last executing test programs: 1m30.763178706s ago: executing program 2 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m17.479543669s ago: executing program 2 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m3.712281081s ago: executing program 2 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 40.954043496s ago: executing program 2 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 23.253487736s ago: executing program 2 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.756251047s ago: executing program 0 (id=632): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000005c0)}, 0x20) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "cad69b", 0x0, "a0c246"}}}}}}, 0x0) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024", @ANYRES16=r2], 0x0) 5.277740163s ago: executing program 2 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.432610802s ago: executing program 4 (id=642): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000005c0)=""/243, 0xf3}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000fc0)=""/207, 0xcf}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000002340)=""/14, 0xe}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000003c0)=""/53, 0x35}], 0xa}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_bt_hci(r6, 0x400448c8, &(0x7f0000000000)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000840000000000000080f8"], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r8, @ANYBLOB="00ff0000000000201800348014003500"], 0x38}}, 0x0) 4.267513002s ago: executing program 1 (id=643): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 3.717705744s ago: executing program 0 (id=644): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 3.706155744s ago: executing program 1 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08200640ffffff0008000340000000084c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002"], 0xe0}}, 0x0) 3.477280597s ago: executing program 4 (id=647): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0x12, &(0x7f0000001b00)={@dev, @link_local, @val={@void}}, 0x0) 3.42648224s ago: executing program 1 (id=649): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x3}, 0x20) openat$cgroup_ro(r0, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) 3.331373326s ago: executing program 1 (id=650): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x40002}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc1, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x14f) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) 3.25813557s ago: executing program 4 (id=651): socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[], 0x4, 0x2ae, &(0x7f0000000580)="$eJzs3c9qE10Yx/HfmUz7TvqWOv0jgghCbcGVtHUjbhTp1r0rUZsIpaGCVlBX1bV4Ae69BS/ClXgDdeXKCygIjpwzM8kknckkaZNp9PuBNtPkPOc8p3PSOU+gjAD8s+5tH326+cN+GammmqTbkicpkHxJF3UpeLl/sHvQajb6dVRzETbExA/usdvOfjMv1Ma5COuuFNqffM2fzQzRTxBF0feqk0Dl3Ls/hyf9l7w73evBxDMbj8OqE6iYOdaxXmmh6jwAANVKrv9ecp2fT/bvnietJ5f9v+r6f1x1AhUzal//felIkbHn94J7qVPvuRLO7v28tErs6WZtboCxZhWvrK4NpimrKl0uXv3pbqt5Y+dZq+Hpne4kMs1WtCqpES/dVDbbtye7Xs2pTU+q5fU2nP/dHGbsHLba+c92NVnOixt9xHLmi/lqHppQH9Vo7//8yNjT5FILe85UnP9GcY9ulmHcquAsLbpBLicjJEpmGeRXJEpX1GLnQwNlMijO00Ut9UTFs9ssiVrOjdoqiVrpjeqs5uLIcTMfzAOzqp/6rO3M/t+zv+11DfLOtG1cy2Rl9J2P71qGkn5HMR1eyW3pnWJSGNZ7PdEtLbx4/WbvcavVjIx0aA+ep88YGe11PTPEwdWRooY+8EfP8Pwf+BrbEOkiOCczncRBXdI5SGOkg3p6ukob2/35wD3P9O2wuj9NmJzOSR804v54E8Kk2X2Xieu/TL2y4Uok+y3ss0+PyjrP9LhZUBssuX7miiu4jKDdbWEFl1tzdY/oaq5r16W18hFToctT9bIJTwmzrW96xOf/AAAAAAAAAAAAAAAAAAAA02YS/8NQ9RwBAAAAAAAAAAAAAAAAAAAAAJh2v5KbspzV/X+D097/V5n7//pFg80ON0kAuf4EAAD//1OPfwA=") 3.137276557s ago: executing program 1 (id=652): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "6652f890"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x49, 0x45, 0xa2, 0x0, 0xbf8, 0x1009, 0x7225, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfe, 0x83, 0xab}}]}}]}}, 0x0) ioctl$HIDIOCGRDESC(r1, 0x541b, 0x0) 2.801204967s ago: executing program 4 (id=653): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x9de, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000040)="bb53a945842851722bb479853e60", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x4c, 0x12040, 0x0) 2.795827277s ago: executing program 0 (id=654): r0 = inotify_init1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x80000000) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.689117773s ago: executing program 0 (id=656): r0 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioprio_set$pid(0x1, r0, 0x0) 2.675080594s ago: executing program 4 (id=657): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) setxattr(0x0, &(0x7f00000004c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r5, 0x4b4a, 0xc800000000000000) 2.536861732s ago: executing program 0 (id=658): unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x4090) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x84, 0x2, {{0x0, 0x4995}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_REORDER={0xc}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE64={0xc, 0x8, 0xb161d8a589a0bb2a}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x5, 0x7f}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x4531, 0x0, 0x0, 0x7ff, 0x4}}]}}}]}, 0xb4}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x20000000, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0xf3406}], 0x1}}], 0xc, 0x206b99) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) 1.72304314s ago: executing program 4 (id=661): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/warn_count', 0x0, 0x0) lseek(r0, 0x100000000000000, 0x1) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='vcan0\x00') io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x2e, 0xb5, 0xbd, 0x40, 0xc45, 0x6025, 0x4112, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9, 0xd7, 0x40}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200000001000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80) 1.70908153s ago: executing program 0 (id=662): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x9, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400000036000b63d25a80648c0100000124", 0x12}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x70}}, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x40000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) sendfile(r7, r2, 0x0, 0x10000a007) 1.473053854s ago: executing program 3 (id=663): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d3078303030303030303030303001003066581c000000000000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbdb8475f9b71f1eafd72d05729520434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b407eaa2083113d1bab6700000000000000", @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x0, 0x63b, &(0x7f0000000c80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) unshare(0x60600) execveat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0xe, 0xefb3fef2f5888af0}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) sched_getparam(0x0, &(0x7f0000000040)) 342.34855ms ago: executing program 3 (id=664): syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = memfd_create(&(0x7f0000000300)='systam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\xbf\xeahq\xa0\x12\xedb\xb3\xbf\t`\v\xc0\xc9\x0e<\xe0\xe1\xc8!\x99Bv\x82\xf4\x06s\xfe\xa9\xbccw\xc7d1\x05\x7f\x1a\x87\xd3\x16\xce\xcb?\xc3\xf4\xc4\xda4\xd1\xf5\xf9\xe6\xa5\x90\xd2\f\x9f \xd4\xdeA\xbc= iZ\x92\xf5x\x16G]\x03%^b\xeb\xd3)\xba\xe3\xcf\xbf\x91\xbc\xee\xb5\x9b8\xc8po\x91Y\x1a\xaab\xf1\xc8', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="dc7afea08184c44b0a03a9e45afc36f1be01fa8dff6aa640797ea9ed66a4f8fdeaef2cd9dfbe93fc6bccc58a459830a1e94740e06d94342c64dd8165ebeae33051412a1aae8379b8f323579e45043e38500534fbe2115a10be9bb677112f71b8d699532c1808b75fd0a493bc4c99b38432d290a1dc7d206c05f442ec8ab47125"], 0x100) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000004040)=""/4092, 0xffc) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000006c0)=""/240, 0xf0) 248.971335ms ago: executing program 3 (id=665): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0xf4240, r0, &(0x7f00000021c0)={0x30000019}) 217.558517ms ago: executing program 3 (id=666): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000380)={0x7, @output}) 168.8276ms ago: executing program 3 (id=667): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0xfc3, &(0x7f00000035c0)={@local, @broadcast, @val, {@mpls_mc={0x806, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfad, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "336af61288a63d95985e8178e3386e8fcde86b3a71ff8d3ac264be42c6c4668111784abf5fc914938a"}}}}}}}, 0x0) 109.956964ms ago: executing program 3 (id=668): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r2, 0x400455c8, 0x0) ioctl$KDSIGACCEPT(r0, 0x400455c8, 0x0) 0s ago: executing program 1 (id=669): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f00000011c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES16], 0x2, 0x639, &(0x7f0000001300)="$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") creat(&(0x7f0000000300)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): ETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.873234][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.903114][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.910241][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.997899][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.018953][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.070637][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.111756][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.119021][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.150637][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.213727][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.225407][ T3846] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found [ 88.231961][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.246079][ T3846] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found [ 88.313705][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.338541][ T3846] usb 5-1: USB disconnect, device number 4 [ 88.360258][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.361851][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.387930][ T4491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.387955][ T4491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.397271][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.397755][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.398037][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.398469][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.398728][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.399153][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.842140][ T4491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.009691][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.023557][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.034790][ T3846] Bluetooth: hci0: command 0x0419 tx timeout [ 89.066243][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.095534][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.144790][ T4723] loop3: detected capacity change from 0 to 512 [ 89.147435][ T4491] device veth0_vlan entered promiscuous mode [ 89.201026][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.219852][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.245155][ T4491] device veth1_vlan entered promiscuous mode [ 89.261572][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.293372][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.322638][ T4723] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,grpquota,,errors=continue. Quota mode: writeback. [ 89.342335][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.436784][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.451550][ T4723] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 89.498031][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.561223][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.580889][ T4491] device veth0_macvtap entered promiscuous mode [ 89.612409][ T4491] device veth1_macvtap entered promiscuous mode [ 90.354434][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.416574][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.465864][ T4749] loop4: detected capacity change from 0 to 64 [ 90.472192][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.511346][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.564611][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.600051][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.634682][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.653082][ T4761] usb usb8: usbfs: process 4761 (syz.1.236) did not claim interface 0 before use [ 90.685656][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.719015][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.744717][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.759046][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.795373][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.818371][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.850672][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.881485][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.911841][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.940528][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.951724][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.966702][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.981535][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.994480][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.017716][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.028876][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.044428][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.074914][ T4491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.083636][ T4491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.114821][ T4370] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.136314][ T4491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.171227][ T4491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.200846][ T4784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.242'. [ 91.234750][ T4781] loop4: detected capacity change from 0 to 4096 [ 91.886010][ T4370] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 91.969443][ T4370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.135137][ T4370] usb 2-1: Product: syz [ 92.139920][ T4370] usb 2-1: Manufacturer: syz [ 92.145094][ T4370] usb 2-1: SerialNumber: syz [ 92.152085][ T4370] usb 2-1: config 0 descriptor?? [ 92.198693][ T4370] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 003 [ 92.255845][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.344336][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.365167][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.373414][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.414265][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.452676][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.634821][ T4370] (null): failure reading functionality [ 92.694172][ T4370] i2c i2c-1: connected i2c-tiny-usb device [ 92.934402][ T3841] usb 2-1: USB disconnect, device number 3 [ 93.647553][ T4847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.734391][ T4781] ntfs3: loop4: ino=22, "bus" fallocate(0x20) is not supported [ 94.201043][ T4851] chnl_net:caif_netlink_parms(): no params data found [ 94.400713][ T4869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.255'. [ 94.437724][ T4871] loop1: detected capacity change from 0 to 64 [ 94.569845][ T4879] loop3: detected capacity change from 0 to 256 [ 95.071227][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.138800][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.189562][ T4851] device bridge_slave_0 entered promiscuous mode [ 95.194481][ T4889] loop1: detected capacity change from 0 to 512 [ 95.233199][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.261002][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.271794][ T4889] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.300353][ T4851] device bridge_slave_1 entered promiscuous mode [ 95.327299][ T4889] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 95.370252][ T4851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.382043][ T4851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.434827][ T4889] EXT4-fs (loop1): Remounting filesystem read-only [ 95.492344][ T4851] team0: Port device team_slave_0 added [ 95.505522][ T4889] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.264: invalid indirect mapped block 1 (level 1) [ 95.526829][ T4851] team0: Port device team_slave_1 added [ 95.548496][ T4889] EXT4-fs (loop1): 1 truncate cleaned up [ 95.554171][ T4889] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 95.734146][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.750970][ T4889] kvm: pic: non byte write [ 95.766585][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.804139][ T4889] kvm: pic: non byte read [ 95.814049][ T4889] kvm: pic: non byte write [ 95.823682][ T4908] loop3: detected capacity change from 0 to 2048 [ 95.830508][ T4889] kvm: pic: non byte write [ 95.844834][ T4889] kvm: pic: non byte write [ 95.849644][ T4889] kvm: pic: non byte write [ 95.854117][ T4889] kvm: pic: non byte write [ 95.864668][ T4851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.885854][ T4889] kvm: pic: non byte write [ 95.897298][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.904802][ T4370] Bluetooth: hci0: command 0x0409 tx timeout [ 95.957231][ T4889] kvm: pic: non byte write [ 95.961802][ T4889] kvm: pic: non byte write [ 95.983667][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.029870][ T4908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.112606][ T4851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.257725][ T4851] device hsr_slave_0 entered promiscuous mode [ 96.271189][ T4851] device hsr_slave_1 entered promiscuous mode [ 96.288902][ T4910] loop1: detected capacity change from 0 to 1024 [ 96.449424][ T26] audit: type=1804 audit(1723615855.913:15): pid=4910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.274" name="/newroot/60/file0/bus" dev="loop1" ino=26 res=1 errno=0 [ 96.515645][ T26] audit: type=1804 audit(1723615855.943:16): pid=4910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.274" name="/newroot/60/file0/bus" dev="loop1" ino=26 res=1 errno=0 [ 97.837437][ T4924] loop4: detected capacity change from 0 to 262144 [ 97.898207][ T4851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.988846][ T1075] Bluetooth: hci0: command 0x041b tx timeout [ 97.997718][ T4924] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.278 (4924) [ 98.019025][ T4924] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 98.028405][ T4924] BTRFS info (device loop4): enabling ssd optimizations [ 98.035480][ T4924] BTRFS info (device loop4): using spread ssd allocation scheme [ 98.043124][ T4924] BTRFS info (device loop4): using free space tree [ 98.050636][ T4924] BTRFS info (device loop4): has skinny extents [ 98.057297][ T4924] BTRFS info (device loop4): flagging fs with big metadata feature [ 98.145914][ T4279] hfsplus: b-tree write err: -5, ino 4 [ 98.161586][ T4851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.259373][ T4851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.369370][ T144] BTRFS warning (device loop4): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 98.414690][ T4947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.280'. [ 98.427424][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 22036480 (dev /dev/loop4 sector 43040) [ 98.438962][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 22040576 (dev /dev/loop4 sector 43048) [ 98.450371][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 22044672 (dev /dev/loop4 sector 43056) [ 98.461666][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 22048768 (dev /dev/loop4 sector 43064) [ 98.479052][ T3632] BTRFS warning (device loop4): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 98.531347][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 30670848 (dev /dev/loop4 sector 76288) [ 98.543086][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 30674944 (dev /dev/loop4 sector 76296) [ 98.550154][ T4851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.572261][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 30679040 (dev /dev/loop4 sector 76304) [ 98.594767][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 30683136 (dev /dev/loop4 sector 76312) [ 98.625247][ T153] BTRFS warning (device loop4): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 98.679932][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 30457856 (dev /dev/loop4 sector 75872) [ 98.691489][ T4924] BTRFS info (device loop4): read error corrected: ino 0 off 30461952 (dev /dev/loop4 sector 75880) [ 99.209546][ T4964] loop3: detected capacity change from 0 to 4096 [ 99.236540][ T4851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.260892][ T4851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.293164][ T4851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.313811][ T4964] EXT4-fs (loop3): Test dummy encryption mode enabled [ 99.403390][ T4978] fuse: Unknown parameter 'Ây01777777777777777777777' [ 99.956473][ T4964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.983029][ T4851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.049927][ T4964] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 100.064702][ T1075] Bluetooth: hci0: command 0x040f tx timeout [ 100.407868][ T4851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.442113][ T4964] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 100.522830][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.545789][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.594141][ T4851] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.675466][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.681201][ T4988] loop4: detected capacity change from 0 to 1024 [ 100.689224][ T4973] loop1: detected capacity change from 0 to 32768 [ 100.697273][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.716106][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.723237][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.734231][ T4973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.287 (4973) [ 100.802453][ T26] audit: type=1804 audit(1723615860.263:17): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.292" name="/newroot/61/file0/bus" dev="loop4" ino=26 res=1 errno=0 [ 100.835396][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.844975][ T4973] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 100.853643][ T4973] BTRFS info (device loop1): using free space tree [ 100.875616][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.905577][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.914305][ T4973] BTRFS info (device loop1): has skinny extents [ 100.924481][ T26] audit: type=1804 audit(1723615860.293:18): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.292" name="/newroot/61/file0/bus" dev="loop4" ino=26 res=1 errno=0 [ 100.958554][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.965671][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.985045][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.018587][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.028157][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.040176][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.049784][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.062131][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.186044][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.214227][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.256046][ T4973] BTRFS info (device loop1): enabling ssd optimizations [ 101.319392][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.328497][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.351512][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.368875][ T5005] loop3: detected capacity change from 0 to 4096 [ 101.399750][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.479021][ T5016] fuse: Bad value for 'fd' [ 101.570883][ T5005] ntfs: volume version 3.1. [ 101.637297][ T5005] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 101.675045][ T5005] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 101.774826][ T5005] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to map page. [ 101.791777][ T5005] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 101.932702][ T5005] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 101.980694][ T5005] ntfs: (device loop3): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 102.039513][ T3632] hfsplus: b-tree write err: -5, ino 4 [ 102.040806][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.053037][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.144664][ T5022] Bluetooth: hci0: command 0x0419 tx timeout [ 102.214890][ T5030] loop1: detected capacity change from 0 to 256 [ 102.234080][ T4851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.285611][ T5032] capability: warning: `syz.4.299' uses 32-bit capabilities (legacy support in use) [ 102.359218][ T5034] program syz.4.299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.544516][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.578932][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.348169][ T4851] device veth0_vlan entered promiscuous mode [ 103.385035][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.393474][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.402448][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.412797][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.646611][ T5051] loop4: detected capacity change from 0 to 256 [ 103.787129][ T4851] device veth1_vlan entered promiscuous mode [ 104.283218][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 104.291359][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.306629][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.323461][ T4851] device veth0_macvtap entered promiscuous mode [ 104.353841][ T4851] device veth1_macvtap entered promiscuous mode [ 104.372516][ T1194] device hsr_slave_0 left promiscuous mode [ 104.385348][ T1194] device hsr_slave_1 left promiscuous mode [ 104.391967][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.408816][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.423987][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.439893][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.449284][ T1194] device bridge_slave_1 left promiscuous mode [ 104.452614][ T5057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.479731][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.496109][ T1194] device bridge_slave_0 left promiscuous mode [ 104.502773][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.539796][ T1194] device veth1_macvtap left promiscuous mode [ 104.551629][ T1194] device veth0_macvtap left promiscuous mode [ 104.570011][ T1194] device veth1_vlan left promiscuous mode [ 104.576445][ T1194] device veth0_vlan left promiscuous mode [ 104.743658][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 104.760272][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 104.776159][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.789707][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.875282][ T1194] bond0 (unregistering): Released all slaves [ 104.951861][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 104.968770][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.981318][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.009295][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.019867][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.057242][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.068101][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.099844][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.171686][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.217463][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.265380][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.332726][ T4851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.355660][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.367701][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.377827][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.390728][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.400650][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.416368][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.429477][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.440097][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.455006][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.466146][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.492773][ T4851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.533773][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.567437][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.584952][ T4851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.597273][ T4851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.608356][ T4851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.624624][ T4851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.791105][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.814623][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.855564][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.966361][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.005277][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.040773][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.078003][ T5073] chnl_net:caif_netlink_parms(): no params data found [ 106.202016][ T5089] loop1: detected capacity change from 0 to 32768 [ 106.269965][ T5089] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.317 (5089) [ 106.344406][ T5089] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 106.361119][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.369596][ T5089] BTRFS info (device loop1): enabling auto defrag [ 106.374768][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.384127][ T5073] device bridge_slave_0 entered promiscuous mode [ 106.395461][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.402664][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.410991][ T5073] device bridge_slave_1 entered promiscuous mode [ 106.426304][ T5089] BTRFS info (device loop1): max_inline at 0 [ 106.432314][ T5089] BTRFS info (device loop1): enabling ssd optimizations [ 106.440270][ T5089] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 106.450403][ T5089] BTRFS info (device loop1): use lzo compression, level 0 [ 106.457612][ T5089] BTRFS info (device loop1): using free space tree [ 106.464124][ T5089] BTRFS info (device loop1): has skinny extents [ 106.507045][ T5073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.531648][ T5073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.595921][ T5073] team0: Port device team_slave_0 added [ 106.604105][ T5073] team0: Port device team_slave_1 added [ 106.647455][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.654777][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.713862][ T5073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.734411][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.775373][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.864707][ T5073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.941605][ T26] audit: type=1800 audit(1723615866.403:19): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.317" name="file0" dev="loop1" ino=258 res=0 errno=0 [ 106.996916][ T5073] device hsr_slave_0 entered promiscuous mode [ 107.015036][ T5073] device hsr_slave_1 entered promiscuous mode [ 107.032069][ T5073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.051670][ T5073] Cannot create hsr debugfs directory [ 107.237863][ T5124] loop4: detected capacity change from 0 to 1024 [ 107.346994][ T5124] hfsplus: unable to parse mount options [ 107.362015][ T3780] Bluetooth: hci3: command 0x0409 tx timeout [ 107.691086][ T5132] loop4: detected capacity change from 0 to 2048 [ 107.722610][ T5073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.771686][ T5132] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 107.810000][ T5132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.829282][ T5073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.892782][ T5138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.951297][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 108.012003][ T5073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.150255][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 108.205286][ T5073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.327682][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 108.509646][ T5159] loop4: detected capacity change from 0 to 512 [ 108.568219][ T5159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.611783][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.620126][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.653148][ T5128] device bridge_slave_0 entered promiscuous mode [ 108.665191][ T5159] EXT4-fs (loop4): 1 orphan inode deleted [ 108.679407][ T5169] usb usb8: usbfs: process 5169 (syz.1.335) did not claim interface 0 before use [ 108.701024][ T5159] EXT4-fs (loop4): 1 truncate cleaned up [ 108.707483][ T5159] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,data_err=ignore,init_itable,debug_want_extra_isize=0x0000000000000006. Quota mode: none. [ 108.741711][ T1194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.804260][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.814257][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.838861][ T5128] device bridge_slave_1 entered promiscuous mode [ 108.943193][ T1194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.973712][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.997178][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.062343][ T1194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.104091][ T5128] team0: Port device team_slave_0 added [ 109.134150][ T5128] team0: Port device team_slave_1 added [ 109.159385][ T1194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.189684][ T5189] raw_sendmsg: syz.4.345 forgot to set AF_INET. Fix it! [ 109.217057][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.234613][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.242022][ T5185] loop1: detected capacity change from 0 to 8192 [ 109.262811][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.269550][ T5190] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 109.287067][ T5190] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.345'. [ 109.307284][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.314243][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.343767][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.367597][ T5185] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 109.399258][ T5185] REISERFS (device loop1): using journaled data mode [ 109.434838][ T3841] Bluetooth: hci3: command 0x041b tx timeout [ 109.441068][ T5185] reiserfs: using flush barriers [ 109.459510][ T5185] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.479495][ T5185] REISERFS (device loop1): checking transaction log (loop1) [ 109.484133][ T5128] device hsr_slave_0 entered promiscuous mode [ 109.503162][ T5128] device hsr_slave_1 entered promiscuous mode [ 109.510104][ T5185] REISERFS (device loop1): Using r5 hash to sort names [ 109.519778][ T5185] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 109.522643][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.537502][ T5185] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 109.560499][ T26] audit: type=1326 audit(1723615869.023:20): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.0.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c9a64b9f9 code=0x0 [ 109.562045][ T5185] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 109.596835][ T5128] Cannot create hsr debugfs directory [ 109.604796][ T3841] Bluetooth: hci0: command 0x0409 tx timeout [ 109.627808][ T5185] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 109.645978][ T5073] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.676695][ T5185] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 109.757700][ T5073] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.799953][ T5073] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.852227][ T5073] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.287748][ T5202] can: request_module (can-proto-5) failed. [ 110.465242][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.537296][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.537849][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.579581][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.595474][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.596379][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.596741][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.596805][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.597364][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.601554][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.602087][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.602432][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.602467][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.621854][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.660176][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.746073][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.747217][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.748520][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.749167][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.749729][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.750161][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.750643][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.751140][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.752838][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.754398][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.801700][ T5128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.832994][ T5128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.850528][ T5128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.853304][ T5128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.163549][ T5255] loop4: detected capacity change from 0 to 8192 [ 111.340655][ T5255] loop4: p3 < > p4 [ 111.366041][ T5255] loop4: p4 size 50331776 extends beyond EOD, truncated [ 111.395432][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.408074][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.408288][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.464985][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.465245][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.465831][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.483850][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.515381][ T1078] Bluetooth: hci3: command 0x040f tx timeout [ 111.547178][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.547720][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.548062][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.548099][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.548558][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.567459][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.567994][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.568386][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.568419][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.573296][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.573845][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.652600][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.653503][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.675872][ T3841] Bluetooth: hci0: command 0x041b tx timeout [ 111.684790][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.687008][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.687174][ T5265] [U] VÔ3¸ÂFÙ¾"WÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 111.687863][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.689230][ T5265] [U] J"—E:ÀÆ" [ 111.746165][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.799199][ T3824] udevd[3824]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 111.809925][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.813944][ T5209] udevd[5209]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 111.819825][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.107776][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.162741][ T5073] device veth0_vlan entered promiscuous mode [ 112.185277][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.193167][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.224085][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.241202][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.250528][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.266553][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.277565][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.384510][ T5073] device veth1_vlan entered promiscuous mode [ 112.412105][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.441265][ T3841] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.501855][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.511330][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.540305][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.568093][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.577702][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.589965][ T5073] device veth0_macvtap entered promiscuous mode [ 112.618515][ T5073] device veth1_macvtap entered promiscuous mode [ 112.649943][ T5309] loop4: detected capacity change from 0 to 16 [ 112.659740][ T1194] device hsr_slave_0 left promiscuous mode [ 112.686830][ T1194] device hsr_slave_1 left promiscuous mode [ 112.693953][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.715591][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.724685][ T3841] usb 2-1: Using ep0 maxpacket: 32 [ 112.725235][ T5309] erofs: (device loop4): mounted with root inode @ nid 36. [ 112.738813][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.746372][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.764031][ T1194] device bridge_slave_1 left promiscuous mode [ 112.779091][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.864275][ T3841] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 112.951538][ T1194] device bridge_slave_0 left promiscuous mode [ 112.958531][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.980607][ T1194] device hsr_slave_0 left promiscuous mode [ 112.992449][ T1194] device hsr_slave_1 left promiscuous mode [ 113.587168][ T3645] Bluetooth: hci3: command 0x0419 tx timeout [ 113.604975][ T3841] usb 2-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice=81.10 [ 113.624372][ T3841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.635564][ T3841] usb 2-1: Product: syz [ 113.639745][ T3841] usb 2-1: Manufacturer: syz [ 113.644334][ T3841] usb 2-1: SerialNumber: syz [ 113.658527][ T3841] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 113.705896][ T3841] usb-storage 2-1:0.0: USB Mass Storage device detected [ 113.723347][ T3841] usb-storage 2-1:0.0: Quirks match for vid 05ac pid 1204: 90 [ 113.751630][ T1078] Bluetooth: hci0: command 0x040f tx timeout [ 113.804742][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.813062][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.845707][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.859416][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.883400][ T1194] device bridge_slave_1 left promiscuous mode [ 113.890025][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.899335][ T1194] device bridge_slave_0 left promiscuous mode [ 113.907955][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.948895][ T5326] fuse: Bad value for 'fd' [ 113.967348][ T1078] apple-mfi-fastcharge 2-1: USB disconnect, device number 4 [ 114.005713][ T1194] device veth1_macvtap left promiscuous mode [ 114.013041][ T1194] device veth0_macvtap left promiscuous mode [ 114.033169][ T1194] device veth1_vlan left promiscuous mode [ 114.045165][ T1194] device veth0_vlan left promiscuous mode [ 114.061172][ T1194] device veth1_macvtap left promiscuous mode [ 114.068911][ T1194] device veth0_macvtap left promiscuous mode [ 114.079615][ T1194] device veth1_vlan left promiscuous mode [ 114.085787][ T1194] device veth0_vlan left promiscuous mode [ 114.353886][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 114.370247][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 114.384375][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.401239][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.529657][ T1194] bond0 (unregistering): Released all slaves [ 114.537842][ T5336] loop1: detected capacity change from 0 to 2048 [ 114.830577][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 114.847869][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 114.862014][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.027613][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.222348][ T1194] bond0 (unregistering): Released all slaves [ 115.358835][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.370314][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.382833][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.392601][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.425770][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.461664][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.514622][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.534624][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.561484][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.572328][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.594144][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.617574][ T5344] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.384'. [ 115.675683][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.694027][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.715346][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.726122][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.738374][ T5128] device veth0_vlan entered promiscuous mode [ 115.752486][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.771668][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.793021][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.816255][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.834271][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.835198][ T3780] Bluetooth: hci0: command 0x0419 tx timeout [ 115.858136][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.859624][ T5352] loop1: detected capacity change from 0 to 8192 [ 115.883758][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.901402][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.922054][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.931038][ T5354] loop4: detected capacity change from 0 to 128 [ 115.942996][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.961802][ T5352] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 115.971850][ T5352] REISERFS (device loop1): using ordered data mode [ 115.984275][ T5352] reiserfs: using flush barriers [ 116.000352][ T5352] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.018413][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.025032][ T5352] REISERFS (device loop1): checking transaction log (loop1) [ 116.035944][ T5352] REISERFS (device loop1): Using r5 hash to sort names [ 116.047219][ T5073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.056128][ T5352] REISERFS (device loop1): using 3.5.x disk format [ 116.063082][ T5352] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 116.078151][ T5073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.086942][ T5073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.096931][ T5073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.236505][ T5128] device veth1_vlan entered promiscuous mode [ 116.400832][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.469356][ T5354] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.514874][ T5354] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 116.879548][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.895769][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.925770][ T5128] device veth0_macvtap entered promiscuous mode [ 116.982380][ T5128] device veth1_macvtap entered promiscuous mode [ 117.010333][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.041864][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.081659][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.127538][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.156835][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.174854][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.192185][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.293685][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.313570][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.324203][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.343123][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.369104][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.381668][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.401991][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.434677][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.935219][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.039747][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.059975][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.101113][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.154642][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.305031][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.322524][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.339918][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.357036][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.872874][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.883150][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.892180][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.901115][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.913299][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.922116][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.936763][ T5128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.955065][ T5128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.963792][ T5128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.972574][ T5128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.993177][ T5378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.392'. [ 119.138406][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.157230][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.233527][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.293359][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.331469][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.370444][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.679607][ T3575] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 119.756585][ T5386] loop1: detected capacity change from 0 to 32768 [ 119.878676][ T5386] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.395 (5386) [ 120.295741][ T5386] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 120.334745][ T5386] BTRFS info (device loop1): using free space tree [ 120.339748][ T5408] loop4: detected capacity change from 0 to 256 [ 120.364708][ T5386] BTRFS info (device loop1): has skinny extents [ 120.402497][ T5410] loop3: detected capacity change from 0 to 512 [ 120.670656][ T5410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.073060][ T5410] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.111365][ T5386] BTRFS info (device loop1): enabling ssd optimizations [ 121.205031][ T5410] EXT4-fs (loop3): 1 truncate cleaned up [ 121.253460][ T5410] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 121.657920][ T263] block nbd0: Attempted send on invalid socket [ 121.699618][ T263] blk_update_request: I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.719349][ T5445] VFS: could not find a valid V7 on nbd0. [ 122.898492][ T5463] loop1: detected capacity change from 0 to 64 [ 124.297470][ T5472] loop1: detected capacity change from 0 to 8 [ 124.815487][ T3780] Bluetooth: hci0: command 0x0409 tx timeout [ 124.845247][ T5472] SQUASHFS error: lzo decompression failed, data probably corrupt [ 124.891274][ T5472] SQUASHFS error: Failed to read block 0x91: -5 [ 124.921249][ T5447] chnl_net:caif_netlink_parms(): no params data found [ 124.933312][ T5472] SQUASHFS error: Unable to read metadata cache entry [8f] [ 124.968272][ T5472] SQUASHFS error: Unable to read inode 0x11f [ 125.927507][ T5478] sched: RT throttling activated [ 126.229561][ T5487] ALSA: seq fatal error: cannot create timer (-22) [ 126.374021][ T5493] loop3: detected capacity change from 0 to 1024 [ 126.418453][ T5495] netlink: 812 bytes leftover after parsing attributes in process `syz.0.422'. [ 126.433490][ T5497] loop1: detected capacity change from 0 to 512 [ 126.501327][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.531189][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.549990][ T5497] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.567038][ T5447] device bridge_slave_0 entered promiscuous mode [ 126.591171][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.653815][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.662241][ T5497] EXT4-fs (loop1): 1 truncate cleaned up [ 126.668835][ T5497] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 126.690510][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.699887][ T5447] device bridge_slave_1 entered promiscuous mode [ 126.757026][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.843207][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.880438][ T3841] Bluetooth: hci0: command 0x041b tx timeout [ 126.927589][ T5510] loop3: detected capacity change from 0 to 1024 [ 127.053931][ T5506] device syzkaller1 entered promiscuous mode [ 127.481701][ T5447] team0: Port device team_slave_0 added [ 127.559017][ T5518] loop4: detected capacity change from 0 to 8 [ 127.598222][ T9] hfsplus: b-tree write err: -5, ino 4 [ 127.662925][ T5447] team0: Port device team_slave_1 added [ 127.736249][ T5520] loop3: detected capacity change from 0 to 2048 [ 127.804213][ T5522] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.821690][ T5520] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 127.856446][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.868312][ T5520] Remounting filesystem read-only [ 127.873838][ T5520] attempt to access beyond end of device [ 127.873838][ T5520] loop3: rw=0, want=343245196361802, limit=2048 [ 127.875895][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.895676][ T5520] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 127.911550][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.936226][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.943969][ T5524] KVM: debugfs: duplicate directory 5524-11 [ 128.032354][ T5524] mkiss: ax0: crc mode is auto. [ 128.038846][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.045960][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.072479][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.171586][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.208729][ T5447] device hsr_slave_0 entered promiscuous mode [ 128.233516][ T5447] device hsr_slave_1 entered promiscuous mode [ 128.949547][ T3613] Bluetooth: hci0: command 0x040f tx timeout [ 129.343897][ T5447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.401397][ T5549] loop1: detected capacity change from 0 to 1024 [ 129.452238][ T5447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.476317][ T5531] loop4: detected capacity change from 0 to 32768 [ 129.594672][ T5531] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.432 (5531) [ 129.609283][ T5447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.634745][ T3613] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.694532][ T5531] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 129.718494][ T5531] BTRFS info (device loop4): setting nodatacow, compression disabled [ 129.768493][ T5531] BTRFS info (device loop4): enabling auto defrag [ 129.794852][ T5531] BTRFS info (device loop4): max_inline at 0 [ 129.806290][ T5447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.831383][ T5531] BTRFS info (device loop4): using free space tree [ 129.875477][ T5531] BTRFS info (device loop4): has skinny extents [ 130.193521][ T5447] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.218666][ T5447] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.288919][ T5447] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.333826][ T5447] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.369733][ T4372] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 130.437596][ T26] audit: type=1804 audit(1723615889.863:21): pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.432" name="/newroot/107/file1/bus" dev="loop4" ino=263 res=1 errno=0 [ 130.531168][ T3613] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 131.949839][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.958038][ T3613] usb 4-1: Product: syz [ 131.963977][ T3613] usb 4-1: Manufacturer: syz [ 131.969581][ T3613] usb 4-1: SerialNumber: syz [ 132.109154][ T3780] Bluetooth: hci0: command 0x0419 tx timeout [ 132.189050][ T3613] r8152-cfgselector 4-1: config 0 descriptor?? [ 133.008233][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.016982][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.984260][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.991265][ T4372] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.041000][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.064175][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.074807][ T3613] r8152-cfgselector 4-1: can't set config #0, error -71 [ 135.105900][ T3613] r8152-cfgselector 4-1: Unknown version 0x0000 [ 135.108351][ T5447] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.124700][ T4372] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 135.138310][ T4372] usb 2-1: can't read configurations, error -71 [ 135.139598][ T3613] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 135.293174][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.303064][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.319457][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.326799][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.362217][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.372219][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.382394][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.389542][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.407185][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.423398][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.483561][ T5447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.513051][ T5447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.643931][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.659991][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.691489][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.720084][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.752259][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.768847][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.782513][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.795693][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.804377][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.815227][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.845375][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.888365][ T26] audit: type=1326 audit(1723615895.353:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 135.957086][ T26] audit: type=1326 audit(1723615895.353:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 135.986749][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.993670][ T26] audit: type=1326 audit(1723615895.353:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 136.016192][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.016396][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.037065][ T26] audit: type=1326 audit(1723615895.353:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 136.053016][ T5608] loop1: detected capacity change from 0 to 64 [ 136.077848][ T26] audit: type=1326 audit(1723615895.353:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 136.079132][ T5601] mkiss: ax0: crc mode is auto. [ 136.118187][ T26] audit: type=1326 audit(1723615895.353:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 136.145553][ T5608] hfs: invalid gid -1 [ 136.150101][ T5608] hfs: unable to parse mount options [ 136.170554][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.179783][ T26] audit: type=1326 audit(1723615895.353:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 136.203189][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.221492][ T26] audit: type=1326 audit(1723615895.353:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 136.292866][ T26] audit: type=1326 audit(1723615895.353:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 136.361796][ T26] audit: type=1326 audit(1723615895.353:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7fc00000 [ 136.453799][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.476819][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.168388][ T5622] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 137.284063][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.330585][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.520258][ T5447] device veth0_vlan entered promiscuous mode [ 137.718292][ T5447] device veth1_vlan entered promiscuous mode [ 137.911023][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.945928][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.844050][ T5447] device veth0_macvtap entered promiscuous mode [ 139.084148][ T1194] device hsr_slave_0 left promiscuous mode [ 140.199884][ T1194] device hsr_slave_1 left promiscuous mode [ 140.380526][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.488976][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.517887][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.537508][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.575458][ T1194] device bridge_slave_1 left promiscuous mode [ 140.584852][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.610219][ T1194] device bridge_slave_0 left promiscuous mode [ 140.637071][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.677172][ T1194] device veth1_macvtap left promiscuous mode [ 140.694463][ T1194] device veth0_macvtap left promiscuous mode [ 140.717201][ T1194] device veth1_vlan left promiscuous mode [ 140.731563][ T1194] device veth0_vlan left promiscuous mode [ 140.770771][ T4367] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.035097][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 141.053528][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 141.066469][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.082683][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.144696][ T4367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 141.157994][ T1194] bond0 (unregistering): Released all slaves [ 141.164626][ T4367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.180906][ T4367] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 141.190166][ T4367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.206342][ T4367] usb 2-1: config 0 descriptor?? [ 141.223863][ T5447] device veth1_macvtap entered promiscuous mode [ 141.254196][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.276527][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.301529][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.313984][ T4367] appletouch 2-1:0.0: Could not find int-in endpoint [ 141.320828][ T4367] appletouch: probe of 2-1:0.0 failed with error -5 [ 141.328163][ T4367] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 141.345157][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.355083][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.365857][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.375737][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.386182][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.397606][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.407390][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.416608][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.436521][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.463310][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.483467][ T5025] usb 2-1: USB disconnect, device number 7 [ 141.503435][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.550395][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.593291][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.631109][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.667096][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.678576][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.690464][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.922992][ T5447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.936659][ T5447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.950361][ T5447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.961482][ T5447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.128538][ T5673] loop4: detected capacity change from 0 to 4096 [ 142.181701][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.206175][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.234458][ T5673] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.239904][ T3824] udevd[3824]: incorrect nilfs2 checksum on /dev/loop4 [ 142.262604][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.295366][ T5673] NILFS (loop4): unrecognized mount option "ÿÿ0x00000000000000000x00000000000000001844674407370955161501777777777777777777777ÿÿÿÿÿÿ0x0000000000000000" [ 142.303324][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.325013][ T5677] netlink: 212 bytes leftover after parsing attributes in process `syz.3.468'. [ 142.417533][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.460499][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.503896][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.552652][ T5673] loop4: detected capacity change from 0 to 512 [ 142.568615][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.653279][ T5673] EXT4-fs (loop4): journaled quota format not specified [ 142.868721][ T5694] device team0 entered promiscuous mode [ 142.888714][ T5694] device team_slave_0 entered promiscuous mode [ 142.899005][ T5694] device team_slave_1 entered promiscuous mode [ 142.915809][ T5694] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.960123][ T5694] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 145.321099][ T1194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.405424][ T5720] loop4: detected capacity change from 0 to 2048 [ 145.445051][ T1194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.523932][ T5720] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.549972][ T1194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.689933][ T1194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.171172][ T5750] AppArmor: change_hat: Invalid input 'G' [ 146.225481][ T5735] loop1: detected capacity change from 0 to 32768 [ 146.261596][ T5726] chnl_net:caif_netlink_parms(): no params data found [ 146.350512][ T5735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.488 (5735) [ 146.473938][ T5735] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 146.743867][ T5735] BTRFS info (device loop1): using free space tree [ 146.798382][ T5735] BTRFS info (device loop1): has skinny extents [ 146.977257][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.020883][ T5775] loop4: detected capacity change from 0 to 4096 [ 147.021678][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.035855][ T5726] device bridge_slave_0 entered promiscuous mode [ 147.104093][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.152673][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.187838][ T5726] device bridge_slave_1 entered promiscuous mode [ 147.252920][ T5735] BTRFS info (device loop1): enabling ssd optimizations [ 147.320157][ T5758] loop3: detected capacity change from 0 to 32768 [ 147.429901][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.461987][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.594785][ T1078] Bluetooth: hci0: command 0x0409 tx timeout [ 147.909615][ T5726] team0: Port device team_slave_0 added [ 148.842621][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 148.842798][ T26] audit: type=1326 audit(1723615907.603:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7ffc0000 [ 149.195386][ T5726] team0: Port device team_slave_1 added [ 149.290719][ T26] audit: type=1326 audit(1723615907.603:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb9ab99f9 code=0x7ffc0000 [ 149.510424][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.531559][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.571991][ T5842] loop4: detected capacity change from 0 to 1024 [ 149.659785][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.680626][ T3841] Bluetooth: hci0: command 0x041b tx timeout [ 149.715601][ T5842] hfsplus: failed to load catalog file [ 149.759599][ T1194] device hsr_slave_0 left promiscuous mode [ 149.861948][ T1194] device hsr_slave_1 left promiscuous mode [ 149.876370][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.894689][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.915794][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.941049][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.969711][ T1194] device bridge_slave_1 left promiscuous mode [ 149.983642][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.994268][ T5848] loop4: detected capacity change from 0 to 4096 [ 150.033295][ T1194] device bridge_slave_0 left promiscuous mode [ 150.045230][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.061503][ T5849] loop3: detected capacity change from 0 to 4096 [ 150.073576][ T1194] device veth1_macvtap left promiscuous mode [ 150.093866][ T5848] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 150.120387][ T1194] device veth0_macvtap left promiscuous mode [ 150.150044][ T1194] device veth1_vlan left promiscuous mode [ 150.163156][ T5849] ntfs: (device loop3): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 150.196222][ T1194] device veth0_vlan left promiscuous mode [ 150.262994][ T5849] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 150.315422][ T5849] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 150.330590][ T3582] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 150.335799][ T5849] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 150.359623][ T5849] ntfs: volume version 3.1. [ 150.364336][ T3582] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 150.401774][ T5849] ntfs: (device loop3): ntfs_mark_quotas_out_of_date(): Quota defaults entry is not present. [ 150.432255][ T3582] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 150.435750][ T5849] ntfs: (device loop3): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 150.923834][ T5864] loop3: detected capacity change from 0 to 4096 [ 150.953104][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 150.971761][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 150.995852][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.012853][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.108281][ T5864] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 151.130380][ T1194] bond0 (unregistering): Released all slaves [ 151.164275][ T5864] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 151.344642][ T5868] 9pnet: Insufficient options for proto=fd [ 151.686844][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.703140][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.731913][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.744841][ T1078] Bluetooth: hci0: command 0x040f tx timeout [ 151.921459][ T5874] loop4: detected capacity change from 0 to 8 [ 151.959108][ T5726] device hsr_slave_0 entered promiscuous mode [ 152.036300][ T5726] device hsr_slave_1 entered promiscuous mode [ 152.065042][ T5874] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 152.343372][ T5885] xt_TCPMSS: Only works on TCP SYN packets [ 152.472763][ T5888] cramfs: Error -5 while decompressing! [ 152.531037][ T5888] cramfs: ffffffff915942c2(26)->ffff8880541f4000(4096) [ 152.573898][ T5888] cramfs: Error -3 while decompressing! [ 152.605574][ T5888] cramfs: ffffffff915942dc(16)->ffff888072f61000(4096) [ 152.653700][ T5888] cramfs: Error -5 while decompressing! [ 152.667460][ T5888] cramfs: ffffffff915942c2(26)->ffff8880541f4000(4096) [ 152.742529][ T26] audit: type=1800 audit(1723615912.153:75): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.521" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 152.910507][ T5872] loop1: detected capacity change from 0 to 32768 [ 153.106975][ T5726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.126002][ T5726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.144968][ T5726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.161335][ T5726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.188001][ T5872] XFS (loop1): Mounting V5 Filesystem [ 153.224479][ T5880] loop3: detected capacity change from 0 to 32768 [ 153.403237][ T5872] XFS (loop1): Ending clean mount [ 153.443403][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.461164][ T5880] XFS (loop3): Mounting V5 Filesystem [ 153.500817][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.509336][ T5872] XFS (loop1): Quotacheck needed: Please wait. [ 153.515443][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.540563][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.651907][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.724341][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.798552][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.805721][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.971261][ T3780] Bluetooth: hci0: command 0x0419 tx timeout [ 153.977790][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.001265][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.039907][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.083529][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.090711][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.160139][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.211956][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.261155][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.301641][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.341881][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.391302][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.400580][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.429847][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.453950][ T5726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.473943][ T5880] XFS (loop3): Ending clean mount [ 154.480929][ T5872] XFS (loop1): Quotacheck: Done. [ 154.575663][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.677081][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.696098][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.940303][ T5921] loop4: detected capacity change from 0 to 262144 [ 154.994395][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.008620][ T5921] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.526 (5921) [ 155.081046][ T5921] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 155.090801][ T5921] BTRFS info (device loop4): enabling ssd optimizations [ 155.097858][ T5921] BTRFS info (device loop4): enabling auto defrag [ 155.104282][ T5921] BTRFS info (device loop4): using free space tree [ 155.110873][ T5921] BTRFS info (device loop4): has skinny extents [ 155.117181][ T5921] BTRFS info (device loop4): flagging fs with big metadata feature [ 155.201442][ T3680] XFS (loop1): Unmounting Filesystem [ 155.348828][ T5073] XFS (loop3): Unmounting Filesystem [ 155.581679][ T420] BTRFS warning (device loop4): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 155.624357][ T5921] repair_io_failure: 2 callbacks suppressed [ 155.624374][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 22036480 (dev /dev/loop4 sector 43040) [ 155.642021][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 22040576 (dev /dev/loop4 sector 43048) [ 155.653528][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 22044672 (dev /dev/loop4 sector 43056) [ 155.665076][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 22048768 (dev /dev/loop4 sector 43064) [ 155.677929][ T9] BTRFS warning (device loop4): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 155.717105][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 30670848 (dev /dev/loop4 sector 76288) [ 155.728603][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.735039][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 30674944 (dev /dev/loop4 sector 76296) [ 155.740097][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.748698][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 30679040 (dev /dev/loop4 sector 76304) [ 155.774888][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 30683136 (dev /dev/loop4 sector 76312) [ 155.793983][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.831807][ T9] BTRFS warning (device loop4): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 155.870464][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 30457856 (dev /dev/loop4 sector 75872) [ 155.872597][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.881731][ T5921] BTRFS info (device loop4): read error corrected: ino 0 off 30461952 (dev /dev/loop4 sector 75880) [ 155.905352][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.008585][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.055842][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.102202][ T3632] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 156.131487][ T5726] device veth0_vlan entered promiscuous mode [ 156.164085][ T5726] device veth1_vlan entered promiscuous mode [ 156.270795][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.292348][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.321577][ T5994] loop3: detected capacity change from 0 to 512 [ 156.325632][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.444326][ T5726] device veth0_macvtap entered promiscuous mode [ 156.455512][ T5994] EXT4-fs (loop3): Value of option "test_dummy_encryption=test_dummy_encryption" is unrecognized [ 156.514196][ T5726] device veth1_macvtap entered promiscuous mode [ 156.619025][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.694763][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.744904][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.776176][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.814985][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.834604][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.854622][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.874595][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.905431][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.949330][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.960068][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.020703][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.055407][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.056059][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.056784][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.106240][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.106262][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.106272][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.106285][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.106296][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.106307][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.106317][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.106329][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.107495][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.138738][ T5726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.138822][ T5726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.138848][ T5726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.138874][ T5726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.140360][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.140888][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.036449][ T6021] loop3: detected capacity change from 0 to 512 [ 158.104313][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.104374][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.109704][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.138297][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.234072][ T5998] loop1: detected capacity change from 0 to 32768 [ 158.280200][ T6021] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.537: bad orphan inode 1 [ 158.314660][ T6021] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,resgid=0x0000000000000000,max_dir_size_kb=0x00000000000003f5,min_batch_time=0x0000000000000005,errors=continue,noquota,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 158.355256][ T5998] XFS: attr2 mount option is deprecated. [ 158.492590][ T6027] loop4: detected capacity change from 0 to 4096 [ 158.517794][ T5998] XFS (loop1): Mounting V5 Filesystem [ 158.591335][ T6027] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 158.635512][ T6027] ntfs3: loop4: Failed to load $MFTMirr. [ 158.712346][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.749493][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.776262][ T5998] XFS (loop1): Ending clean mount [ 158.788753][ T5998] XFS (loop1): Quotacheck needed: Please wait. [ 158.934353][ T5998] XFS (loop1): Quotacheck: Done. [ 159.889164][ T3680] XFS (loop1): Unmounting Filesystem [ 159.906521][ T6053] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.260919][ T6062] loop4: detected capacity change from 0 to 16 [ 160.292869][ T6062] erofs: (device loop4): mounted with root inode @ nid 36. [ 160.434749][ T6054] loop3: detected capacity change from 0 to 32768 [ 160.709832][ T6072] 9pnet: Insufficient options for proto=fd [ 161.038957][ T420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.067763][ T6054] XFS (loop3): Mounting V5 Filesystem [ 161.241498][ T6054] XFS (loop3): Ending clean mount [ 161.246744][ T3841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.302222][ T5073] XFS (loop3): Unmounting Filesystem [ 161.515989][ T420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.571698][ T420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.640169][ T420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.644821][ T3841] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 161.659691][ T3841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.669598][ T3841] usb 2-1: config 0 descriptor?? [ 161.733233][ T3841] usb-storage 2-1:0.0: USB Mass Storage device detected [ 161.953870][ T1078] usb 2-1: USB disconnect, device number 8 [ 162.063843][ T6098] loop3: detected capacity change from 0 to 4096 [ 162.189794][ T6098] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (32768) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 162.375455][ T6096] loop4: detected capacity change from 0 to 32768 [ 162.407581][ T6109] loop3: detected capacity change from 0 to 64 [ 162.435353][ T6096] XFS: ikeep mount option is deprecated. [ 162.444802][ T6096] XFS: noikeep mount option is deprecated. [ 162.727377][ T6096] XFS (loop4): Mounting V5 Filesystem [ 162.902923][ T6124] cgroup: No subsys list or none specified [ 163.628056][ T6096] XFS (loop4): Ending clean mount [ 163.642924][ T6096] XFS (loop4): Quotacheck needed: Please wait. [ 163.670119][ T6104] chnl_net:caif_netlink_parms(): no params data found [ 163.717650][ T6140] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 164.300698][ T6096] XFS (loop4): Quotacheck: Done. [ 164.305861][ T3845] Bluetooth: hci0: command 0x0409 tx timeout [ 164.367507][ T420] device hsr_slave_0 left promiscuous mode [ 164.395404][ T420] device hsr_slave_1 left promiscuous mode [ 164.409783][ T420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.427026][ T3582] XFS (loop4): Unmounting Filesystem [ 164.469193][ T420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.653467][ T420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.661033][ T420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.670172][ T420] device bridge_slave_1 left promiscuous mode [ 164.677093][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.688896][ T420] device bridge_slave_0 left promiscuous mode [ 164.695278][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.712779][ T420] device veth1_macvtap left promiscuous mode [ 165.191359][ T420] device veth0_macvtap left promiscuous mode [ 165.197786][ T420] device veth1_vlan left promiscuous mode [ 165.203646][ T420] device veth0_vlan left promiscuous mode [ 165.540856][ T6160] loop3: detected capacity change from 0 to 4096 [ 165.574623][ T6160] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 165.608582][ T1078] Bluetooth: hci2: command 0x0406 tx timeout [ 165.623838][ T1078] Bluetooth: hci4: command 0x0406 tx timeout [ 165.629513][ T420] team0 (unregistering): Port device team_slave_1 removed [ 165.710095][ T420] team0 (unregistering): Port device team_slave_0 removed [ 165.744796][ T420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.770193][ T26] audit: type=1800 audit(1723615925.233:76): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.562" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 165.791181][ T420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.102414][ T6183] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 166.562971][ T6185] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 166.585718][ T1078] Bluetooth: hci0: command 0x041b tx timeout [ 167.251108][ T420] bond0 (unregistering): Released all slaves [ 167.292109][ T6193] loop3: detected capacity change from 0 to 64 [ 167.441085][ T6201] loop1: detected capacity change from 0 to 64 [ 167.454191][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.496398][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.552775][ T6104] device bridge_slave_0 entered promiscuous mode [ 167.573250][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.613603][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.691950][ T6104] device bridge_slave_1 entered promiscuous mode [ 167.778650][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.862723][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.457671][ T6104] team0: Port device team_slave_0 added [ 168.574024][ T6104] team0: Port device team_slave_1 added [ 168.625506][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 168.641145][ T3841] Bluetooth: hci0: command 0x040f tx timeout [ 168.739620][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.755930][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.824858][ T3841] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 168.853261][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.894829][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.901964][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.787536][ T6254] delete_channel: no stack [ 169.793546][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.911687][ T6104] device hsr_slave_0 entered promiscuous mode [ 169.929394][ T6104] device hsr_slave_1 entered promiscuous mode [ 170.413593][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'. [ 170.535505][ T3841] usb 4-1: string descriptor 0 read error: -22 [ 170.555691][ T3841] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 170.787074][ T3841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.838850][ T3841] usb 4-1: config 0 descriptor?? [ 170.845797][ T1078] Bluetooth: hci0: command 0x0419 tx timeout [ 170.896379][ T3841] usbtest 4-1:0.0: FX2 device [ 170.913005][ T3841] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 171.480484][ T6287] device batadv_slave_1 entered promiscuous mode [ 171.791756][ T3615] usb 4-1: USB disconnect, device number 3 [ 171.851341][ T6286] device batadv_slave_1 left promiscuous mode [ 172.080943][ T3841] kernel write not supported for file /snd/seq (pid: 3841 comm: kworker/0:14) [ 172.420609][ T6314] loop3: detected capacity change from 0 to 164 [ 172.614781][ T3841] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.748318][ T6104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.809377][ T6104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.468537][ T6104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.524893][ T3841] usb 2-1: Using ep0 maxpacket: 16 [ 173.549594][ T6104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.556990][ T6332] input: syz1 as /devices/virtual/input/input5 [ 173.557224][ T6331] loop4: detected capacity change from 0 to 4096 [ 173.573483][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 173.667935][ T6331] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 173.721223][ T6338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.766237][ T6331] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 173.783672][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 173.834705][ T3841] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 173.843797][ T3841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.868177][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.884653][ T3841] usb 2-1: Product: syz [ 173.888939][ T3841] usb 2-1: Manufacturer: syz [ 173.893539][ T3841] usb 2-1: SerialNumber: syz [ 173.918357][ T6104] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.934094][ T3841] usb 2-1: config 0 descriptor?? [ 173.944112][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.953135][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.976194][ T3841] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 173.991963][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.002673][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.031695][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.038809][ T3845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.058462][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.082323][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.096809][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.103893][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.120621][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.130839][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.163755][ T6104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.183172][ T6104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.211238][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.221836][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.256930][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.274118][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.286020][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.300768][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.309552][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.937863][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.030008][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.046748][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.055506][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.244890][ T6372] fuse: Bad value for 'fd' [ 175.509728][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.529475][ T3841] usb 2-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 175.541497][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.557681][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.587090][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.597771][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.649230][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.661202][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.687261][ T6104] device veth0_vlan entered promiscuous mode [ 175.705586][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.713885][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.723373][ T3375] usb 2-1: USB disconnect, device number 9 [ 175.743592][ T6104] device veth1_vlan entered promiscuous mode [ 175.794434][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.805912][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.818073][ T3375] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 175.827086][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.854641][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.855773][ T3375] ssu100 2-1:0.0: device disconnected [ 175.883165][ T6104] device veth0_macvtap entered promiscuous mode [ 175.894840][ T1078] Bluetooth: hci1: command 0x0406 tx timeout [ 175.929623][ T6104] device veth1_macvtap entered promiscuous mode [ 175.977131][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.996790][ T6367] loop3: detected capacity change from 0 to 32768 [ 176.009175][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.020892][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.031881][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.042843][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.054155][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.064504][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.076604][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.090855][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.102330][ T6406] device batadv_slave_1 entered promiscuous mode [ 176.111448][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.125113][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.133319][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.147775][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.163421][ T6405] device batadv_slave_1 left promiscuous mode [ 176.176437][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.201892][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.212957][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.219023][ T6367] XFS (loop3): Mounting V5 Filesystem [ 176.234919][ T5022] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.236888][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.256407][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.270119][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.280587][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.291721][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.304437][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.313750][ T3375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.320620][ T6429] loop1: detected capacity change from 0 to 164 [ 176.323339][ T3375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.343022][ T6104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.353528][ T6104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.362916][ T6104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.382926][ T6104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.448951][ T6429] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 176.479769][ T6367] XFS (loop3): Ending clean mount [ 176.494769][ T5022] usb 5-1: Using ep0 maxpacket: 8 [ 176.529010][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.540834][ T6367] XFS (loop3): Quotacheck needed: Please wait. [ 176.583325][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.606359][ T420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.641436][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.662437][ T420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.699397][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.716859][ T6367] XFS (loop3): Quotacheck: Done. [ 176.724833][ T5022] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 176.733031][ T5022] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.998728][ T5022] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.215414][ T5022] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.259680][ T5022] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.295870][ T5022] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.310110][ T5022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.357081][ T5073] XFS (loop3): Unmounting Filesystem [ 177.628894][ T6404] udc-core: couldn't find an available UDC or it's busy [ 177.648085][ T6404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.145312][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.640'. [ 178.154829][ T3614] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.394877][ T3614] usb 2-1: Using ep0 maxpacket: 32 [ 178.467654][ T6500] udc-core: couldn't find an available UDC or it's busy [ 178.475531][ T6500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.487415][ T6500] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 178.496771][ T3841] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.501600][ T6500] udc-core: couldn't find an available UDC or it's busy [ 178.511416][ T6500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.519619][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.524580][ T6500] udc-core: couldn't find an available UDC or it's busy [ 178.530902][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.538169][ T6500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.553502][ T3614] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 178.564342][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.580548][ T3614] usb 2-1: config 0 descriptor?? [ 178.594981][ T6500] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 178.603446][ T3845] usb 5-1: USB disconnect, device number 5 [ 178.809396][ T4241] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.067986][ T3614] greenasia 0003:0E8F:0012.0002: item fetching failed at offset 1/3 [ 179.076836][ T3614] greenasia 0003:0E8F:0012.0002: parse failed [ 179.082923][ T3614] greenasia: probe of 0003:0E8F:0012.0002 failed with error -22 [ 179.084753][ T3841] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 179.106100][ T3841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.120043][ T3841] usb 4-1: Product: syz [ 179.124231][ T3841] usb 4-1: Manufacturer: syz [ 179.134646][ T3841] usb 4-1: SerialNumber: syz [ 179.141704][ T3841] usb 4-1: config 0 descriptor?? [ 179.282870][ T1078] usb 2-1: USB disconnect, device number 10 [ 179.623160][ T4241] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.659223][ T6516] netlink: 'syz.4.642': attribute type 12 has an invalid length. [ 179.670854][ T6516] netlink: 'syz.4.642': attribute type 29 has an invalid length. [ 179.687661][ T4241] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.700248][ T6516] netlink: 'syz.4.642': attribute type 29 has an invalid length. [ 179.710079][ T6516] netlink: 'syz.4.642': attribute type 29 has an invalid length. [ 179.727206][ T4241] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.863990][ T6521] loop1: detected capacity change from 0 to 1024 [ 179.928954][ T6521] EXT4-fs (loop1): Ignoring removed orlov option [ 179.936022][ T6521] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 179.994955][ T3841] mos7840 4-1:0.0: required endpoints missing [ 180.005256][ T3841] usb 4-1: USB disconnect, device number 4 [ 180.035696][ T6521] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 180.056936][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 180.242072][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.249639][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.258694][ T6517] device bridge_slave_0 entered promiscuous mode [ 180.267909][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.276809][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.285583][ T6517] device bridge_slave_1 entered promiscuous mode [ 180.327335][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.339723][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.407755][ T6517] team0: Port device team_slave_0 added [ 180.436198][ T6517] team0: Port device team_slave_1 added [ 180.477871][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.520338][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.588600][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 180.634990][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.704144][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.721465][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.787387][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.924468][ T6565] loop4: detected capacity change from 0 to 64 [ 180.958446][ T6517] device hsr_slave_0 entered promiscuous mode [ 180.975619][ T6517] device hsr_slave_1 entered promiscuous mode [ 180.982733][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.991562][ T6517] Cannot create hsr debugfs directory [ 181.056096][ T6565] hfs: unable to locate alternate MDB [ 181.061497][ T6565] hfs: continuing without an alternate MDB [ 181.119761][ T6565] hfs: unable to open catalog tree [ 181.138658][ T6565] hfs: can't find a HFS filesystem on dev loop4 [ 181.226141][ T3614] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.619432][ T6592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 181.972495][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 182.006195][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.018779][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.029464][ T3614] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 182.038818][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.198421][ T3845] Bluetooth: hci0: command 0x0409 tx timeout [ 182.212014][ T3614] usb 2-1: config 0 descriptor?? [ 182.244375][ T4241] device hsr_slave_0 left promiscuous mode [ 182.400709][ T4241] device hsr_slave_1 left promiscuous mode [ 182.422093][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.438347][ T26] audit: type=1326 audit(1723615941.903:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eafd59f9 code=0x7ffc0000 [ 182.451581][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.502792][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.514672][ T26] audit: type=1326 audit(1723615941.933:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f81eafd59f9 code=0x7ffc0000 [ 182.524803][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.569890][ T26] audit: type=1326 audit(1723615941.933:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81eafd5a33 code=0x7ffc0000 [ 182.592909][ T4241] device bridge_slave_1 left promiscuous mode [ 182.604184][ T26] audit: type=1326 audit(1723615941.933:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81eafd5a33 code=0x7ffc0000 [ 182.609177][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.662321][ T4241] device bridge_slave_0 left promiscuous mode [ 182.669847][ T26] audit: type=1326 audit(1723615941.933:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eafd59f9 code=0x7ffc0000 [ 182.700726][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.718203][ T4241] device veth1_macvtap left promiscuous mode [ 182.724484][ T26] audit: type=1326 audit(1723615941.933:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eafd59f9 code=0x7ffc0000 [ 182.770771][ T4241] device veth0_macvtap left promiscuous mode [ 182.777192][ T3614] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 182.780732][ T4241] device veth1_vlan left promiscuous mode [ 182.796306][ T4241] device veth0_vlan left promiscuous mode [ 182.802175][ T26] audit: type=1326 audit(1723615941.933:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eafd59f9 code=0x7ffc0000 [ 182.918411][ T6613] loop3: detected capacity change from 0 to 164 [ 182.927146][ T3375] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.315501][ T3375] usb 5-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12 [ 183.361282][ T3375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.395816][ T26] audit: type=1326 audit(1723615941.933:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81eafd59f9 code=0x7ffc0000 [ 183.417503][ T3375] usb 5-1: config 0 descriptor?? [ 183.418082][ T26] audit: type=1326 audit(1723615941.933:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81eafd59f9 code=0x7ffc0000 [ 183.445938][ T26] audit: type=1326 audit(1723615941.933:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f81eafd59f9 code=0x7ffc0000 [ 183.476432][ T3375] hub 5-1:0.0: bad descriptor, ignoring hub [ 183.482934][ T6613] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 183.501568][ T3375] hub: probe of 5-1:0.0 failed with error -5 [ 183.508791][ T6614] udc-core: couldn't find an available UDC or it's busy [ 183.510282][ T3375] gspca_main: sonixb-2.14.0 probing 0c45:6025 [ 183.523432][ T6612] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 183.537616][ T6614] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 183.554761][ T3841] usb 2-1: USB disconnect, device number 11 [ 183.703031][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 183.752859][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 183.767184][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.796891][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.950035][ T4241] bond0 (unregistering): Released all slaves [ 184.031924][ T4262] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.040029][ T4262] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.065250][ T3841] usb 5-1: USB disconnect, device number 6 [ 184.117549][ T6626] loop1: detected capacity change from 0 to 1024 [ 184.200061][ T6626] hfsplus: can't free extent [ 184.224867][ T6004] Bluetooth: hci0: command 0x041b tx timeout [ 184.231472][ T6626] [ 184.233812][ T6626] ====================================================== [ 184.240831][ T6626] WARNING: possible circular locking dependency detected [ 184.247871][ T6626] 5.15.164-syzkaller #0 Not tainted [ 184.253064][ T6626] ------------------------------------------------------ [ 184.260076][ T6626] syz.1.669/6626 is trying to acquire lock: [ 184.265965][ T6626] ffff888076f9e0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x864/0xb80 [ 184.268779][ T6517] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.275827][ T6626] [ 184.275827][ T6626] but task is already holding lock: [ 184.275835][ T6626] ffff888060463708 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2e1/0xb80 [ 184.275880][ T6626] [ 184.275880][ T6626] which lock already depends on the new lock. [ 184.275880][ T6626] [ 184.275885][ T6626] [ 184.275885][ T6626] the existing dependency chain (in reverse order) is: [ 184.275890][ T6626] [ 184.275890][ T6626] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 184.329492][ T6626] lock_acquire+0x1db/0x4f0 [ 184.334527][ T6626] __mutex_lock_common+0x1da/0x25a0 [ 184.340253][ T6626] mutex_lock_nested+0x17/0x20 [ 184.345545][ T6626] hfsplus_file_extend+0x1d2/0x1b10 [ 184.351283][ T6626] hfsplus_bmap_reserve+0x101/0x4e0 [ 184.357012][ T6626] hfsplus_create_cat+0x1a9/0x1ba0 [ 184.362653][ T6626] hfsplus_fill_super+0x13e6/0x1c90 [ 184.368386][ T6626] mount_bdev+0x2c9/0x3f0 [ 184.373381][ T6626] legacy_get_tree+0xeb/0x180 [ 184.378594][ T6626] vfs_get_tree+0x88/0x270 [ 184.383545][ T6626] do_new_mount+0x2ba/0xb40 [ 184.388580][ T6626] __se_sys_mount+0x2d5/0x3c0 [ 184.393803][ T6626] do_syscall_64+0x3b/0xb0 [ 184.398755][ T6626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.405281][ T6626] [ 184.405281][ T6626] -> #0 (&tree->tree_lock){+.+.}-{3:3}: [ 184.413021][ T6626] validate_chain+0x1649/0x5930 [ 184.418413][ T6626] __lock_acquire+0x1295/0x1ff0 [ 184.423793][ T6626] lock_acquire+0x1db/0x4f0 [ 184.428823][ T6626] __mutex_lock_common+0x1da/0x25a0 [ 184.434551][ T6626] mutex_lock_nested+0x17/0x20 [ 184.439932][ T6626] hfsplus_file_truncate+0x864/0xb80 [ 184.445747][ T6626] hfsplus_setattr+0x1b9/0x280 [ 184.451044][ T6626] notify_change+0xc6d/0xf50 [ 184.456166][ T6626] do_truncate+0x21c/0x300 [ 184.461133][ T6626] path_openat+0x28a3/0x2f20 [ 184.466255][ T6626] do_filp_open+0x21c/0x460 [ 184.471285][ T6626] do_sys_openat2+0x13b/0x4f0 [ 184.476512][ T6626] __x64_sys_creat+0x11f/0x160 [ 184.481775][ T6626] do_syscall_64+0x3b/0xb0 [ 184.486691][ T6626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.493088][ T6626] [ 184.493088][ T6626] other info that might help us debug this: [ 184.493088][ T6626] [ 184.503290][ T6626] Possible unsafe locking scenario: [ 184.503290][ T6626] [ 184.510713][ T6626] CPU0 CPU1 [ 184.516056][ T6626] ---- ---- [ 184.521397][ T6626] lock(&HFSPLUS_I(inode)->extents_lock); [ 184.527182][ T6626] lock(&tree->tree_lock); [ 184.534181][ T6626] lock(&HFSPLUS_I(inode)->extents_lock); [ 184.542478][ T6626] lock(&tree->tree_lock); [ 184.546956][ T6626] [ 184.546956][ T6626] *** DEADLOCK *** [ 184.546956][ T6626] [ 184.555075][ T6626] 3 locks held by syz.1.669/6626: [ 184.560071][ T6626] #0: ffff88807d5b4460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 184.569277][ T6626] #1: ffff888060463900 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 184.579604][ T6626] #2: ffff888060463708 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2e1/0xb80 [ 184.591145][ T6626] [ 184.591145][ T6626] stack backtrace: [ 184.597040][ T6626] CPU: 1 PID: 6626 Comm: syz.1.669 Not tainted 5.15.164-syzkaller #0 [ 184.605081][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 184.615111][ T6626] Call Trace: [ 184.618375][ T6626] [ 184.621288][ T6626] dump_stack_lvl+0x1e3/0x2d0 [ 184.625950][ T6626] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 184.631676][ T6626] ? print_circular_bug+0x12b/0x1a0 [ 184.636876][ T6626] check_noncircular+0x2f8/0x3b0 [ 184.641799][ T6626] ? mark_lock+0x98/0x340 [ 184.646110][ T6626] ? add_chain_block+0x850/0x850 [ 184.651024][ T6626] ? lockdep_lock+0x11f/0x2a0 [ 184.655681][ T6626] validate_chain+0x1649/0x5930 [ 184.660514][ T6626] ? print_irqtrace_events+0x210/0x210 [ 184.665949][ T6626] ? do_raw_spin_unlock+0x137/0x8b0 [ 184.671129][ T6626] ? reacquire_held_locks+0x660/0x660 [ 184.676477][ T6626] ? finish_lock_switch+0x8f/0x100 [ 184.681566][ T6626] ? lockdep_hardirqs_on+0x94/0x130 [ 184.686745][ T6626] ? finish_lock_switch+0x8f/0x100 [ 184.691833][ T6626] ? finish_task_switch+0x134/0x630 [ 184.697098][ T6626] ? look_up_lock_class+0x77/0x120 [ 184.702191][ T6626] ? register_lock_class+0x100/0x9a0 [ 184.707452][ T6626] ? __schedule+0x12cc/0x45b0 [ 184.712109][ T6626] ? is_dynamic_key+0x1f0/0x1f0 [ 184.716935][ T6626] ? vprintk_emit+0xbf/0x150 [ 184.721504][ T6626] ? mark_lock+0x98/0x340 [ 184.725821][ T6626] __lock_acquire+0x1295/0x1ff0 [ 184.730655][ T6626] lock_acquire+0x1db/0x4f0 [ 184.735134][ T6626] ? hfsplus_file_truncate+0x864/0xb80 [ 184.740570][ T6626] ? read_lock_is_recursive+0x10/0x10 [ 184.745919][ T6626] ? preempt_schedule+0xd9/0xe0 [ 184.750752][ T6626] ? __might_sleep+0xc0/0xc0 [ 184.755320][ T6626] ? tick_nohz_tick_stopped+0x77/0xb0 [ 184.760759][ T6626] ? irq_work_queue+0xc6/0x150 [ 184.765500][ T6626] __mutex_lock_common+0x1da/0x25a0 [ 184.770679][ T6626] ? hfsplus_file_truncate+0x864/0xb80 [ 184.776126][ T6626] ? hfsplus_free_extents+0x186/0xae0 [ 184.781489][ T6626] ? hfsplus_file_truncate+0x864/0xb80 [ 184.786923][ T6626] ? panic+0x860/0x860 [ 184.790985][ T6626] ? mutex_lock_io_nested+0x60/0x60 [ 184.796183][ T6626] ? hfsplus_free_extents+0x47e/0xae0 [ 184.801555][ T6626] mutex_lock_nested+0x17/0x20 [ 184.806307][ T6626] hfsplus_file_truncate+0x864/0xb80 [ 184.811578][ T6626] ? hfsplus_add_extent+0x880/0x880 [ 184.816753][ T6626] ? unmap_mapping_range+0x1ae/0x3e0 [ 184.822018][ T6626] ? unmap_mapping_pages+0x1e0/0x1e0 [ 184.827285][ T6626] ? truncate_setsize+0xcb/0xf0 [ 184.832119][ T6626] hfsplus_setattr+0x1b9/0x280 [ 184.836863][ T6626] ? hfsplus_write_failed+0x90/0x90 [ 184.842040][ T6626] notify_change+0xc6d/0xf50 [ 184.846613][ T6626] do_truncate+0x21c/0x300 [ 184.851102][ T6626] ? rcu_lock_release+0x20/0x20 [ 184.855932][ T6626] ? ima_bprm_check+0x2b0/0x2b0 [ 184.860764][ T6626] ? bpf_lsm_path_truncate+0x5/0x10 [ 184.865941][ T6626] path_openat+0x28a3/0x2f20 [ 184.870519][ T6626] ? do_filp_open+0x460/0x460 [ 184.877022][ T6626] do_filp_open+0x21c/0x460 [ 184.881960][ T6626] ? vfs_tmpfile+0x2e0/0x2e0 [ 184.886546][ T6626] ? _raw_spin_unlock+0x24/0x40 [ 184.891381][ T6626] ? alloc_fd+0x598/0x630 [ 184.895693][ T6626] do_sys_openat2+0x13b/0x4f0 [ 184.900348][ T6626] ? read_lock_is_recursive+0x10/0x10 [ 184.905701][ T6626] ? do_sys_open+0x220/0x220 [ 184.910274][ T6626] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 184.916236][ T6626] __x64_sys_creat+0x11f/0x160 [ 184.920976][ T6626] ? __x64_compat_sys_openat+0x290/0x290 [ 184.926597][ T6626] ? syscall_enter_from_user_mode+0x2e/0x240 [ 184.932578][ T6626] ? lockdep_hardirqs_on+0x94/0x130 [ 184.937784][ T6626] ? syscall_enter_from_user_mode+0x2e/0x240 [ 184.943766][ T6626] do_syscall_64+0x3b/0xb0 [ 184.948169][ T6626] ? clear_bhb_loop+0x15/0x70 [ 184.952831][ T6626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.958730][ T6626] RIP: 0033:0x7fabb9ab99f9 [ 184.963146][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.982752][ T6626] RSP: 002b:00007fabb7f36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 184.991159][ T6626] RAX: ffffffffffffffda RBX: 00007fabb9c55f80 RCX: 00007fabb9ab99f9 [ 184.999121][ T6626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 185.007086][ T6626] RBP: 00007fabb9b278ee R08: 0000000000000000 R09: 0000000000000000 [ 185.015055][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 185.023005][ T6626] R13: 0000000000000000 R14: 00007fabb9c55f80 R15: 00007ffefb2aa068 [ 185.030958][ T6626] [ 185.045859][ T6517] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.068862][ T6517] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.441473][ T6517] syz-executor (6517) used greatest stack depth: 19480 bytes left [ 185.700148][ T3576] syz-executor (3576) used greatest stack depth: 19320 bytes left [ 185.899026][ T4241] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.948280][ T4241] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.996843][ T4241] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.064924][ T3614] Bluetooth: hci5: command 0x1003 tx timeout [ 186.071395][ T3575] Bluetooth: hci5: sending frame failed (-49) [ 186.323616][ T4241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.367292][ T4241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.429364][ T4241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.401777][ T4241] device hsr_slave_0 left promiscuous mode [ 187.415579][ T4241] device hsr_slave_1 left promiscuous mode [ 187.421884][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.430019][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.437754][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.445205][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.452665][ T4241] device bridge_slave_1 left promiscuous mode [ 187.459092][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.467308][ T4241] device bridge_slave_0 left promiscuous mode [ 187.473530][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.483273][ T4241] device hsr_slave_0 left promiscuous mode [ 187.489727][ T4241] device hsr_slave_1 left promiscuous mode [ 187.495964][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.503308][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.510868][ T4241] device bridge_slave_1 left promiscuous mode [ 187.517062][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.524782][ T4241] device bridge_slave_0 left promiscuous mode [ 187.530899][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.540853][ T4241] device hsr_slave_0 left promiscuous mode [ 187.547163][ T4241] device hsr_slave_1 left promiscuous mode [ 187.553256][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.560704][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.568459][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.575954][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.583405][ T4241] device bridge_slave_0 left promiscuous mode [ 187.589662][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.599735][ T4241] device team0 left promiscuous mode [ 187.605119][ T4241] device team_slave_0 left promiscuous mode [ 187.611070][ T4241] device team_slave_1 left promiscuous mode [ 187.617614][ T4241] device veth1_macvtap left promiscuous mode [ 187.623606][ T4241] device veth0_macvtap left promiscuous mode [ 187.629824][ T4241] device veth1_vlan left promiscuous mode [ 187.635758][ T4241] device veth0_vlan left promiscuous mode [ 187.641762][ T4241] device veth1_to_hsr left promiscuous mode [ 187.648009][ T4241] device veth1_macvtap left promiscuous mode [ 187.654003][ T4241] device veth0_macvtap left promiscuous mode [ 187.660083][ T4241] device veth1_vlan left promiscuous mode [ 187.666164][ T4241] device veth0_vlan left promiscuous mode [ 187.745484][ T4241] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 187.786523][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 187.799538][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 187.811674][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.823000][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.860573][ T4241] bond0 (unregistering): Released all slaves [ 187.941626][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 187.951659][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 187.961102][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.973090][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.009903][ T4241] bond0 (unregistering): Released all slaves [ 188.087871][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 188.097770][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 188.109392][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.121350][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.158979][ T3613] Bluetooth: hci5: command 0x1001 tx timeout [ 188.165637][ T3575] Bluetooth: hci5: sending frame failed (-49) [ 188.169295][ T4241] bond0 (unregistering): Released all slaves [ 190.234671][ T6004] Bluetooth: hci5: command 0x1009 tx timeout