x0}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 17.892245513s ago: executing program 2: io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) 11.238354058s ago: executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x0, @remote, 'erspan0\x00'}}, 0x1e) 10.717490379s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a011c1b9e46005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 10.654920548s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3208012, &(0x7f0000000300), 0x1, 0x561, &(0x7f0000001540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2200000, 0x0, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 9.613206589s ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 6.407770983s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005002e000100000005040800010000001830000005"], 0x0}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 6.157584191s ago: executing program 2: io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) 5.288573135s ago: executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a0000090505"], 0x0) 2.78599056s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, 0x0, 0x0, r2}) 2.702935394s ago: executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 2.019845659s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5416, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) accept$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xb0}}, 0x0) getgroups(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.018705479s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0xffc0, 0x0, 0x0, 0x31}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x80000000, &(0x7f0000000040)) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 1.870676622s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000001d00000008001d000000000008001e000000000008000100", @ANYRES32], 0x2c}}, 0x0) 1.805019272s ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.722351964s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90) 819.306274ms ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, 0x0, 0x0, r2}) 783.053079ms ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x5ff) sendfile(0xffffffffffffffff, r0, 0x0, 0xe065) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x800, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000580)=""/137, 0x89}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xe000200e}) epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) 677.303136ms ago: executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) ioctl$KDFONTOP_SET(r1, 0x4b6a, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000040)) sendto$inet6(r4, 0x0, 0x0, 0x20000880, &(0x7f0000001100)={0xa, 0x0, 0x0, @dev}, 0x1c) listen(r4, 0x0) 281.059296ms ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000001200)="6f361e6d69d18eca5944e8ef", 0xc}], 0x1) 51.871142ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x3, 0x69b, &(0x7f00000004c0)="$eJzs3c9vHGf9B/D3rNeOnW+Vr9MmbYSKiBKpIEUkji0XzIWAEPKhQlU5cLYSp7GycSrbRW6FwAUEJyQO/QMKkm+ckLgHhXO59epjJSQuEYeIi9HMztpr7zq249/wekXj55l5Zp757GeemdkfWW2A/1nTN9J8kiLTN95ZLufXVidaa6sT5+rmVpKy3kia7SLFfFI8Te6U7UXXlK6yx6dzU+998Wzty/Zcs56q9Rsv2q6PPuuu1FOuJhmoy16De93Flv7uJnmlZ5Whvfa1ZcUyadfrEk7ceo+V/Wy+n/MWOGU6d6eifd/sMZqcTzJcPw9IfXVoHF+ER2NfVzkAAAA4oz5/fNIRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNlT//5/UU+NuszVFJ3f/x/qLKvrZ9qTkw4AAAAAAAAAAA7B157neZZzoTO/XlSf+V+rZi7l3+vJ/+XDLGY2C7mZ5cxkKUtZyO0ko10dDS3PLC0t3N7YstR/y/G+W44f1yMGAAAAAAAAgP9Kv8z05uf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwGhTJQLuopkud+mgazXY1Q+WfleTvnfoZUfRb+OT44wAAAIADGX6Jbf7/eZ5nORc68+tF9Zr/9er18nA+zHyWMpeltDKbe/Vr6PJVf2NtdaK1tjrxqJx6+/3eP/cVRtVj2u899N/zlWqNkdzPXLXkZu5WwdxLo9qydKUTT/+4PiljKr5b22NkzTqt5c5+v9O7CIdiv29FjJbBJRsZGatjK7NxsZ2BonqjJtmeiV2PTnP7ntLI4Maebqex8c7PpSPI+fm6LB/Pb4405/u1kYlGqkyMd42+11+cieTrf/nTTx605h8+uL944/Q8pF0M7LB8+5iY6MrEG2c6E819rj9WZeLyxvx0fpgf50au5t0sZC4/zUyWMpv1un2mHs/l39EXZ+rOlrl3d4tkqD4u7WO2l5iu5gdVbSbXqm0vZC5FHudeZvN29W88t/OtTGYyU11H+PKOcVePrTrrG9vP+s6R/mvf4K9/o66MJPltXfbkYJudRudhaV/7y7xe7Mpre9Q/21jrYtd5MNaVpVc72Rns2/nLXBubX6kr5T5+VZenw2idifIE6twlOtG91s5Es7oX9Y7zP1TnxmJr/uHCg5kPduh/Zdv8W3VZDqvVr+41yv6H4nCV4+XVDNdXkq2jo2x7beMqc3HLXXWo/sSl3dboabtctRVF50z90Y5n6lD9HK63p/Gq7Y2+bRNV25Wuti3Pt/I4rdw7hvwBcECjOT808o+Rz0c+G/n1yIORd4a/f+7b594cyuDfBr/THBt4q/Fm8ed8lp9vvv4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe3uJHHz+cabVmF/pXGjs37VLZredtlaL+QZ+X2tfWyrmDbX44leEkW5YMlguOPYyR7WH0VNZ/kRx7fjo/Ith/nd+VlWb20uGd3db55MRHwmmvDKT/ADjhCxNw5G4tPfrg1uJHH39z7tHM+7Pvz84PTk5OjU1Nvj1x6/5ca3as/fekowSOwuZN/6QjAQAAAAAAAAAAAPaq3xcDrr2y25dG9vQdD/+zEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgU0zfSfJIit8dujpXza6sTrXLq1DfXbCZpNJLiZ0nxNLmT9pTRru6K/PFp1vvs59O5qfe+eLb25WZfzfb6SaMuD2ClnnI1yUBdHlZ/dw/cX/GvziMsE3a9kzg4af8JAAD//wuL9FE=") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 243.134104][ T7543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.143629][ T7543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.321143][ T4047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.338287][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.372349][ T7790] loop3: detected capacity change from 0 to 128 [ 243.378927][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.389808][ T4047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.407299][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.414977][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.422981][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.452753][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.473584][ T7488] sysv_free_block: flc_count > flc_size [ 243.494245][ T7488] sysv_free_block: flc_count > flc_size [ 243.499797][ T7488] sysv_free_block: flc_count > flc_size [ 243.510041][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.525161][ T7488] sysv_free_block: flc_count > flc_size [ 243.552696][ T4166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.565151][ T7488] sysv_free_block: flc_count > flc_size [ 243.595993][ T4166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.610013][ T7488] sysv_free_block: flc_count > flc_size [ 243.639977][ T7488] sysv_free_block: flc_count > flc_size [ 243.653880][ T7488] sysv_free_block: flc_count > flc_size [ 243.660683][ T7488] sysv_free_block: flc_count > flc_size [ 243.674181][ T7488] sysv_free_block: flc_count > flc_size [ 243.687405][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.717395][ T7488] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 243.739949][ T7798] loop4: detected capacity change from 0 to 1024 [ 243.761322][ T7799] loop1: detected capacity change from 0 to 512 [ 243.792738][ T7787] chnl_net:caif_netlink_parms(): no params data found [ 243.810707][ T7798] EXT4-fs (loop4): Mount option "commit=0x0000000000000006" incompatible with ext2 [ 243.906876][ T7799] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 243.930710][ T7808] loop3: detected capacity change from 0 to 4096 [ 243.937842][ T7799] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 243.953092][ T7799] EXT4-fs (loop1): mounted filesystem without journal. Opts: (null). Quota mode: writeback. [ 243.964125][ T7799] ext4 filesystem being mounted at /root/syzkaller-testdir1733697293/syzkaller.9XXCsf/0/file0 supports timestamps until 2038 (0x7fffffff) [ 243.979429][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.988703][ T7808] __ntfs_warning: 12 callbacks suppressed [ 243.988714][ T7808] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.996374][ T7808] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 244.039991][ T7808] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 244.049909][ T7808] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 244.064801][ T7808] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 244.078545][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.103898][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.121094][ T7787] device bridge_slave_0 entered promiscuous mode [ 244.122122][ T7808] ntfs: volume version 3.1. [ 244.145961][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.154517][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.167174][ T7787] device bridge_slave_1 entered promiscuous mode [ 244.234804][ T7787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.270546][ T7808] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 244.341941][ T7820] loop4: detected capacity change from 0 to 64 [ 244.365524][ T7817] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 244.436239][ T7787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.460538][ T7821] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 244.490535][ T7821] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 244.619571][ T7787] team0: Port device team_slave_0 added [ 244.660472][ T7787] team0: Port device team_slave_1 added [ 244.739633][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.758412][ T25] audit: type=1326 audit(1852735070.395:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f4d29aea9 code=0x0 [ 244.787791][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.864948][ T7787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.936748][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.960619][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.011213][ T7819] loop1: detected capacity change from 0 to 32768 [ 245.023924][ T7787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.069862][ T7819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7819) [ 245.133118][ T7819] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 245.159835][ T7787] device hsr_slave_0 entered promiscuous mode [ 245.162013][ T4350] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 245.174677][ T7819] BTRFS info (device loop1): using free space tree [ 245.194327][ T7819] BTRFS info (device loop1): has skinny extents [ 245.200907][ T7787] device hsr_slave_1 entered promiscuous mode [ 245.322787][ T3856] Bluetooth: hci4: command 0x0409 tx timeout [ 245.386684][ T7819] BTRFS info (device loop1): enabling ssd optimizations [ 245.450675][ T4350] usb 4-1: Using ep0 maxpacket: 8 [ 245.457870][ T7787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.584869][ T4350] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 245.593108][ T4350] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.603577][ T4350] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.613863][ T4350] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.624098][ T4350] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.637369][ T4350] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.648052][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.816851][ T7787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.875794][ T7829] chnl_net:caif_netlink_parms(): no params data found [ 245.920929][ T7787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.931950][ T4350] usb 4-1: GET_CAPABILITIES returned 0 [ 245.938209][ T4350] usbtmc 4-1:16.0: can't read capabilities [ 246.035968][ T7787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.127681][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.163425][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.198532][ T7829] device bridge_slave_0 entered promiscuous mode [ 246.236632][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.266761][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.274974][ T7829] device bridge_slave_1 entered promiscuous mode [ 246.336466][ T7881] loop1: detected capacity change from 0 to 1024 [ 246.512278][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.619505][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.651599][ T7881] hfsplus: request for non-existent node 3 in B*Tree [ 246.778509][ T7787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.789727][ T7881] hfsplus: request for non-existent node 3 in B*Tree [ 246.885534][ T7829] team0: Port device team_slave_0 added [ 246.971504][ T7787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.012194][ T7787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.178364][ T7829] team0: Port device team_slave_1 added [ 247.276914][ T7787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.309032][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.318832][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.345971][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.361280][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.372815][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.409324][ T3856] Bluetooth: hci1: command 0x0409 tx timeout [ 247.411868][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.438769][ T7888] loop1: detected capacity change from 0 to 4096 [ 247.510888][ T7888] NILFS (loop1): invalid segment: Checksum error in segment payload [ 247.520781][ T7888] NILFS (loop1): trying rollback from an earlier position [ 247.540916][ T7888] NILFS (loop1): recovery complete [ 247.546330][ T3567] Bluetooth: hci4: command 0x041b tx timeout [ 247.561725][ T7829] device hsr_slave_0 entered promiscuous mode [ 247.568108][ T7893] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.579696][ T7829] device hsr_slave_1 entered promiscuous mode [ 247.586282][ T7829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.597538][ T7829] Cannot create hsr debugfs directory [ 247.700424][ T7787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.747299][ T3797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.766317][ T7787] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.792516][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.804825][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.823377][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.836947][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.845956][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.853017][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.872548][ T3797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.882366][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.882780][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.883164][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.883408][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.883433][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.883752][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.886620][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.894778][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.896082][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.896741][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.906180][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.003050][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.018535][ T3797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.035806][ T7787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.035820][ T7787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.039386][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.039918][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.041057][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.041572][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.042642][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.066042][ T3969] usb 4-1: USB disconnect, device number 6 [ 248.087857][ T3797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.222598][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.254601][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.284175][ T7787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.411478][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.423332][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.474592][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.477775][ T7914] loop1: detected capacity change from 0 to 512 [ 248.487403][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.506064][ T7787] device veth0_vlan entered promiscuous mode [ 248.522565][ T7914] EXT4-fs (loop1): Test dummy encryption mode enabled [ 248.530687][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.538413][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.543219][ T7914] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue. Quota mode: none. [ 248.683009][ T7926] [U]  [ 248.686431][ T7914] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 248.697774][ T7787] device veth1_vlan entered promiscuous mode [ 248.744514][ T25] audit: type=1800 audit(1852735074.127:66): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 248.791515][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.805700][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.816077][ T25] audit: type=1804 audit(1852735074.155:67): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1733697293/syzkaller.9XXCsf/8/file0/bus" dev="loop1" ino=19 res=1 errno=0 [ 248.851233][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.865665][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.879750][ T7787] device veth0_macvtap entered promiscuous mode [ 248.893755][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.933123][ T7787] device veth1_macvtap entered promiscuous mode [ 248.969171][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.989431][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.999322][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.030499][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.051725][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.064528][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.074414][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.085847][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.095683][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.118867][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.136186][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.157771][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.177299][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.200528][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.220384][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.232160][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.269498][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.295138][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.309956][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.320527][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.331339][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.341192][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.352100][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.362029][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.804074][ T3567] Bluetooth: hci1: command 0x041b tx timeout [ 249.821026][ T3567] Bluetooth: hci4: command 0x040f tx timeout [ 249.821765][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.839444][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.851859][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.874929][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.885464][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.894200][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.910686][ T7787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.926638][ T7787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.935877][ T7787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.955753][ T7787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.143532][ T7829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.153817][ T7829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.184480][ T7960] [U]  [ 250.234688][ T7829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.242817][ T4348] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 250.253599][ T7829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.311430][ T7968] loop3: detected capacity change from 0 to 512 [ 250.365411][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.374843][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.394203][ T7968] EXT4-fs (loop3): Test dummy encryption mode enabled [ 250.413813][ T4620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.431805][ T4620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.447747][ T7968] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue. Quota mode: none. [ 250.488138][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.495801][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.507355][ T4348] usb 2-1: Using ep0 maxpacket: 8 [ 250.577009][ T25] audit: type=1800 audit(1852735075.829:68): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 250.602655][ T25] audit: type=1804 audit(1852735075.857:69): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3538038182/syzkaller.AlNc7b/37/file0/bus" dev="loop3" ino=19 res=1 errno=0 [ 250.695305][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.734912][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.751523][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.760350][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.801898][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.813798][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.822092][ T4348] usb 2-1: New USB device found, idVendor=19d2, idProduct=1119, bcdDevice=39.9d [ 250.839021][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.848515][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.855617][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.870772][ T4348] usb 2-1: Product: syz [ 250.877095][ T4348] usb 2-1: Manufacturer: syz [ 250.885865][ T4348] usb 2-1: SerialNumber: syz [ 250.896265][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.911186][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.924011][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.931127][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.947459][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.970945][ T7962] loop4: detected capacity change from 0 to 40427 [ 250.979908][ T4348] usb 2-1: bad CDC descriptors [ 250.987480][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.011105][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.019981][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.037462][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.049066][ T7962] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 251.050147][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.065644][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.074398][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.074964][ T7962] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 251.082766][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.104833][ T7829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.123239][ T7962] F2FS-fs (loop4): invalid crc value [ 251.129460][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.140689][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.156117][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.166082][ T7962] F2FS-fs (loop4): Found nat_bits in checkpoint [ 251.167948][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.215593][ T3861] usb 2-1: USB disconnect, device number 5 [ 251.284825][ T7962] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 251.297318][ T7962] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.307900][ T7976] loop3: detected capacity change from 0 to 32768 [ 251.330653][ T7962] kvm: emulating exchange as write [ 251.422531][ T7976] XFS (loop3): Mounting V5 Filesystem [ 251.438387][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.445833][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.457497][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.522332][ T7976] XFS (loop3): Ending clean mount [ 251.535128][ T7976] XFS (loop3): Quotacheck needed: Please wait. [ 251.541518][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.552011][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.592611][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.609016][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.642241][ T7829] device veth0_vlan entered promiscuous mode [ 251.663970][ T7829] device veth1_vlan entered promiscuous mode [ 251.691111][ T7976] XFS (loop3): Quotacheck: Done. [ 251.717358][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.725123][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.743290][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.782279][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.803537][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.829080][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.854656][ T7829] device veth0_macvtap entered promiscuous mode [ 251.864158][ T7829] device veth1_macvtap entered promiscuous mode [ 251.877577][ T7488] XFS (loop3): Unmounting Filesystem [ 251.937107][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.956724][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.968911][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.992881][ T7996] loop4: detected capacity change from 0 to 32768 [ 251.999878][ T3567] Bluetooth: hci1: command 0x040f tx timeout [ 252.005626][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.015746][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.026493][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.036407][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.046862][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.056652][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.067173][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.077013][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.088719][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.098589][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.110136][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.122206][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.136881][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.148234][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.154611][ T7996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7996) [ 252.158488][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.189597][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.199655][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.210593][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.223391][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.234386][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.244374][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.255356][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.265285][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.275874][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.285904][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.296457][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.313143][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.321716][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.339955][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.353691][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.365898][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.385240][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.409870][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.425790][ T7996] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 252.439565][ T7829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.455463][ T7996] BTRFS info (device loop4): using free space tree [ 252.460176][ T7829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.470858][ T7996] BTRFS info (device loop4): has skinny extents [ 252.473713][ T7829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.486054][ T7829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.498074][ T8001] loop1: detected capacity change from 0 to 64 [ 252.637006][ T3797] device hsr_slave_0 left promiscuous mode [ 252.657844][ T3797] device hsr_slave_1 left promiscuous mode [ 252.686399][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.788324][ T25] audit: type=1326 audit(1852735077.906:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58ec414ea9 code=0x0 [ 252.797101][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.853916][ T7996] BTRFS info (device loop4): enabling ssd optimizations [ 252.862256][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.890645][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.947329][ T3797] device bridge_slave_1 left promiscuous mode [ 252.953495][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.099684][ T3797] device bridge_slave_0 left promiscuous mode [ 253.107514][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.130223][ T3797] device hsr_slave_0 left promiscuous mode [ 253.156091][ T3797] device hsr_slave_1 left promiscuous mode [ 253.173783][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.200871][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.212402][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.224280][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.238469][ T3797] device bridge_slave_1 left promiscuous mode [ 253.248762][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.283835][ T3797] device bridge_slave_0 left promiscuous mode [ 253.299830][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.333799][ T3797] device hsr_slave_0 left promiscuous mode [ 253.356819][ T3797] device hsr_slave_1 left promiscuous mode [ 253.364846][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.372278][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.382152][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.392524][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.402569][ T3797] device bridge_slave_1 left promiscuous mode [ 253.415435][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.427302][ T3797] device bridge_slave_0 left promiscuous mode [ 253.433482][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.478990][ T3797] device veth1_macvtap left promiscuous mode [ 253.492858][ T3797] device veth0_macvtap left promiscuous mode [ 253.507665][ T3797] device veth1_vlan left promiscuous mode [ 253.519602][ T3797] device veth0_vlan left promiscuous mode [ 253.535598][ T3797] device veth1_macvtap left promiscuous mode [ 253.545807][ T3797] device veth0_macvtap left promiscuous mode [ 253.551954][ T3797] device veth1_vlan left promiscuous mode [ 253.568738][ T3797] device veth0_vlan left promiscuous mode [ 253.582262][ T3797] device veth1_macvtap left promiscuous mode [ 253.593577][ T3797] device veth0_macvtap left promiscuous mode [ 253.600068][ T3797] device veth1_vlan left promiscuous mode [ 253.606005][ T3797] device veth0_vlan left promiscuous mode [ 253.811037][ T8039] loop1: detected capacity change from 0 to 32768 [ 254.087301][ T3797] team0 (unregistering): Port device team_slave_1 removed [ 254.112585][ T3797] team0 (unregistering): Port device team_slave_0 removed [ 254.136947][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.149255][ T8046] loop1: detected capacity change from 0 to 4096 [ 254.159959][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.201378][ T8046] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 254.228038][ T4129] Bluetooth: hci1: command 0x0419 tx timeout [ 254.243454][ T3797] bond0 (unregistering): Released all slaves [ 254.274319][ T25] audit: type=1800 audit(1852735079.290:71): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 254.403399][ T3797] team0 (unregistering): Port device team_slave_1 removed [ 254.432069][ T3797] team0 (unregistering): Port device team_slave_0 removed [ 254.451450][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.473013][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.547070][ T3797] bond0 (unregistering): Released all slaves [ 254.681699][ T3797] team0 (unregistering): Port device team_slave_1 removed [ 254.695542][ T3797] team0 (unregistering): Port device team_slave_0 removed [ 254.706539][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.720203][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.785412][ T3797] bond0 (unregistering): Released all slaves [ 254.870072][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.878190][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.923768][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.954763][ T8055] loop4: detected capacity change from 0 to 512 [ 254.978980][ T4620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.007379][ T4620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.019721][ T8055] EXT4-fs (loop4): Ignoring removed orlov option [ 255.027197][ T8055] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.032526][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.069946][ T8055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 255.078291][ T8055] System zones: 1-12 [ 255.085526][ T8055] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 255.173289][ T8055] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 255.193895][ T8055] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 255.211797][ T8055] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 255.248017][ T8055] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 255.264791][ T3968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 255.290170][ T8055] EXT4-fs (loop4): 1 orphan inode deleted [ 255.302787][ T8055] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,abort,debug_want_extra_isize=0x000000000000005c,debug,noinit_itable,errors=continue,usrjquota=,orlov,minixdf,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 255.343882][ T25] audit: type=1800 audit(1852735080.291:72): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=15 res=0 errno=0 [ 255.521389][ T3968] usb 2-1: Using ep0 maxpacket: 8 [ 255.649685][ T3968] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 255.663801][ T3968] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.690920][ T3968] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.712758][ T3968] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.731362][ T3968] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.762311][ T3968] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.778697][ T3968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.824763][ T8072] chnl_net:caif_netlink_parms(): no params data found [ 255.933754][ T8086] loop4: detected capacity change from 0 to 4096 [ 256.066580][ T3968] usb 2-1: GET_CAPABILITIES returned 0 [ 256.072164][ T3968] usbtmc 2-1:16.0: can't read capabilities [ 256.079850][ T8086] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 256.119092][ T8086] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 256.139823][ T8086] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 256.150375][ T8086] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 256.192606][ T8086] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 256.261553][ T8072] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.277872][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.286953][ T8086] ntfs: volume version 3.1. [ 256.287696][ T8072] device bridge_slave_0 entered promiscuous mode [ 256.300324][ T8093] /dev/loop0: Can't open blockdev [ 256.335119][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.365987][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.385981][ T8072] device bridge_slave_1 entered promiscuous mode [ 256.393953][ T8086] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 256.416665][ T8101] loop3: detected capacity change from 0 to 512 [ 256.436711][ T8100] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 256.458626][ T8086] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 256.471700][ T8101] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 256.475241][ T8086] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 256.489504][ T8101] EXT4-fs (loop3): orphan cleanup on readonly fs [ 256.506064][ T8101] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 256.521088][ T8101] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 256.535439][ T8072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.547790][ T8101] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 256.566350][ T8072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.580475][ T8101] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 256.623881][ T8101] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 256.664642][ T8072] team0: Port device team_slave_0 added [ 256.674254][ T8072] team0: Port device team_slave_1 added [ 256.696285][ T8101] EXT4-fs (loop3): 1 truncate cleaned up [ 256.724206][ T8101] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.755588][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.772937][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.783116][ T8101] EXT4-fs error (device loop3): ext4_lookup:1855: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 256.844695][ T8072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.898228][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.915457][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.972828][ T8072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.109769][ T8072] device hsr_slave_0 entered promiscuous mode [ 257.116750][ T8072] device hsr_slave_1 entered promiscuous mode [ 257.123429][ T8072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.132216][ T8072] Cannot create hsr debugfs directory [ 257.166874][ T8118] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.723505][ T3567] Bluetooth: hci1: command 0x0409 tx timeout [ 258.153393][ T8125] /dev/loop0: Can't open blockdev [ 258.236183][ T4129] usb 2-1: USB disconnect, device number 6 [ 259.178226][ T8072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.360418][ T3856] Bluetooth: hci4: command 0x0409 tx timeout [ 259.482675][ T8108] chnl_net:caif_netlink_parms(): no params data found [ 259.612940][ T8072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.758317][ T8072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.858981][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.866475][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.890419][ T8108] device bridge_slave_0 entered promiscuous mode [ 259.908498][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.916526][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.924626][ T8108] device bridge_slave_1 entered promiscuous mode [ 259.958116][ T3856] Bluetooth: hci1: command 0x041b tx timeout [ 259.981198][ T8072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.015062][ T8164] /dev/loop0: Can't open blockdev [ 260.049819][ T8108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.090344][ T8108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.251121][ T8171] loop3: detected capacity change from 0 to 128 [ 260.254524][ T8108] team0: Port device team_slave_0 added [ 260.280452][ T8108] team0: Port device team_slave_1 added [ 260.600760][ T8169] loop4: detected capacity change from 0 to 32768 [ 260.747366][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.761819][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.814985][ T8108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.826788][ T8169] XFS (loop4): Mounting V5 Filesystem [ 260.888695][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.895643][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.985345][ T8169] XFS (loop4): Ending clean mount [ 260.992025][ T8169] XFS (loop4): Quotacheck needed: Please wait. [ 261.061038][ T8108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.115782][ T8072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.149838][ T8169] XFS (loop4): Quotacheck: Done. [ 261.180235][ T8072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.231623][ T8072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.261649][ T8072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.289486][ T7508] XFS (loop4): Unmounting Filesystem [ 261.369565][ T8108] device hsr_slave_0 entered promiscuous mode [ 261.409641][ T8108] device hsr_slave_1 entered promiscuous mode [ 261.425039][ T8108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.451111][ T8108] Cannot create hsr debugfs directory [ 261.572547][ T3567] Bluetooth: hci4: command 0x041b tx timeout [ 261.584281][ T8201] /dev/loop0: Can't open blockdev [ 261.895501][ T8108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.142815][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.170773][ T4129] Bluetooth: hci1: command 0x040f tx timeout [ 262.191898][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.202114][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.230446][ T8072] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.280963][ T8213] loop4: detected capacity change from 0 to 32768 [ 262.301359][ T8108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.375910][ T8222] loop3: detected capacity change from 0 to 8192 [ 262.489946][ T8222] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.513576][ T8213] XFS (loop4): Mounting V5 Filesystem [ 262.548243][ T8222] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 262.574822][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.595665][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.609649][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.616744][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.624897][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.635320][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.644476][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.651563][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.718895][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.725047][ T8213] XFS (loop4): Ending clean mount [ 262.742303][ T8108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.779749][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.802312][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.810752][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.824917][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.861464][ T8108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.873965][ T8213] XFS (loop4): Quotacheck needed: Please wait. [ 262.963799][ T8213] XFS (loop4): Quotacheck: Done. [ 262.981887][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.992326][ T7508] XFS (loop4): Unmounting Filesystem [ 263.005862][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.014642][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.034623][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.053470][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.068950][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.083214][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.099905][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.216022][ T8108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.262168][ T8108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.286957][ T8108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.321118][ T8108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.415340][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.433507][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.470931][ T8253] loop3: detected capacity change from 0 to 8192 [ 263.483984][ T8072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.526220][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.537441][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.545615][ T8253] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 263.559847][ T8108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.616045][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.623786][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.651081][ T8072] device veth0_vlan entered promiscuous mode [ 263.681975][ T8260] loop4: detected capacity change from 0 to 8192 [ 263.700808][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.711628][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.727642][ T8108] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.742905][ T8072] device veth1_vlan entered promiscuous mode [ 263.755967][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.764273][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.766673][ T8260] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.795160][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.801066][ T8260] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 263.830670][ T3567] Bluetooth: hci4: command 0x040f tx timeout [ 263.869758][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.881871][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.890182][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.897266][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.907546][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.946101][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.951313][ T8270] loop1: detected capacity change from 0 to 4096 [ 263.966240][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.973333][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.010896][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.018612][ T8270] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 264.019724][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.036386][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.052798][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.061856][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.084568][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.088022][ T25] audit: type=1800 audit(1852735088.476:73): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 264.096855][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.191634][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.200081][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.226947][ T8072] device veth0_macvtap entered promiscuous mode [ 264.240906][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.254643][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.271773][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.291590][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.307660][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.324369][ T8108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.357129][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.387673][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.401429][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.424950][ T8072] device veth1_macvtap entered promiscuous mode [ 264.432928][ T3570] Bluetooth: hci1: command 0x0419 tx timeout [ 264.504807][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.527761][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.533169][ T8289] loop4: detected capacity change from 0 to 8192 [ 264.541619][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.555568][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.581620][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.594756][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.605105][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.615957][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.625876][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.636385][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.647668][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.666700][ T8289] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 264.669127][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.685593][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.695147][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.737390][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.777163][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.787049][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.807572][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.820214][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.845587][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.849366][ T8301] loop1: detected capacity change from 0 to 8192 [ 264.861620][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.872260][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.882312][ T8072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.893118][ T8072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.904721][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.918048][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.927091][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.937794][ T8301] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.961826][ T8072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.978495][ T8072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.990393][ T8301] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 264.991085][ T8072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.013019][ T8303] loop4: detected capacity change from 0 to 512 [ 265.015128][ T8072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.036815][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.044261][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.056276][ T8108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.118553][ T8303] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.130482][ T8303] ext4 filesystem being mounted at /root/syzkaller-testdir518014092/syzkaller.7YyY0d/64/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 265.176470][ T8303] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents [ 265.214015][ T8303] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #2: comm syz-executor.4: mark_inode_dirty error [ 265.230050][ T8303] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents [ 265.249940][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.258362][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.283802][ T8303] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz-executor.4: mark_inode_dirty error [ 265.287018][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.328522][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.387857][ T8303] EXT4-fs error (device loop4): ext4_lookup:1852: inode #19: comm syz-executor.4: 'bus' linked to parent dir [ 265.410888][ T8313] loop3: detected capacity change from 0 to 4096 [ 265.426075][ T8108] device veth0_vlan entered promiscuous mode [ 265.450897][ T8309] overlayfs: failed to resolve './file0': -2 [ 265.461896][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.470495][ T8313] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 265.484518][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.516569][ T8108] device veth1_vlan entered promiscuous mode [ 265.540854][ T8321] loop1: detected capacity change from 0 to 2048 [ 265.578579][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.594457][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.600527][ T25] audit: type=1800 audit(1852735089.888:74): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 265.630129][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.654585][ T8321] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 265.672436][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.682828][ T8321] EXT4-fs error (device loop1): ext4_ext_precache:626: inode #2: comm syz-executor.1: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 265.705877][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.781881][ T8325] loop4: detected capacity change from 0 to 2048 [ 265.795417][ T4047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.814092][ T8108] device veth0_macvtap entered promiscuous mode [ 265.835444][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.845665][ T4047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.850404][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.875353][ T8325] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.909694][ T8108] device veth1_macvtap entered promiscuous mode [ 265.915765][ T8325] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,block_validity,resuid=0x000000000000ee01,discard,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback. [ 265.932456][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.945654][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.954442][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.983858][ T8332] loop3: detected capacity change from 0 to 512 [ 266.025641][ T8325] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #12: block 9: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 266.037653][ T4129] Bluetooth: hci4: command 0x0419 tx timeout [ 266.094768][ T8332] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 266.103702][ T8332] EXT4-fs (loop3): orphan cleanup on readonly fs [ 266.118244][ T8332] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 266.142009][ T8332] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 266.151042][ T8332] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 266.165594][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.180288][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.190105][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.221970][ T8341] loop1: detected capacity change from 0 to 16 [ 266.234430][ T8332] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 266.241929][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.257467][ T8332] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 266.262523][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.278671][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.280399][ T8332] EXT4-fs (loop3): 1 truncate cleaned up [ 266.302228][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.305408][ T8332] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.323892][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.340045][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.353034][ T8332] EXT4-fs error (device loop3): ext4_lookup:1855: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 266.358157][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.377535][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.388092][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.399572][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.414649][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.423444][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.427212][ T8341] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 266.434465][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.451780][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.479135][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.494309][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.504483][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.515303][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.525367][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.536186][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.546394][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.557298][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.567351][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.578161][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.589909][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.602577][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.617457][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.636685][ T8356] loop3: detected capacity change from 0 to 4096 [ 266.646429][ T3797] device hsr_slave_0 left promiscuous mode [ 266.671322][ T3797] device hsr_slave_1 left promiscuous mode [ 266.707155][ T8356] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 266.722169][ T8360] loop4: detected capacity change from 0 to 2048 [ 266.729060][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.738559][ T8358] loop1: detected capacity change from 0 to 4096 [ 266.744046][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.756537][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.766279][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.779486][ T3797] device bridge_slave_1 left promiscuous mode [ 266.785861][ T8360] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 266.799086][ T8358] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 266.799214][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.848419][ T3797] device bridge_slave_0 left promiscuous mode [ 266.849580][ T25] audit: type=1800 audit(1852735091.058:75): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 266.889634][ T8360] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,block_validity,resuid=0x000000000000ee01,discard,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback. [ 266.891352][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.937216][ T3797] device hsr_slave_0 left promiscuous mode [ 266.945838][ T3797] device hsr_slave_1 left promiscuous mode [ 266.969443][ T8360] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #12: block 9: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 266.990500][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.009964][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.027658][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.035298][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.059046][ T3797] device bridge_slave_1 left promiscuous mode [ 267.070690][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.118732][ T3797] device bridge_slave_0 left promiscuous mode [ 267.120383][ T8370] loop4: detected capacity change from 0 to 256 [ 267.138805][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.168114][ T8370] exfat: Unknown parameter 'vcan0' [ 267.173784][ T3797] device veth1_macvtap left promiscuous mode [ 267.191972][ T8366] loop3: detected capacity change from 0 to 8192 [ 267.195806][ T3797] device veth0_macvtap left promiscuous mode [ 267.204441][ T3797] device veth1_vlan left promiscuous mode [ 267.220448][ T3797] device veth0_vlan left promiscuous mode [ 267.225140][ T8376] loop1: detected capacity change from 0 to 16 [ 267.249180][ T8366] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 267.261178][ T3797] device veth1_macvtap left promiscuous mode [ 267.261391][ T8376] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 267.286289][ T3797] device veth0_macvtap left promiscuous mode [ 267.298187][ T3797] device veth1_vlan left promiscuous mode [ 267.313617][ T3797] device veth0_vlan left promiscuous mode [ 267.395088][ T25] audit: type=1326 audit(1852735091.563:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f4d29aea9 code=0x0 [ 267.506665][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.525019][ T8383] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 267.537091][ T8385] loop4: detected capacity change from 0 to 2048 [ 267.628680][ T8385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.842014][ T3797] team0 (unregistering): Port device team_slave_1 removed [ 267.871865][ T3797] team0 (unregistering): Port device team_slave_0 removed [ 267.898133][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.933055][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.049088][ T3797] bond0 (unregistering): Released all slaves [ 268.249808][ T3797] team0 (unregistering): Port device team_slave_1 removed [ 268.266710][ T3797] team0 (unregistering): Port device team_slave_0 removed [ 268.293675][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.294395][ T8392] loop4: detected capacity change from 0 to 4096 [ 268.315890][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.345398][ T8392] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 268.399078][ T3797] bond0 (unregistering): Released all slaves [ 268.452624][ T8108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.461868][ T8108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.470775][ T8108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.479598][ T8108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.639247][ T4620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.652561][ T4620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.691481][ T4166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.712407][ T4166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.781571][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.810935][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.874904][ T8408] loop1: detected capacity change from 0 to 16 [ 268.917564][ T8408] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 268.930127][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.936454][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.302516][ T25] audit: type=1326 audit(1852735093.359:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5af2f1aea9 code=0x0 [ 269.331873][ T8421] loop1: detected capacity change from 0 to 4096 [ 269.408360][ T8421] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 269.432476][ T8423] loop3: detected capacity change from 0 to 2048 [ 269.595833][ T8423] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.696717][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 269.724223][ T8412] chnl_net:caif_netlink_parms(): no params data found [ 270.343851][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.351593][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.381526][ T8412] device bridge_slave_0 entered promiscuous mode [ 270.403735][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.410808][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.457780][ T8412] device bridge_slave_1 entered promiscuous mode [ 270.487928][ T8435] loop1: detected capacity change from 0 to 32768 [ 270.512318][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.519391][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.549118][ T8415] device bridge_slave_0 entered promiscuous mode [ 270.569239][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.576542][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.603302][ T8415] device bridge_slave_1 entered promiscuous mode [ 270.626294][ T8435] XFS (loop1): Mounting V5 Filesystem [ 270.642277][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.668825][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.730473][ T8447] device syzkaller0 entered promiscuous mode [ 270.794206][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.822570][ T8412] team0: Port device team_slave_0 added [ 270.862748][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.874002][ T8412] team0: Port device team_slave_1 added [ 270.908523][ T8435] XFS (loop1): Ending clean mount [ 270.960007][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.967225][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.001874][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.027722][ T8415] team0: Port device team_slave_0 added [ 271.039107][ T7543] XFS (loop1): Unmounting Filesystem [ 271.058065][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.065008][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.099186][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.192050][ T8415] team0: Port device team_slave_1 added [ 271.301730][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.308696][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.351703][ T4129] Bluetooth: hci1: command 0x0409 tx timeout [ 271.358145][ T4129] Bluetooth: hci0: command 0x0409 tx timeout [ 271.393476][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.466927][ T8412] device hsr_slave_0 entered promiscuous mode [ 271.515550][ T8412] device hsr_slave_1 entered promiscuous mode [ 271.569240][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.576193][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.585876][ T8462] loop1: detected capacity change from 0 to 64 [ 271.642721][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.773194][ T8415] device hsr_slave_0 entered promiscuous mode [ 271.791142][ T8415] device hsr_slave_1 entered promiscuous mode [ 271.803424][ T8415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.812070][ T8415] Cannot create hsr debugfs directory [ 272.064217][ T8446] chnl_net:caif_netlink_parms(): no params data found [ 272.215328][ T8412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.674069][ T8412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.776098][ T3970] Bluetooth: hci4: command 0x0409 tx timeout [ 272.794097][ T8412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.818317][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.849805][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.857707][ T8446] device bridge_slave_0 entered promiscuous mode [ 272.874748][ T8412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.890530][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.908339][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.917046][ T8446] device bridge_slave_1 entered promiscuous mode [ 272.959077][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.959611][ T8484] loop1: detected capacity change from 0 to 128 [ 272.979638][ T3797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.995652][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.013712][ T8484] zonefs (loop1) ERROR: Not a zoned block device [ 273.042762][ T3797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.064554][ T8446] team0: Port device team_slave_0 added [ 273.072291][ T8446] team0: Port device team_slave_1 added [ 273.075371][ T3970] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 273.096043][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.103871][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.131338][ T8446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.154609][ T3797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.168990][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.177824][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.185776][ T8486] loop1: detected capacity change from 0 to 512 [ 273.204838][ T8446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.232111][ T3797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.266331][ T8446] device hsr_slave_0 entered promiscuous mode [ 273.278414][ T8446] device hsr_slave_1 entered promiscuous mode [ 273.284523][ T8486] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.296197][ T8486] ext4 filesystem being mounted at /root/syzkaller-testdir1733697293/syzkaller.9XXCsf/67/bus supports timestamps until 2038 (0x7fffffff) [ 273.310672][ T8446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.321361][ T8446] Cannot create hsr debugfs directory [ 273.471294][ T3970] usb 4-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=a6.74 [ 273.498102][ T3970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.509856][ T3970] usb 4-1: config 0 descriptor?? [ 273.584158][ T3970] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 273.839889][ T4350] Bluetooth: hci0: command 0x041b tx timeout [ 273.852406][ T4350] Bluetooth: hci1: command 0x041b tx timeout [ 274.161935][ T3970] gspca_sunplus: reg_r err -71 [ 274.166929][ T3970] sunplus: probe of 4-1:0.0 failed with error -71 [ 274.176663][ T3970] usb 4-1: USB disconnect, device number 7 [ 274.178151][ T8415] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.213593][ T8412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 274.228271][ T8412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 274.249420][ T8412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 274.267962][ T8412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 274.322397][ T8415] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.404530][ T8415] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.443275][ T8412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.465288][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.472970][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.497718][ T8415] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.513585][ T8412] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.539866][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.548801][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.559363][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.566468][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.574441][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.583354][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.591707][ T3970] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.598794][ T3970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.611569][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.619808][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.669411][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.677966][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.692416][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.701349][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.709913][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.725440][ T8412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.738613][ T8412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.779358][ T8503] binder: 8502:8503 ioctl c0306201 200001c0 returned -14 [ 274.790771][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.802937][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.818267][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.826731][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.835736][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.844851][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.957810][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.965316][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.986220][ T8412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.000307][ T3970] Bluetooth: hci4: command 0x041b tx timeout [ 275.020523][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.030335][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.054503][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.062503][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.071656][ T8412] device veth0_vlan entered promiscuous mode [ 275.079851][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.089923][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.116504][ T8412] device veth1_vlan entered promiscuous mode [ 275.137062][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.145752][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.154079][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.162380][ T3570] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 275.171548][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.182864][ T8412] device veth0_macvtap entered promiscuous mode [ 275.190775][ T3856] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 275.213093][ T8412] device veth1_macvtap entered promiscuous mode [ 275.230757][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.242608][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.252768][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.263552][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.278486][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.289575][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.299867][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.310514][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.321814][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.332762][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.344293][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.353571][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.362285][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.371496][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.380507][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.391770][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.404558][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.414644][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.426625][ T3570] usb 4-1: Using ep0 maxpacket: 32 [ 275.426841][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.442808][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.453259][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.459993][ T3856] usb 2-1: Using ep0 maxpacket: 32 [ 275.463109][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.478608][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.489453][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.500018][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.511223][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.538806][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.547512][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.567227][ T8412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.576037][ T8412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.585798][ T3570] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 275.591140][ T8412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.605749][ T8412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.609255][ T3856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.627390][ T8446] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 275.638902][ T3856] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.652184][ T3856] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 275.662098][ T3856] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 275.672954][ T3856] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 275.674274][ T8446] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 275.741607][ T8446] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 275.759580][ T8446] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 275.790801][ T3570] usb 4-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=95.2e [ 275.799845][ T3570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.808955][ T3570] usb 4-1: Product: syz [ 275.814195][ T3570] usb 4-1: Manufacturer: syz [ 275.818793][ T3570] usb 4-1: SerialNumber: syz [ 275.824832][ T8415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.832475][ T3570] usb 4-1: config 0 descriptor?? [ 275.853050][ T8415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.860569][ T3856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.874919][ T3856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.884548][ T3570] keyspan 4-1:0.0: Keyspan - (without firmware) converter detected [ 275.885913][ T8415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.910465][ T3856] usb 2-1: Product: syz [ 275.914628][ T3856] usb 2-1: Manufacturer: syz [ 275.920557][ T3570] usb 4-1: Direct firmware load for keyspan/usa28.fw failed with error -2 [ 275.922085][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.929123][ T3570] usb 4-1: Falling back to sysfs fallback for: keyspan/usa28.fw [ 275.933099][ T3856] usb 2-1: SerialNumber: syz [ 275.949538][ T8415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.960591][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.978883][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 276.005350][ T3856] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 276.012139][ T3856] cdc_ncm 2-1:1.0: bind() failure [ 276.021219][ T3856] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 276.026156][ T26] Bluetooth: hci0: command 0x040f tx timeout [ 276.040368][ T4166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.048908][ T3856] cdc_ncm 2-1:1.1: bind() failure [ 276.055813][ T4166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.078099][ T3797] device hsr_slave_0 left promiscuous mode [ 276.090401][ T3797] device hsr_slave_1 left promiscuous mode [ 276.096787][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.106186][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.111680][ T26] Bluetooth: hci1: command 0x040f tx timeout [ 276.121288][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.128849][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.138601][ T3797] device bridge_slave_1 left promiscuous mode [ 276.145107][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.153217][ T3797] device bridge_slave_0 left promiscuous mode [ 276.160431][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.171167][ T3797] device hsr_slave_0 left promiscuous mode [ 276.178461][ T3797] device hsr_slave_1 left promiscuous mode [ 276.184649][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.193901][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.202490][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.212669][ T3797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.222163][ T3797] device bridge_slave_1 left promiscuous mode [ 276.224654][ T3960] usb 2-1: USB disconnect, device number 7 [ 276.228347][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.242775][ T3797] device bridge_slave_0 left promiscuous mode [ 276.248927][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.263298][ T3797] device veth1_macvtap left promiscuous mode [ 276.269342][ T3797] device veth0_macvtap left promiscuous mode [ 276.276094][ T3797] device veth1_vlan left promiscuous mode [ 276.281870][ T3797] device veth0_vlan left promiscuous mode [ 276.288695][ T3797] device veth1_macvtap left promiscuous mode [ 276.296215][ T3797] device veth0_macvtap left promiscuous mode [ 276.302979][ T3797] device veth1_vlan left promiscuous mode [ 276.309202][ T3797] device veth0_vlan left promiscuous mode [ 276.558506][ T3797] team0 (unregistering): Port device team_slave_1 removed [ 276.577623][ T3797] team0 (unregistering): Port device team_slave_0 removed [ 276.589215][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.604696][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.691741][ T3797] bond0 (unregistering): Released all slaves [ 276.837152][ T3797] team0 (unregistering): Port device team_slave_1 removed [ 276.857517][ T3797] team0 (unregistering): Port device team_slave_0 removed [ 276.879970][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.908571][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.011797][ T3797] bond0 (unregistering): Released all slaves [ 277.086352][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.106217][ T8517] device bond0 entered promiscuous mode [ 277.111772][ T8517] device bond_slave_0 entered promiscuous mode [ 277.120095][ T8517] device bond_slave_1 entered promiscuous mode [ 277.125912][ T8520] loop1: detected capacity change from 0 to 40427 [ 277.226942][ T26] Bluetooth: hci4: command 0x040f tx timeout [ 277.237985][ T8520] F2FS-fs (loop1): invalid crc value [ 277.247789][ T8520] F2FS-fs (loop1): Found nat_bits in checkpoint [ 277.314029][ T8525] loop3: detected capacity change from 0 to 512 [ 277.341786][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.371788][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.371952][ T8520] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 277.385034][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.393718][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.439072][ T8525] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.459304][ T8525] ext4 filesystem being mounted at /root/syzkaller-testdir3538038182/syzkaller.AlNc7b/108/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 277.526606][ T8525] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz-executor.3: corrupted inode contents [ 277.548590][ T8525] EXT4-fs error (device loop3): ext4_dirty_inode:5993: inode #2: comm syz-executor.3: mark_inode_dirty error [ 277.564079][ T8525] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz-executor.3: corrupted inode contents [ 277.567733][ T8446] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.597560][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.599317][ T8525] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz-executor.3: mark_inode_dirty error [ 277.605273][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.197659][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.236900][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.252626][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.273843][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.280925][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.297656][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.317090][ T7488] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 278.328741][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.347907][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.354251][ T7488] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 278.354946][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.376271][ T7488] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 278.406859][ T7488] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 278.408319][ T6026] Bluetooth: hci1: command 0x0419 tx timeout [ 278.428533][ T7488] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 278.456276][ T7488] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 278.540950][ T7543] attempt to access beyond end of device [ 278.540950][ T7543] loop1: rw=2049, want=45104, limit=40427 [ 278.555333][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.563369][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.585250][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.611256][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.634846][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.641894][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.666699][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.676228][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.709666][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.717995][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.725082][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.740410][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.749212][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.768040][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.782666][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.799241][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.811323][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.831198][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.844007][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.856437][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.873054][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.885655][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.904814][ T8446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.933047][ T8446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.963453][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.976609][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.992687][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.005571][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.022224][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.036194][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.053926][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.062662][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.077281][ T8415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.120460][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.139111][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.154983][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.312059][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.331030][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.339328][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.372591][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.381264][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.427075][ T8446] device veth0_vlan entered promiscuous mode [ 279.433667][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.447113][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 279.448247][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.477946][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.486316][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.498933][ T8446] device veth1_vlan entered promiscuous mode [ 279.528489][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.538264][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.554730][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.573908][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.599334][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.608910][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.617399][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.638531][ T8446] device veth0_macvtap entered promiscuous mode [ 279.671855][ T8446] device veth1_macvtap entered promiscuous mode [ 279.710773][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.743047][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.767921][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.789339][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.799249][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.810253][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 279.831911][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.841732][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.875230][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.898826][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.908956][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.928952][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.936949][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.961396][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.977928][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.002936][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.012754][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.046369][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.066833][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 280.072049][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.088827][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.098652][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.132234][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.162002][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.192367][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.195324][ T26] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 280.201497][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.241969][ T8446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.257044][ T8446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.297818][ T8446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.307062][ T8446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.381759][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.409682][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.419996][ T26] usb 2-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=95.2e [ 280.429031][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.458020][ T26] usb 2-1: Product: syz [ 280.466914][ T26] usb 2-1: Manufacturer: syz [ 280.471731][ T26] usb 2-1: SerialNumber: syz [ 280.485043][ T4685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.488618][ T8415] device veth0_vlan entered promiscuous mode [ 280.493129][ T4685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.526082][ T26] usb 2-1: config 0 descriptor?? [ 280.538871][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.548876][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.568533][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.581102][ T26] keyspan 2-1:0.0: Keyspan - (without firmware) converter detected [ 280.601155][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.622163][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.659485][ T8415] device veth1_vlan entered promiscuous mode [ 280.707914][ T4685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.722871][ T4685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.750681][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.769908][ T3970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.787506][ T8415] device veth0_macvtap entered promiscuous mode [ 280.805091][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.812864][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.852626][ T8415] device veth1_macvtap entered promiscuous mode [ 280.944136][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.971754][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.996908][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.018903][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.028732][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.067969][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.093100][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.103527][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.135896][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.146323][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.180154][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.194492][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.211519][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.220129][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.246205][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.264429][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.274248][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.307050][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.316874][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.379316][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.404420][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.427773][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.447120][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.469225][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.492344][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.522569][ T8559] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 281.554590][ T8559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.581278][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.617809][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.629389][ T8415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.638098][ T8415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.663361][ T8415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.681308][ T8415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.705383][ T25] audit: type=1804 audit(1852735104.958:78): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1733697293/syzkaller.9XXCsf/82/file0" dev="sda1" ino=1943 res=1 errno=0 [ 281.861411][ T8564] loop1: detected capacity change from 0 to 64 [ 281.875925][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.916335][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.924149][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.956627][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.991269][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.034101][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.699808][ T8591] loop4: detected capacity change from 0 to 256 [ 282.800577][ T8569] chnl_net:caif_netlink_parms(): no params data found [ 282.856345][ T3797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.923446][ T8597] xt_connbytes: Forcing CT accounting to be enabled [ 282.959277][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 282.980797][ T8601] loop4: detected capacity change from 0 to 512 [ 283.070792][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.087358][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.106496][ T8569] device bridge_slave_0 entered promiscuous mode [ 283.114535][ T8601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.125717][ T8601] ext4 filesystem being mounted at /root/syzkaller-testdir2778617229/syzkaller.Uc9ho2/4/bus supports timestamps until 2038 (0x7fffffff) [ 283.238275][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.262548][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.292862][ T8569] device bridge_slave_1 entered promiscuous mode [ 283.771390][ T8569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.169902][ T3797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.198336][ T8569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.267523][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.283785][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.293123][ T8581] device bridge_slave_0 entered promiscuous mode [ 284.301638][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.308807][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.319667][ T8581] device bridge_slave_1 entered promiscuous mode [ 284.331930][ T3797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.401955][ T8569] team0: Port device team_slave_0 added [ 284.409151][ T6026] Bluetooth: hci0: command 0x0409 tx timeout [ 284.437147][ T3797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.475203][ T8569] team0: Port device team_slave_1 added [ 284.499844][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.544849][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.563187][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.570919][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.606822][ T8569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.660425][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.667654][ T4350] Bluetooth: hci4: command 0x0409 tx timeout [ 284.674078][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.678532][ T7488] EXT4-fs error: 7 callbacks suppressed [ 284.678543][ T7488] EXT4-fs error (device loop3): ext4_lookup:1852: inode #19: comm syz-executor.3: 'bus' linked to parent dir [ 284.700724][ T8569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.715638][ T7488] EXT4-fs error (device loop3): ext4_lookup:1852: inode #19: comm syz-executor.3: 'bus' linked to parent dir [ 284.749218][ T3797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.772733][ T8581] team0: Port device team_slave_0 added [ 284.809373][ T8581] team0: Port device team_slave_1 added [ 284.839134][ T8569] device hsr_slave_0 entered promiscuous mode [ 284.846267][ T8569] device hsr_slave_1 entered promiscuous mode [ 284.852768][ T8569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.861146][ T8569] Cannot create hsr debugfs directory [ 284.881729][ T3797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.894031][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.905480][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.932452][ T8581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.960090][ T3797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.972062][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.979435][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.005527][ T8581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.061475][ T3797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.078390][ T8581] device hsr_slave_0 entered promiscuous mode [ 285.094194][ T8581] device hsr_slave_1 entered promiscuous mode [ 285.100857][ T8581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.109233][ T8581] Cannot create hsr debugfs directory [ 285.308012][ T8619] loop4: detected capacity change from 0 to 2048 [ 285.423266][ T8619] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.455117][ T8619] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 285.473488][ T8619] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 285.490739][ T8619] EXT4-fs (loop4): This should not happen!! Data will be lost [ 285.490739][ T8619] [ 285.503182][ T8619] EXT4-fs (loop4): Total free blocks count 0 [ 285.509522][ T8619] EXT4-fs (loop4): Free/Dirty block details [ 285.515848][ T8619] EXT4-fs (loop4): free_blocks=66060288 [ 285.522014][ T8619] EXT4-fs (loop4): dirty_blocks=16 [ 285.527380][ T8619] EXT4-fs (loop4): Block reservation details [ 285.533726][ T8619] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 285.745109][ T8620] chnl_net:caif_netlink_parms(): no params data found [ 285.879126][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.911866][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.926437][ T8620] device bridge_slave_0 entered promiscuous mode [ 285.940272][ T8642] loop4: detected capacity change from 0 to 512 [ 285.951482][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.959023][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.967000][ T8620] device bridge_slave_1 entered promiscuous mode [ 286.000136][ T8620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.012487][ T8620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.045658][ T8620] team0: Port device team_slave_0 added [ 286.068423][ T8620] team0: Port device team_slave_1 added [ 286.085287][ T8642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.097705][ T8642] ext4 filesystem being mounted at /root/syzkaller-testdir2778617229/syzkaller.Uc9ho2/12/bus supports timestamps until 2038 (0x7fffffff) [ 286.146535][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.232652][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.284302][ T8620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.303664][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.310689][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.339795][ T8620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.008010][ T4129] Bluetooth: hci0: command 0x041b tx timeout [ 287.017329][ T3960] Bluetooth: hci4: command 0x041b tx timeout [ 287.094482][ T8620] device hsr_slave_0 entered promiscuous mode [ 287.124167][ T8620] device hsr_slave_1 entered promiscuous mode [ 287.141684][ T8620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.159566][ T8620] Cannot create hsr debugfs directory [ 287.333458][ T8662] loop4: detected capacity change from 0 to 2048 [ 287.425910][ T8662] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.456664][ T8662] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 287.488414][ T8662] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 287.512130][ T8662] EXT4-fs (loop4): This should not happen!! Data will be lost [ 287.512130][ T8662] [ 287.543244][ T8657] loop1: detected capacity change from 0 to 40427 [ 287.549901][ T8662] EXT4-fs (loop4): Total free blocks count 0 [ 287.556059][ T8662] EXT4-fs (loop4): Free/Dirty block details [ 287.562046][ T8662] EXT4-fs (loop4): free_blocks=66060288 [ 287.567595][ T8662] EXT4-fs (loop4): dirty_blocks=16 [ 287.573107][ T8662] EXT4-fs (loop4): Block reservation details [ 287.579722][ T8662] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 287.582530][ T3857] Bluetooth: hci3: command 0x0409 tx timeout [ 287.601532][ T8657] F2FS-fs (loop1): invalid crc value [ 287.634579][ T8657] F2FS-fs (loop1): Found nat_bits in checkpoint [ 287.675539][ T8620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.709159][ T8569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 287.718628][ T8569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 287.728861][ T8657] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 287.751460][ T8569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.903967][ T8620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.946266][ T8569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 287.947103][ T8674] loop4: detected capacity change from 0 to 1024 [ 288.593205][ T8674] [ 288.595555][ T8674] ====================================================== [ 288.602561][ T8674] WARNING: possible circular locking dependency detected [ 288.609566][ T8674] 5.15.160-syzkaller #0 Not tainted [ 288.614750][ T8674] ------------------------------------------------------ [ 288.621751][ T8674] syz-executor.4/8674 is trying to acquire lock: [ 288.628062][ T8674] ffff88801a90e648 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x37f/0x14e0 [ 288.638937][ T8674] [ 288.638937][ T8674] but task is already holding lock: [ 288.646274][ T8674] ffff88801fdc20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 288.655722][ T8674] [ 288.655722][ T8674] which lock already depends on the new lock. [ 288.655722][ T8674] [ 288.666095][ T8674] [ 288.666095][ T8674] the existing dependency chain (in reverse order) is: [ 288.675080][ T8674] [ 288.675080][ T8674] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 288.682778][ T8674] lock_acquire+0x1db/0x4f0 [ 288.687777][ T8674] __mutex_lock_common+0x1da/0x25a0 [ 288.693471][ T8674] mutex_lock_nested+0x17/0x20 [ 288.698730][ T8674] hfsplus_file_truncate+0x864/0xb80 [ 288.704507][ T8674] hfsplus_delete_inode+0x170/0x220 [ 288.710201][ T8674] hfsplus_unlink+0x6d8/0x7f0 [ 288.715389][ T8674] vfs_unlink+0x359/0x5f0 [ 288.720219][ T8674] do_unlinkat+0x4a3/0x950 [ 288.725127][ T8674] __x64_sys_unlinkat+0xca/0xf0 [ 288.730467][ T8674] do_syscall_64+0x3b/0xb0 [ 288.735380][ T8674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.741762][ T8674] [ 288.741762][ T8674] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 288.750760][ T8674] validate_chain+0x1649/0x5930 [ 288.756124][ T8674] __lock_acquire+0x1295/0x1ff0 [ 288.761465][ T8674] lock_acquire+0x1db/0x4f0 [ 288.766462][ T8674] __mutex_lock_common+0x1da/0x25a0 [ 288.772159][ T8674] mutex_lock_nested+0x17/0x20 [ 288.777441][ T8674] hfsplus_get_block+0x37f/0x14e0 [ 288.782963][ T8674] block_read_full_page+0x2f9/0xde0 [ 288.788658][ T8674] do_read_cache_page+0x752/0x1040 [ 288.794259][ T8674] __hfs_bnode_create+0x4f2/0xbb0 [ 288.799776][ T8674] hfsplus_bnode_create+0x120/0x460 [ 288.805466][ T8674] hfsplus_bmap_alloc+0x63c/0x720 [ 288.810992][ T8674] hfs_btree_inc_height+0x11a/0xdb0 [ 288.816688][ T8674] hfsplus_brec_insert+0x776/0xdd0 [ 288.822288][ T8674] hfsplus_create_cat+0x498/0x1ba0 [ 288.827914][ T8674] hfsplus_fill_super+0x13e6/0x1c90 [ 288.833609][ T8674] mount_bdev+0x2c9/0x3f0 [ 288.838431][ T8674] legacy_get_tree+0xeb/0x180 [ 288.843598][ T8674] vfs_get_tree+0x88/0x270 [ 288.848522][ T8674] do_new_mount+0x2ba/0xb40 [ 288.853517][ T8674] __se_sys_mount+0x2d5/0x3c0 [ 288.858685][ T8674] do_syscall_64+0x3b/0xb0 [ 288.863593][ T8674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.869977][ T8674] [ 288.869977][ T8674] other info that might help us debug this: [ 288.869977][ T8674] [ 288.880194][ T8674] Possible unsafe locking scenario: [ 288.880194][ T8674] [ 288.887617][ T8674] CPU0 CPU1 [ 288.892963][ T8674] ---- ---- [ 288.898299][ T8674] lock(&tree->tree_lock); [ 288.902773][ T8674] lock(&HFSPLUS_I(inode)->extents_lock); [ 288.911064][ T8674] lock(&tree->tree_lock); [ 288.918055][ T8674] lock(&HFSPLUS_I(inode)->extents_lock); [ 288.923830][ T8674] [ 288.923830][ T8674] *** DEADLOCK *** [ 288.923830][ T8674] [ 288.931945][ T8674] 3 locks held by syz-executor.4/8674: [ 288.937369][ T8674] #0: ffff88807c3540e0 (&type->s_umount_key#68/1){+.+.}-{3:3}, at: alloc_super+0x210/0x940 [ 288.947428][ T8674] #1: ffff88801d060998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90 [ 288.957396][ T8674] #2: ffff88801fdc20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 288.967279][ T8674] [ 288.967279][ T8674] stack backtrace: [ 288.973156][ T8674] CPU: 0 PID: 8674 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 288.981640][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 288.991669][ T8674] Call Trace: [ 288.994929][ T8674] [ 288.997839][ T8674] dump_stack_lvl+0x1e3/0x2d0 [ 289.002491][ T8674] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 289.008095][ T8674] ? print_circular_bug+0x12b/0x1a0 [ 289.013271][ T8674] check_noncircular+0x2f8/0x3b0 [ 289.018180][ T8674] ? add_chain_block+0x850/0x850 [ 289.023088][ T8674] ? lockdep_lock+0x11f/0x2a0 [ 289.027757][ T8674] ? __lock_acquire+0x1295/0x1ff0 [ 289.032756][ T8674] ? _find_first_zero_bit+0xcf/0xf0 [ 289.037928][ T8674] validate_chain+0x1649/0x5930 [ 289.042755][ T8674] ? reacquire_held_locks+0x660/0x660 [ 289.048107][ T8674] ? __lock_acquire+0x1ff0/0x1ff0 [ 289.053101][ T8674] ? unwind_next_frame+0x1437/0x1fa0 [ 289.058363][ T8674] ? deref_stack_reg+0xbe/0x110 [ 289.063202][ T8674] ? look_up_lock_class+0x77/0x120 [ 289.068290][ T8674] ? register_lock_class+0x100/0x9a0 [ 289.073547][ T8674] ? is_dynamic_key+0x1f0/0x1f0 [ 289.078364][ T8674] ? validate_chain+0x112/0x5930 [ 289.083282][ T8674] ? mark_lock+0x98/0x340 [ 289.087582][ T8674] __lock_acquire+0x1295/0x1ff0 [ 289.092405][ T8674] lock_acquire+0x1db/0x4f0 [ 289.096877][ T8674] ? hfsplus_get_block+0x37f/0x14e0 [ 289.102048][ T8674] ? read_lock_is_recursive+0x10/0x10 [ 289.107395][ T8674] ? __might_sleep+0xc0/0xc0 [ 289.111964][ T8674] ? mark_lock+0x98/0x340 [ 289.116276][ T8674] __mutex_lock_common+0x1da/0x25a0 [ 289.121457][ T8674] ? hfsplus_get_block+0x37f/0x14e0 [ 289.126651][ T8674] ? hfsplus_get_block+0x37f/0x14e0 [ 289.131828][ T8674] ? mutex_lock_io_nested+0x60/0x60 [ 289.137004][ T8674] ? lockdep_softirqs_off+0x420/0x420 [ 289.142352][ T8674] mutex_lock_nested+0x17/0x20 [ 289.147125][ T8674] hfsplus_get_block+0x37f/0x14e0 [ 289.152130][ T8674] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 289.157824][ T8674] ? do_raw_spin_unlock+0x137/0x8b0 [ 289.162993][ T8674] ? create_empty_buffers+0x5c0/0x6d0 [ 289.168340][ T8674] ? create_page_buffers+0x24b/0x330 [ 289.173603][ T8674] block_read_full_page+0x2f9/0xde0 [ 289.178782][ T8674] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 289.184488][ T8674] ? block_is_partially_uptodate+0x2c0/0x2c0 [ 289.190445][ T8674] ? hfsplus_writepage+0x30/0x30 [ 289.195361][ T8674] do_read_cache_page+0x752/0x1040 [ 289.196739][ T6026] Bluetooth: hci0: command 0x040f tx timeout [ 289.200450][ T8674] __hfs_bnode_create+0x4f2/0xbb0 [ 289.211403][ T8674] ? hfsplus_bnode_create+0x115/0x460 [ 289.216770][ T8674] ? hfsplus_bnode_get+0x40/0x40 [ 289.221685][ T8674] ? do_raw_spin_unlock+0x137/0x8b0 [ 289.226862][ T8674] hfsplus_bnode_create+0x120/0x460 [ 289.232073][ T8674] hfsplus_bmap_alloc+0x63c/0x720 [ 289.237072][ T8674] ? hfsplus_bmap_reserve+0x4e0/0x4e0 [ 289.242423][ T8674] hfs_btree_inc_height+0x11a/0xdb0 [ 289.247592][ T8674] ? hfsplus_brec_insert+0x72c/0xdd0 [ 289.252848][ T8674] ? hfsplus_bnode_read+0x186/0x1c0 [ 289.258020][ T8674] ? __lock_acquire+0x1ff0/0x1ff0 [ 289.263035][ T8674] ? hfsplus_brec_insert+0xdd0/0xdd0 [ 289.268295][ T8674] ? do_raw_spin_unlock+0x137/0x8b0 [ 289.273464][ T8674] ? hfsplus_bnode_put+0x1c0/0x510 [ 289.278552][ T8674] hfsplus_brec_insert+0x776/0xdd0 [ 289.282115][ T6026] Bluetooth: hci4: command 0x040f tx timeout [ 289.283642][ T8674] ? hfsplus_brec_keylen+0x310/0x310 [ 289.294845][ T8674] ? mutex_lock_nested+0x17/0x20 [ 289.299777][ T8674] hfsplus_create_cat+0x498/0x1ba0 [ 289.304869][ T8674] ? hfsplus_find_cat+0x5c0/0x5c0 [ 289.309866][ T8674] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 289.315758][ T8674] ? enqueue_timer+0x233/0x540 [ 289.320506][ T8674] ? do_raw_spin_unlock+0x137/0x8b0 [ 289.325683][ T8674] ? _raw_spin_unlock+0x24/0x40 [ 289.330524][ T8674] ? hfsplus_new_inode+0x5c9/0x740 [ 289.335617][ T8674] hfsplus_fill_super+0x13e6/0x1c90 [ 289.340817][ T8674] ? hfsplus_mount+0x40/0x40 [ 289.345390][ T8674] ? snprintf+0xd6/0x120 [ 289.349627][ T8674] ? vscnprintf+0x80/0x80 [ 289.353933][ T8674] ? set_blocksize+0x1ec/0x370 [ 289.358674][ T8674] mount_bdev+0x2c9/0x3f0 [ 289.362977][ T8674] ? hfsplus_mount+0x40/0x40 [ 289.367546][ T8674] legacy_get_tree+0xeb/0x180 [ 289.372203][ T8674] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 289.377726][ T8674] vfs_get_tree+0x88/0x270 [ 289.382120][ T8674] do_new_mount+0x2ba/0xb40 [ 289.386598][ T8674] ? do_move_mount_old+0x160/0x160 [ 289.391679][ T8674] ? user_path_at_empty+0x12b/0x180 [ 289.396851][ T8674] __se_sys_mount+0x2d5/0x3c0 [ 289.401503][ T8674] ? __x64_sys_mount+0xc0/0xc0 [ 289.406241][ T8674] ? syscall_enter_from_user_mode+0x2e/0x240 [ 289.412196][ T8674] ? lockdep_hardirqs_on+0x94/0x130 [ 289.417366][ T8674] ? __x64_sys_mount+0x1c/0xc0 [ 289.422104][ T8674] do_syscall_64+0x3b/0xb0 [ 289.426513][ T8674] ? clear_bhb_loop+0x15/0x70 [ 289.431163][ T8674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.437031][ T8674] RIP: 0033:0x7efe3d1cb5aa [ 289.441425][ T8674] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 289.461003][ T8674] RSP: 002b:00007efe3bd42ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 289.469394][ T8674] RAX: ffffffffffffffda RBX: 00007efe3bd42f80 RCX: 00007efe3d1cb5aa [ 289.477344][ T8674] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 00007efe3bd42f40 [ 289.485295][ T8674] RBP: 0000000020000000 R08: 00007efe3bd42f80 R09: 0000000000000000 2028/09/16 16:38:32 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 289.493280][ T8674] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200001c0 [ 289.501225][ T8674] R13: 00007efe3bd42f40 R14: 000000000000069b R15: 0000000020001940 [ 289.509176][ T8674] [ 289.542235][ T7543] attempt to access beyond end of device [ 289.542235][ T7543] loop1: rw=2049, want=45104, limit=40427 [ 289.543648][ T8620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.641812][ T8620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0