last executing test programs: 59.022200586s ago: executing program 4 (id=358): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) r2 = dup(r0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40001004, r2, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 58.659776235s ago: executing program 4 (id=362): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 55.356372515s ago: executing program 4 (id=383): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 54.693891044s ago: executing program 4 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1005848, 0x0) 54.182231244s ago: executing program 4 (id=387): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x10) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 51.474022802s ago: executing program 4 (id=399): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xe, 0x0, &(0x7f0000000380)="050000ffffffe70062a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) 51.122306057s ago: executing program 32 (id=399): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xe, 0x0, &(0x7f0000000380)="050000ffffffe70062a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) 47.959290296s ago: executing program 1 (id=417): openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47.577942667s ago: executing program 1 (id=418): setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa2) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 47.445342454s ago: executing program 1 (id=419): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b1a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b1b, &(0x7f0000000040)) 47.01889022s ago: executing program 1 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 46.683131969s ago: executing program 1 (id=425): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, r0, 0x0) write$binfmt_elf64(r1, 0x0, 0x40000) 43.53764202s ago: executing program 1 (id=443): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 42.464652107s ago: executing program 33 (id=443): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 4.978728827s ago: executing program 2 (id=569): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000675) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.927194009s ago: executing program 2 (id=572): accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 3.533451311s ago: executing program 3 (id=574): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140)=[{r1, 0xa180}, {r2, 0x8}], 0x2, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 3.020984523s ago: executing program 3 (id=577): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 2.812520819s ago: executing program 3 (id=579): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x1a, r2}, 0x10) 2.742077734s ago: executing program 0 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) 2.513056864s ago: executing program 0 (id=581): clock_gettime(0x2, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 2.411306853s ago: executing program 0 (id=582): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000020c0), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1.737529984s ago: executing program 2 (id=583): epoll_create1(0x80000) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bd5228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1.603864395s ago: executing program 3 (id=584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/50, 0x32}], 0x1, &(0x7f0000000480)=""/44, 0x2c}, 0x10000) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177d", 0x3}], 0x1}}], 0x1, 0x40) 1.269279897s ago: executing program 0 (id=585): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a00ea0000a6110000000000000000000000ffffe0000002fe8000000000000000000000000000aa4e1d4e2000a690"], 0x0) readv(r0, &(0x7f0000002e00)=[{&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x2) socket(0x10, 0x803, 0x2) syz_pidfd_open(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa00a1, 0x0) 1.127140508s ago: executing program 2 (id=586): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macsec0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 989.075629ms ago: executing program 2 (id=587): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x101c) 519.472276ms ago: executing program 3 (id=588): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000940)={r2, @in={{0x2, 0x4e23, @loopback}}, [0x5, 0x4, 0x3, 0x28290164, 0x5, 0x401, 0x5, 0x500, 0x6, 0x0, 0x8, 0x10000, 0xd, 0x10001, 0x6]}, &(0x7f0000000a40)=0x100) 352.55452ms ago: executing program 0 (id=589): unshare(0xa020480) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 286.97844ms ago: executing program 2 (id=590): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x8010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {0x6, 0xfff3}, {0xb, 0x1}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x20040000) 281.382725ms ago: executing program 3 (id=591): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1, 0x58, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0xc49}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x7, 0x1, 0x1, 0x1, 0x1, 0x5}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2) 0s ago: executing program 0 (id=592): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/24, 0x18}, {0x0}], 0x2}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 89.770161][ T5602] cgroup: Unknown subsys name 'net' [ 90.011367][ T5602] cgroup: Unknown subsys name 'cpuset' [ 90.066474][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.802010][ T9] cfg80211: failed to load regulatory.db [ 92.139894][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.019471][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.024410][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.089322][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.092242][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.117487][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.121191][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.141574][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.145785][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.147052][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.166693][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.166836][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.174843][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.179778][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.190600][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.193973][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.202881][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.204731][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.208729][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.216347][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.231905][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.232312][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.240879][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.242791][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.259941][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.312112][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.426980][ T4931] Bluetooth: hci0: command tx timeout [ 98.427091][ T4931] Bluetooth: hci3: command tx timeout [ 98.427171][ T4931] Bluetooth: hci2: command tx timeout [ 98.427640][ T4931] Bluetooth: hci4: command tx timeout [ 98.427732][ T4931] Bluetooth: hci1: command tx timeout [ 98.997889][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.998977][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.999185][ T5625] bridge_slave_0: entered allmulticast mode [ 99.001698][ T5625] bridge_slave_0: entered promiscuous mode [ 99.077304][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.077526][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.077711][ T5625] bridge_slave_1: entered allmulticast mode [ 99.081705][ T5625] bridge_slave_1: entered promiscuous mode [ 99.082897][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.083144][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.083321][ T5623] bridge_slave_0: entered allmulticast mode [ 99.085685][ T5623] bridge_slave_0: entered promiscuous mode [ 99.205182][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.205425][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.205607][ T5623] bridge_slave_1: entered allmulticast mode [ 99.213360][ T5623] bridge_slave_1: entered promiscuous mode [ 99.328135][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.328385][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.328552][ T5621] bridge_slave_0: entered allmulticast mode [ 99.331137][ T5621] bridge_slave_0: entered promiscuous mode [ 99.345365][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.352406][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.354404][ T5624] bridge_slave_0: entered allmulticast mode [ 99.381206][ T5624] bridge_slave_0: entered promiscuous mode [ 99.394074][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.463436][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.463730][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.463969][ T5621] bridge_slave_1: entered allmulticast mode [ 99.471727][ T5621] bridge_slave_1: entered promiscuous mode [ 99.477712][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.479502][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.480196][ T5624] bridge_slave_1: entered allmulticast mode [ 99.493124][ T5624] bridge_slave_1: entered promiscuous mode [ 99.522280][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.534389][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.545642][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.546986][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.558928][ T5622] bridge_slave_0: entered allmulticast mode [ 99.567124][ T5622] bridge_slave_0: entered promiscuous mode [ 99.631952][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.632542][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.632807][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.632992][ T5622] bridge_slave_1: entered allmulticast mode [ 99.635462][ T5622] bridge_slave_1: entered promiscuous mode [ 99.762434][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.776072][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.787002][ T5625] team0: Port device team_slave_0 added [ 99.854358][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.868457][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.871856][ T5625] team0: Port device team_slave_1 added [ 99.875291][ T5623] team0: Port device team_slave_0 added [ 99.899774][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.963046][ T5623] team0: Port device team_slave_1 added [ 99.971925][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.068990][ T5621] team0: Port device team_slave_0 added [ 100.072667][ T5624] team0: Port device team_slave_0 added [ 100.077384][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.077398][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.077500][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.156774][ T5621] team0: Port device team_slave_1 added [ 100.160217][ T5624] team0: Port device team_slave_1 added [ 100.161895][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.161906][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.161926][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.163900][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.163910][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.163928][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.179482][ T5622] team0: Port device team_slave_0 added [ 100.302804][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.302818][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.302838][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.308430][ T5622] team0: Port device team_slave_1 added [ 100.415309][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.415322][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.415342][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.425131][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.425171][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.425240][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.514522][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.514534][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.514554][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.517224][ T5626] Bluetooth: hci1: command tx timeout [ 100.517293][ T5626] Bluetooth: hci4: command tx timeout [ 100.517337][ T5626] Bluetooth: hci2: command tx timeout [ 100.517381][ T5626] Bluetooth: hci3: command tx timeout [ 100.517430][ T5626] Bluetooth: hci0: command tx timeout [ 100.909227][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.909245][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.909274][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.978644][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.978657][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.978676][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.072007][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.072021][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.072040][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.123701][ T5625] hsr_slave_0: entered promiscuous mode [ 101.125444][ T5625] hsr_slave_1: entered promiscuous mode [ 101.180641][ T5623] hsr_slave_0: entered promiscuous mode [ 101.182436][ T5623] hsr_slave_1: entered promiscuous mode [ 101.184018][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 101.184097][ T5623] Cannot create hsr debugfs directory [ 101.357246][ T5621] hsr_slave_0: entered promiscuous mode [ 101.360857][ T5621] hsr_slave_1: entered promiscuous mode [ 101.362496][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 101.362520][ T5621] Cannot create hsr debugfs directory [ 101.395583][ T5624] hsr_slave_0: entered promiscuous mode [ 101.401733][ T5624] hsr_slave_1: entered promiscuous mode [ 101.403174][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 101.403200][ T5624] Cannot create hsr debugfs directory [ 101.502739][ T5622] hsr_slave_0: entered promiscuous mode [ 101.504397][ T5622] hsr_slave_1: entered promiscuous mode [ 101.506578][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 101.506616][ T5622] Cannot create hsr debugfs directory [ 102.580369][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.595874][ T4931] Bluetooth: hci0: command tx timeout [ 102.595902][ T4931] Bluetooth: hci3: command tx timeout [ 102.595921][ T4931] Bluetooth: hci2: command tx timeout [ 102.595939][ T4931] Bluetooth: hci4: command tx timeout [ 102.595957][ T4931] Bluetooth: hci1: command tx timeout [ 102.642988][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.650370][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.691222][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.700857][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.730656][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.758574][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.803168][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.954049][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.994296][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.008796][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.039672][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.043520][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.071466][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.133291][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.163125][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.290795][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.330014][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.358610][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.400068][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.421411][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.448617][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.454270][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.481111][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.725665][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.750669][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.772106][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.810620][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.817092][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.851528][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.902663][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.930316][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.042347][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.103595][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.141707][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.161576][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.202880][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.220622][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.250537][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.278842][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.311442][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.375478][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.451656][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.451840][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.514064][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.548772][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.549178][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.667123][ T5626] Bluetooth: hci1: command tx timeout [ 104.667155][ T5626] Bluetooth: hci4: command tx timeout [ 104.667177][ T5626] Bluetooth: hci2: command tx timeout [ 104.667981][ T5626] Bluetooth: hci3: command tx timeout [ 104.668014][ T5626] Bluetooth: hci0: command tx timeout [ 104.723031][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.777134][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.824348][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.824546][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.897601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.897731][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.972332][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.041017][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.043702][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.043926][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.151298][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.152817][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.353116][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.393298][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.430291][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.430433][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.503715][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.503905][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.625635][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.730578][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.730749][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.822274][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.822502][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.195154][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.813873][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.899930][ T5625] veth0_vlan: entered promiscuous mode [ 107.032947][ T5625] veth1_vlan: entered promiscuous mode [ 107.124909][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.410750][ T5624] veth0_vlan: entered promiscuous mode [ 107.432139][ T5625] veth0_macvtap: entered promiscuous mode [ 107.456641][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.553691][ T5625] veth1_macvtap: entered promiscuous mode [ 107.592647][ T5624] veth1_vlan: entered promiscuous mode [ 107.692694][ T5622] veth0_vlan: entered promiscuous mode [ 107.741849][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.776868][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.800727][ T5622] veth1_vlan: entered promiscuous mode [ 107.834388][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.925684][ T145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.950593][ T145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.970791][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.002111][ T5624] veth0_macvtap: entered promiscuous mode [ 108.005018][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.091100][ T5624] veth1_macvtap: entered promiscuous mode [ 108.493714][ T5622] veth0_macvtap: entered promiscuous mode [ 108.540234][ T5623] veth0_vlan: entered promiscuous mode [ 108.560020][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.582622][ T5622] veth1_macvtap: entered promiscuous mode [ 108.650835][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.694839][ T3179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.694866][ T3179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.744973][ T5623] veth1_vlan: entered promiscuous mode [ 108.780368][ T5621] veth0_vlan: entered promiscuous mode [ 108.794243][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.813630][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.841758][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.893879][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.912064][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.999923][ T5621] veth1_vlan: entered promiscuous mode [ 109.020764][ T3415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.020783][ T3415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.024172][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.212049][ T1068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.230880][ T1068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.288737][ T1068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.292890][ T1068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.576690][ T5623] veth0_macvtap: entered promiscuous mode [ 109.662190][ T2216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.666087][ T2216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.772494][ T5623] veth1_macvtap: entered promiscuous mode [ 109.953093][ T5621] veth0_macvtap: entered promiscuous mode [ 110.074763][ T5621] veth1_macvtap: entered promiscuous mode [ 110.251993][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.252084][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.252100][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.338068][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.498717][ T3179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.498738][ T3179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.526835][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.565247][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.569008][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.612494][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.631470][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.751920][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.815250][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.815271][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.101254][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.103367][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.103620][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.104238][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.601917][ T3179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.601939][ T3179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.714769][ T2213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.714790][ T2213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.942147][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.942166][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.114091][ T5837] loop3: detected capacity change from 0 to 32768 [ 113.342345][ T5837] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.541515][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.541536][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.819867][ T5837] XFS (loop3): Ending clean mount [ 114.813795][ T5855] loop0: detected capacity change from 0 to 32768 [ 114.819147][ T5855] btrfs: Deprecated parameter 'usebackuproot' [ 114.819363][ T5855] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.832541][ T5855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13 (5855) [ 115.059027][ T5855] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.059083][ T5855] BTRFS info (device loop0): using crc32c checksum algorithm [ 115.379268][ T1351] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 115.384713][ T5855] BTRFS error (device loop0): failed to load root extent [ 115.384802][ T5855] BTRFS warning (device loop0): try to load backup roots slot 1 [ 115.385194][ T2213] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 115.387391][ T5855] BTRFS warning (device loop0): couldn't read tree root [ 115.387464][ T5855] BTRFS warning (device loop0): try to load backup roots slot 2 [ 115.397934][ T13] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 115.398302][ T5855] BTRFS warning (device loop0): couldn't read tree root [ 115.398356][ T5855] BTRFS warning (device loop0): try to load backup roots slot 3 [ 115.529355][ T5855] BTRFS info (device loop0): rebuilding free space tree [ 115.834660][ T5855] BTRFS info (device loop0): checking UUID tree [ 115.916206][ T5876] loop2: detected capacity change from 0 to 32768 [ 115.932088][ T5855] BTRFS info (device loop0): enabling ssd optimizations [ 115.932120][ T5855] BTRFS info (device loop0): turning on async discard [ 115.932136][ T5855] BTRFS info (device loop0): enabling free space tree [ 115.932153][ T5855] BTRFS info (device loop0): force clearing of disk cache [ 115.932170][ T5855] BTRFS info (device loop0): enabling auto defrag [ 115.932190][ T5855] BTRFS info (device loop0): trying to use backup root at mount time [ 115.932216][ T5855] BTRFS info (device loop0): use zstd compression, level 3 [ 115.970468][ T5876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.14 (5876) [ 116.060562][ T5876] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.060597][ T5876] BTRFS info (device loop2): using sha256 checksum algorithm [ 116.432433][ T5876] BTRFS info (device loop2): enabling ssd optimizations [ 116.432463][ T5876] BTRFS info (device loop2): turning on async discard [ 116.432488][ T5876] BTRFS info (device loop2): enabling free space tree [ 116.908592][ T5624] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.912745][ T38] audit: type=1800 audit(1778176405.184:2): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 117.850800][ T5898] pim6reg: entered allmulticast mode [ 118.059526][ T5901] pim6reg: left allmulticast mode [ 118.211528][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 119.214245][ T5623] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.214310][ T5625] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.289219][ T5903] loop1: detected capacity change from 0 to 8192 [ 120.526874][ T5623] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 120.733045][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 121.026462][ T5622] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0) [ 121.463947][ T5919] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 121.463971][ T5919] netlink: 'syz.3.23': attribute type 4 has an invalid length. [ 121.464085][ T5919] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.23'. [ 121.628084][ T5918] loop2: detected capacity change from 0 to 32768 [ 121.784394][ T5918] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.938518][ T5918] XFS (loop2): Ending clean mount [ 121.958751][ T5918] XFS (loop2): Quotacheck needed: Please wait. [ 122.866639][ T5918] XFS (loop2): Quotacheck: Done. [ 122.957942][ T38] audit: type=1800 audit(1778176411.244:3): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 123.356157][ T5623] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.601939][ T5623] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 125.520792][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.520823][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.739476][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.739505][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.879393][ T5986] loop4: detected capacity change from 0 to 128 [ 125.880684][ T5986] ======================================================= [ 125.880684][ T5986] WARNING: The mand mount option has been deprecated and [ 125.880684][ T5986] and is ignored by this kernel. Remove the mand [ 125.880684][ T5986] option from the mount to silence this warning. [ 125.880684][ T5986] ======================================================= [ 126.270542][ T5992] loop0: detected capacity change from 0 to 256 [ 126.330315][ T5992] exfat: Deprecated parameter 'utf8' [ 126.481960][ T5986] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.482001][ T5986] hpfs: filesystem error: improperly stopped [ 126.482014][ T5986] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.482029][ T5986] hpfs: You really don't want any checks? You are crazy... [ 126.482057][ T5986] hpfs: Code page index out of array [ 126.482065][ T5986] hpfs: code page support is disabled [ 126.539416][ T5986] hpfs: hpfs_map_4sectors(): unaligned read [ 126.539912][ T5986] hpfs: hpfs_map_4sectors(): unaligned read [ 126.539930][ T5986] hpfs: filesystem error: unable to find root dir [ 126.751789][ T5997] loop3: detected capacity change from 0 to 128 [ 126.851814][ T5997] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.851854][ T5997] hpfs: filesystem error: improperly stopped [ 126.851868][ T5997] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.851883][ T5997] hpfs: You really don't want any checks? You are crazy... [ 126.851902][ T5997] hpfs: Code page index out of array [ 126.851910][ T5997] hpfs: code page support is disabled [ 126.852036][ T5997] hpfs: hpfs_map_4sectors(): unaligned read [ 126.920950][ T5997] hpfs: hpfs_map_4sectors(): unaligned read [ 126.920969][ T5997] hpfs: filesystem error: unable to find root dir [ 127.013607][ T5992] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 127.347671][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 127.930821][ T5621] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0) [ 128.453860][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.550955][ T6009] bridge_slave_1: left allmulticast mode [ 128.550989][ T6009] bridge_slave_1: left promiscuous mode [ 128.551289][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.771190][ T6009] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 128.968257][ T6017] pim6reg: entered allmulticast mode [ 128.973018][ T6019] pim6reg: left allmulticast mode [ 129.775309][ T6033] Zero length message leads to an empty skb [ 129.870132][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 130.262183][ T5347] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.524086][ T5347] usb 3-1: Using ep0 maxpacket: 16 [ 130.597397][ T5347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.597425][ T5347] usb 3-1: config 0 has no interfaces? [ 130.603478][ T5347] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 130.603511][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.603532][ T5347] usb 3-1: Product: syz [ 130.603546][ T5347] usb 3-1: Manufacturer: syz [ 130.603561][ T5347] usb 3-1: SerialNumber: syz [ 130.748944][ T5347] usb 3-1: config 0 descriptor?? [ 131.023721][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 131.333134][ T5347] usb 3-1: USB disconnect, device number 2 [ 132.407671][ T6065] syz.3.65 (6065) used greatest stack depth: 18784 bytes left [ 132.498610][ T6076] loop0: detected capacity change from 0 to 128 [ 132.668833][ T6082] fuse: Bad value for 'fd' [ 132.787812][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.791192][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.982228][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 133.172221][ T6076] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.218527][ T6076] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.535826][ T6101] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 136.627984][ T5625] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.866543][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 137.058334][ T6108] netlink: 52 bytes leftover after parsing attributes in process `syz.0.77'. [ 137.142775][ T6113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.77'. [ 137.142930][ T6109] loop3: detected capacity change from 0 to 128 [ 137.389877][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.441473][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.641551][ T6109] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.668137][ T6109] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.803990][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 137.804574][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 137.940251][ T6107] ceph: No mds server is up or the cluster is laggy [ 138.137576][ T37] libceph: connect (1)[c::]:6789 error -101 [ 138.164011][ T37] libceph: mon0 (1)[c::]:6789 connect error [ 138.239934][ T37] libceph: connect (1)[c::]:6789 error -101 [ 138.240113][ T37] libceph: mon0 (1)[c::]:6789 connect error [ 138.284499][ T37] libceph: connect (1)[c::]:6789 error -101 [ 138.284695][ T37] libceph: mon0 (1)[c::]:6789 connect error [ 138.302279][ T6109] ceph: No mds server is up or the cluster is laggy [ 138.771136][ T6143] loop4: detected capacity change from 0 to 1024 [ 138.919269][ T5624] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.999752][ T6143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.179719][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 139.213093][ T6154] syz.0.96 uses obsolete (PF_INET,SOCK_PACKET) [ 139.314174][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.320237][ T6152] loop1: detected capacity change from 0 to 128 [ 139.338572][ T6152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.386608][ T6152] EXT4-fs (loop1): Test dummy encryption mode enabled [ 139.563798][ T5621] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0) [ 139.631870][ T6152] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.659335][ T6152] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.873492][ T6152] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 140.092950][ T6152] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.150852][ T6171] loop0: detected capacity change from 0 to 512 [ 140.241983][ T6171] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.100: missing EA_INODE flag [ 140.243084][ T6171] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 140.258224][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 140.258249][ C0] EXT4-fs (loop0): initial error at time 2000000011: ext4_xattr_inode_iget:441: inode 12 [ 140.258279][ C0] EXT4-fs (loop0): last error at time 2000000011: ext4_xattr_inode_iget:441: inode 12 [ 140.323214][ T6171] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.100: error while reading EA inode 12 err=-117 [ 140.323421][ T6171] loop0: lost filesystem error report for type 5 error -117 [ 140.324497][ T6171] EXT4-fs (loop0): 1 orphan inode deleted [ 140.375975][ T6171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.892856][ T5622] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.002290][ T5622] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0) [ 141.252082][ T6182] loop2: detected capacity change from 0 to 256 [ 141.301769][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.353714][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 141.584242][ T6182] FAT-fs (loop2): bogus number of FAT sectors [ 141.584266][ T6182] FAT-fs (loop2): Can't find a valid FAT filesystem [ 141.758147][ T5934] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 142.247585][ T6201] loop2: detected capacity change from 0 to 1024 [ 142.719836][ T6207] trusted_key: syz.0.116 sent an empty control message without MSG_MORE. [ 143.462738][ T6213] loop4: detected capacity change from 0 to 32768 [ 143.571845][ T6213] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.703268][ T6213] XFS (loop4): Ending clean mount [ 143.783821][ T6213] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 143.783876][ T6213] XFS (loop4): Unmount and run xfs_repair [ 143.783889][ T6213] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 143.784639][ T6213] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 143.784653][ T6213] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 143.784664][ T6213] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 143.784678][ T6213] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 143.784689][ T6213] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.784699][ T6213] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.784710][ T6213] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.784721][ T6213] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.784879][ T6213] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74 [ 143.785563][ T6213] XFS (loop4): page discard on page ffffea000106d300, inode 0x1809, pos 0. [ 144.225201][ T5621] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.354084][ T5621] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 144.567350][ T5854] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0) [ 144.902008][ T38] audit: type=1326 audit(2000000015.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.902069][ T38] audit: type=1326 audit(2000000015.690:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.918257][ T38] audit: type=1326 audit(2000000015.700:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.918318][ T38] audit: type=1326 audit(2000000015.700:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.918366][ T38] audit: type=1326 audit(2000000015.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.918421][ T38] audit: type=1326 audit(2000000015.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.918468][ T38] audit: type=1326 audit(2000000015.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.918513][ T38] audit: type=1326 audit(2000000015.700:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.932904][ T38] audit: type=1326 audit(2000000015.710:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 144.977942][ T38] audit: type=1326 audit(2000000015.770:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367340cdd9 code=0x7ffc0000 [ 145.266349][ T5754] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.426492][ T5754] usb 5-1: Using ep0 maxpacket: 32 [ 145.504185][ T5754] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 145.504214][ T5754] usb 5-1: config 0 has no interface number 0 [ 145.504264][ T5754] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.538548][ T5754] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 145.538578][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.538596][ T5754] usb 5-1: Product: syz [ 145.538611][ T5754] usb 5-1: Manufacturer: syz [ 145.538624][ T5754] usb 5-1: SerialNumber: syz [ 145.633129][ T5754] usb 5-1: config 0 descriptor?? [ 145.731691][ T5754] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 145.731731][ T5754] em28xx 5-1:0.132: Video interface 132 found: [ 146.134576][ T5754] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 146.565914][ T5347] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.730686][ T5754] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 146.730722][ T5754] em28xx 5-1:0.132: board has no eeprom [ 146.776023][ T5347] usb 1-1: Using ep0 maxpacket: 32 [ 146.782003][ T5347] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 146.782032][ T5347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.818106][ T5754] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 146.818138][ T5754] em28xx 5-1:0.132: analog set to bulk mode. [ 146.851151][ T5623] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 146.852641][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 146.906119][ T5347] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 146.906158][ T5347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.906179][ T5347] usb 1-1: Product: syz [ 146.906194][ T5347] usb 1-1: Manufacturer: syz [ 146.906209][ T5347] usb 1-1: SerialNumber: syz [ 146.960287][ T5861] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 147.102515][ T5347] usb 1-1: config 0 descriptor?? [ 147.146818][ T5754] usb 5-1: USB disconnect, device number 2 [ 147.209046][ T5861] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.209080][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.209101][ T5861] usb 4-1: Product: syz [ 147.209116][ T5861] usb 4-1: Manufacturer: syz [ 147.209131][ T5861] usb 4-1: SerialNumber: syz [ 147.285609][ T9] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 147.323447][ T5347] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 147.342284][ T9] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 147.342423][ T9] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 147.342537][ T9] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 147.456498][ T5754] em28xx 5-1:0.132: Disconnecting em28xx [ 147.497901][ T5861] usb 4-1: config 0 descriptor?? [ 147.751813][ T5861] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.629336][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 148.630319][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 148.630445][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 148.639025][ T5861] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 148.728465][ T5347] gspca_sunplus: reg_w_1 err -71 [ 148.728562][ T5347] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 148.927419][ T5861] usb 4-1: USB disconnect, device number 2 [ 148.983267][ T9] usb 5-1: Decoder not found [ 148.983283][ T9] em28xx 5-1:0.132: failed to create media graph [ 148.983320][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 149.029661][ T5347] usb 1-1: USB disconnect, device number 2 [ 149.619157][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 149.624780][ T5754] em28xx 5-1:0.132: Closing input extension [ 150.622720][ T5754] em28xx 5-1:0.132: Freeing device [ 150.780056][ T4931] Bluetooth: hci2: Unknown advertising packet type: 0x11 [ 150.780077][ T4931] Bluetooth: hci2: Unknown advertising packet type: 0x17 [ 151.115152][ T6291] loop2: detected capacity change from 0 to 512 [ 151.130380][ T6291] EXT4-fs: Ignoring removed oldalloc option [ 151.130443][ T6291] EXT4-fs: Ignoring removed i_version option [ 151.272475][ T6291] EXT4-fs (loop2): filesystem is read-only [ 151.275942][ T6291] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 151.309608][ T6291] EXT4-fs (loop2): filesystem is read-only [ 151.309627][ T6291] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.433848][ T6291] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.141: bg 0: block 64: padding at end of block bitmap is not set [ 151.433886][ T6291] loop2: lost filesystem error report for type 5 error -117 [ 151.440125][ C1] EXT4-fs (loop2): initial error at time 2000000022: ext4_validate_block_bitmap:441 [ 151.440231][ C1] EXT4-fs (loop2): last error at time 2000000022: ext4_validate_block_bitmap:441 [ 151.766506][ T6291] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 151.766534][ T6291] loop2: lost filesystem error report for type 5 error -117 [ 151.845164][ T6291] EXT4-fs (loop2): 1 orphan inode deleted [ 151.934699][ T6291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.108850][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 152.245850][ T5347] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.350418][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 152.360943][ T1466] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.379093][ T1466] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.379142][ T1466] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.379177][ T1466] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.412345][ T5347] usb 3-1: Using ep0 maxpacket: 16 [ 152.423341][ T5347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.423397][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.423427][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.423469][ T5347] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 152.423494][ T5347] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.490195][ T5347] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.490228][ T5347] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.490250][ T5347] usb 3-1: Manufacturer: syz [ 152.537376][ T5347] usb 3-1: config 0 descriptor?? [ 152.878103][ T5347] rc_core: IR keymap rc-hauppauge not found [ 152.878124][ T5347] Registered IR keymap rc-empty [ 152.878791][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 152.904233][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 152.962604][ T5347] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 152.990080][ T5347] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 153.129421][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.151769][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.166199][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.186009][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.205986][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.228378][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.245937][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.265935][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.286051][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.308885][ T5347] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.392423][ T5347] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 153.392450][ T5347] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 153.428255][ T6321] loop1: detected capacity change from 0 to 512 [ 153.582410][ T5347] usb 3-1: USB disconnect, device number 3 [ 153.790527][ T6321] EXT4-fs (loop1): 1 orphan inode deleted [ 153.982396][ T6321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.182112][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.272623][ T5623] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 154.303550][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.411998][ T5622] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0) [ 155.015927][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.187524][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 155.193192][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.193515][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.193658][ T37] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 155.193702][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.291144][ T37] usb 3-1: config 0 descriptor?? [ 155.919536][ T37] apple 0003:05AC:024B.0001: unknown global tag 0xe [ 155.919563][ T37] apple 0003:05AC:024B.0001: item 0 1 1 14 parsing failed [ 155.920661][ T37] apple 0003:05AC:024B.0001: parse failed [ 155.920776][ T37] apple 0003:05AC:024B.0001: probe with driver apple failed with error -22 [ 156.130418][ T37] usb 3-1: USB disconnect, device number 4 [ 157.276654][ T5347] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.435896][ T5347] usb 2-1: Using ep0 maxpacket: 32 [ 157.438403][ T5347] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 157.438429][ T5347] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 157.438451][ T5347] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 157.438503][ T5347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.438526][ T5347] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.438551][ T5347] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 157.438596][ T5347] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 157.438620][ T5347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.536559][ T5347] usb 2-1: config 0 descriptor?? [ 158.057196][ T6395] loop0: detected capacity change from 0 to 64 [ 158.136000][ T5347] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 158.201178][ T5347] usb 2-1: USB disconnect, device number 2 [ 158.257798][ T5347] usblp0: removed [ 158.298560][ T6398] Bluetooth: MGMT ver 1.23 [ 158.427411][ T6383] loop2: detected capacity change from 0 to 40427 [ 158.429662][ T6383] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 158.658117][ T5347] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.885890][ T5347] usb 2-1: Using ep0 maxpacket: 32 [ 158.902576][ T5347] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 158.902604][ T5347] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 158.902626][ T5347] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 158.902679][ T5347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.902700][ T5347] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.902727][ T5347] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.902768][ T5347] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 158.902791][ T5347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.011422][ T5347] usb 2-1: config 0 descriptor?? [ 159.373406][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 159.411452][ T5347] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.876000][ T5347] usb 2-1: USB disconnect, device number 3 [ 159.918222][ T5347] usblp0: removed [ 161.411892][ T6426] loop4: detected capacity change from 0 to 8 [ 162.705943][ T5621] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0) [ 163.384859][ T6446] Process accounting resumed [ 163.589544][ T6457] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 164.565152][ T6461] bond1: (slave gretap1): making interface the new active one [ 164.637868][ T6461] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 165.117089][ T6489] loop0: detected capacity change from 0 to 1024 [ 165.119611][ T6489] EXT4-fs: Ignoring removed bh option [ 165.155049][ T6489] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 165.232968][ T6489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.354933][ T6489] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.213: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 165.361757][ T6489] EXT4-fs (loop0): Remounting filesystem read-only [ 166.129569][ T6508] warning: `syz.1.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 166.209631][ T6508] loop1: detected capacity change from 0 to 512 [ 166.251420][ T6508] EXT4-fs: Ignoring removed nobh option [ 166.284345][ T6508] EXT4-fs (loop1): orphan cleanup on readonly fs [ 166.314200][ T6508] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.223: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 166.314240][ T6508] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 166.317981][ C1] EXT4-fs (loop1): initial error at time 2000000037: ext4_xattr_inode_update_ref:1037: inode 11 [ 166.320399][ C1] EXT4-fs (loop1): last error at time 2000000037: ext4_xattr_inode_update_ref:1037: inode 11 [ 166.496485][ T6508] EXT4-fs (loop1): Remounting filesystem read-only [ 166.496505][ T6508] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.223: ea_inode dec ref err=-117 [ 166.496646][ T6508] EXT4-fs (loop1): 1 orphan inode deleted [ 166.569563][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.575091][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.612859][ T6508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.760647][ T6508] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0) [ 166.765667][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 167.012958][ T6511] netlink: 7 bytes leftover after parsing attributes in process `syz.3.224'. [ 167.277377][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 167.277403][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 167.619534][ T6526] netlink: 'syz.1.230': attribute type 11 has an invalid length. [ 167.857862][ T6530] loop0: detected capacity change from 0 to 1024 [ 167.948743][ T6530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.948769][ T6530] EXT4-fs (loop0): filesystem is read-only [ 168.017129][ T6530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.349329][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.387326][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 168.665818][ T6538] loop3: detected capacity change from 0 to 32768 [ 168.673070][ T6538] btrfs: Deprecated parameter 'usebackuproot' [ 168.673095][ T6538] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 168.679734][ T6538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.233 (6538) [ 168.737565][ T6538] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.737600][ T6538] BTRFS info (device loop3): using crc32c checksum algorithm [ 169.073684][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 169.073843][ T6538] BTRFS error (device loop3): failed to load root extent [ 169.073886][ T6538] BTRFS warning (device loop3): try to load backup roots slot 1 [ 169.074863][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 169.074999][ T6538] BTRFS warning (device loop3): couldn't read tree root [ 169.075019][ T6538] BTRFS warning (device loop3): try to load backup roots slot 2 [ 169.079127][ T69] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 169.079247][ T6538] BTRFS warning (device loop3): couldn't read tree root [ 169.079268][ T6538] BTRFS warning (device loop3): try to load backup roots slot 3 [ 169.214344][ T6538] BTRFS info (device loop3): rebuilding free space tree [ 169.368798][ T6557] netlink: 'syz.1.235': attribute type 2 has an invalid length. [ 169.505071][ T6538] BTRFS info (device loop3): checking UUID tree [ 169.513094][ T6538] BTRFS info (device loop3): enabling ssd optimizations [ 169.513121][ T6538] BTRFS info (device loop3): turning on async discard [ 169.513138][ T6538] BTRFS info (device loop3): enabling free space tree [ 169.513155][ T6538] BTRFS info (device loop3): force clearing of disk cache [ 169.513173][ T6538] BTRFS info (device loop3): trying to use backup root at mount time [ 169.513192][ T6538] BTRFS info (device loop3): force zlib compression, level 3 [ 170.636223][ T5624] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.330936][ T5854] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 174.033684][ T6617] process 'syz.0.256' launched './file1' with NULL argv: empty string added [ 174.078410][ T6619] netlink: 'syz.3.257': attribute type 3 has an invalid length. [ 176.320444][ T6630] loop2: detected capacity change from 0 to 32768 [ 176.532686][ T6630] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.261 (6630) [ 176.700739][ T6630] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 176.700797][ T6630] BTRFS info (device loop2): using sha256 checksum algorithm [ 176.861257][ T6655] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.271'. [ 177.670194][ T6630] BTRFS info (device loop2): turning off barriers [ 177.670220][ T6630] BTRFS info (device loop2): enabling free space tree [ 177.853118][ T5623] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 178.163821][ T5623] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 178.549931][ T38] kauditd_printk_skb: 100 callbacks suppressed [ 178.549951][ T38] audit: type=1326 audit(2000000049.340:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.3.278" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a437cdd9 code=0x7fc00000 [ 180.016384][ T6723] loop3: detected capacity change from 0 to 128 [ 180.095665][ T6723] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.143175][ T6723] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.749139][ T6732] loop2: detected capacity change from 0 to 131072 [ 181.776015][ T6732] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 181.776044][ T6732] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 181.796785][ T6732] F2FS-fs (loop2): invalid crc value [ 182.003883][ T6732] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.062931][ T6732] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.063375][ T6732] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 182.108534][ T5624] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.360295][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 182.396741][ T5754] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 182.621869][ T5754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.623988][ T5754] usb 1-1: not running at top speed; connect to a high speed hub [ 182.625512][ T5754] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 182.625540][ T5754] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 182.625559][ T5754] usb 1-1: config 4 has no interface number 0 [ 182.689248][ T5754] usb 1-1: string descriptor 0 read error: -22 [ 182.689396][ T5754] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 182.689420][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.196533][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 183.203012][ T6751] netlink: 7 bytes leftover after parsing attributes in process `syz.3.302'. [ 183.265851][ T5754] uvcvideo 1-1:4.147: Found UVC 0.00 device (04f2:b746) [ 183.266102][ T5754] uvcvideo 1-1:4.147: No streaming interface found for terminal 32774. [ 183.359180][ T5754] usb 1-1: USB disconnect, device number 3 [ 184.814530][ T5623] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 187.874596][ T6808] loop2: detected capacity change from 0 to 2048 [ 189.131762][ T6808] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 189.374103][ T6820] netlink: 'syz.0.325': attribute type 1 has an invalid length. [ 189.374127][ T6820] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 189.374140][ T6820] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.325'. [ 191.083434][ T6841] loop4: detected capacity change from 0 to 32768 [ 191.144757][ T6841] (syz.4.331,6841,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.156301][ T6841] (syz.4.331,6841,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.360017][ T6841] JBD2: Ignoring recovery information on journal [ 191.457575][ T6847] loop1: detected capacity change from 0 to 512 [ 191.489121][ T6847] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.489135][ T6847] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.620054][ T6841] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 191.631427][ T6852] loop3: detected capacity change from 0 to 128 [ 191.766180][ T6852] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.766653][ T6852] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.844587][ T6808] loop2: p61 could not be added: -ENOMEM [ 192.438572][ T6847] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 192.539418][ T6847] EXT4-fs (loop1): 1 truncate cleaned up [ 192.648777][ T5624] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.665603][ T6847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.781732][ T6847] syz.1.333 (pid 6847) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 192.800403][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 193.082761][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.133225][ T5622] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0) [ 193.297596][ T6867] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 193.363710][ T6808] loop2: p123 could not be added: -ENOMEM [ 193.363829][ T6808] loop2: p124 could not be added: -ENOMEM [ 193.363918][ T6808] loop2: p125 could not be added: -ENOMEM [ 193.364006][ T6808] loop2: p126 could not be added: -ENOMEM [ 193.364093][ T6808] loop2: p127 could not be added: -ENOMEM [ 193.364240][ T6808] loop2: p128 could not be added: -ENOMEM [ 193.364335][ T6808] loop2: p129 could not be added: -ENOMEM [ 193.364423][ T6808] loop2: p130 could not be added: -ENOMEM [ 193.364506][ T6808] loop2: p131 could not be added: -ENOMEM [ 193.364593][ T6808] loop2: p132 could not be added: -ENOMEM [ 193.364684][ T6808] loop2: p133 could not be added: -ENOMEM [ 193.365532][ T6808] loop2: p134 could not be added: -ENOMEM [ 193.365638][ T6808] loop2: p135 could not be added: -ENOMEM [ 193.383559][ T6808] loop2: p136 could not be added: -ENOMEM [ 193.383971][ T6808] loop2: p137 could not be added: -ENOMEM [ 193.384260][ T6808] loop2: p138 could not be added: -ENOMEM [ 193.384576][ T6808] loop2: p139 could not be added: -ENOMEM [ 193.384906][ T6808] loop2: p140 could not be added: -ENOMEM [ 193.385165][ T6808] loop2: p141 could not be added: -ENOMEM [ 193.385452][ T6808] loop2: p142 could not be added: -ENOMEM [ 193.402899][ T6808] loop2: p143 could not be added: -ENOMEM [ 193.403386][ T6808] loop2: p144 could not be added: -ENOMEM [ 193.403502][ T6808] loop2: p145 could not be added: -ENOMEM [ 193.404211][ T6808] loop2: p146 could not be added: -ENOMEM [ 193.404520][ T6808] loop2: p147 could not be added: -ENOMEM [ 193.404791][ T6808] loop2: p148 could not be added: -ENOMEM [ 193.442381][ T6808] loop2: p149 could not be added: -ENOMEM [ 193.442773][ T6808] loop2: p150 could not be added: -ENOMEM [ 193.449458][ T6808] loop2: p151 could not be added: -ENOMEM [ 193.450025][ T6808] loop2: p152 could not be added: -ENOMEM [ 193.450313][ T6808] loop2: p153 could not be added: -ENOMEM [ 193.450564][ T6808] loop2: p154 could not be added: -ENOMEM [ 193.450883][ T6808] loop2: p155 could not be added: -ENOMEM [ 193.459892][ T6808] loop2: p156 could not be added: -ENOMEM [ 193.460212][ T6808] loop2: p157 could not be added: -ENOMEM [ 193.463736][ T6808] loop2: p158 could not be added: -ENOMEM [ 193.468638][ T6808] loop2: p159 could not be added: -ENOMEM [ 193.468759][ T6808] loop2: p160 could not be added: -ENOMEM [ 193.468873][ T6808] loop2: p161 could not be added: -ENOMEM [ 193.468988][ T6808] loop2: p162 could not be added: -ENOMEM [ 193.469101][ T6808] loop2: p163 could not be added: -ENOMEM [ 193.469216][ T6808] loop2: p164 could not be added: -ENOMEM [ 193.469329][ T6808] loop2: p165 could not be added: -ENOMEM [ 193.469546][ T6808] loop2: p166 could not be added: -ENOMEM [ 193.469661][ T6808] loop2: p167 could not be added: -ENOMEM [ 193.469775][ T6808] loop2: p168 could not be added: -ENOMEM [ 193.469887][ T6808] loop2: p169 could not be added: -ENOMEM [ 193.483022][ T6808] loop2: p170 could not be added: -ENOMEM [ 193.483322][ T6808] loop2: p171 could not be added: -ENOMEM [ 193.483666][ T6808] loop2: p172 could not be added: -ENOMEM [ 193.484277][ T6808] loop2: p173 could not be added: -ENOMEM [ 193.509130][ T6808] loop2: p174 could not be added: -ENOMEM [ 193.509772][ T6808] loop2: p175 could not be added: -ENOMEM [ 193.510129][ T6808] loop2: p176 could not be added: -ENOMEM [ 193.592684][ T6808] loop2: p177 could not be added: -ENOMEM [ 193.593065][ T6808] loop2: p178 could not be added: -ENOMEM [ 193.593383][ T6808] loop2: p179 could not be added: -ENOMEM [ 193.593686][ T6808] loop2: p180 could not be added: -ENOMEM [ 193.594003][ T6808] loop2: p181 could not be added: -ENOMEM [ 193.603524][ T6808] loop2: p182 could not be added: -ENOMEM [ 193.603823][ T6808] loop2: p183 could not be added: -ENOMEM [ 193.604109][ T6808] loop2: p184 could not be added: -ENOMEM [ 193.604407][ T6808] loop2: p185 could not be added: -ENOMEM [ 193.797035][ T6808] loop2: p186 could not be added: -ENOMEM [ 194.057760][ T5621] ocfs2: Unmounting device (7,4) on (node local) [ 194.198599][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.198693][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.229589][ T5621] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0) [ 194.549983][ T6883] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 194.867838][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 195.319403][ T5854] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 195.353281][ T6891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 195.353406][ T6891] netlink: 'syz.0.344': attribute type 3 has an invalid length. [ 195.353422][ T6891] netlink: 'syz.0.344': attribute type 2 has an invalid length. [ 197.477271][ T37] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 197.782828][ T37] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.782858][ T37] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.782894][ T37] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.782914][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.118002][ T37] usb 5-1: usb_control_msg returned -32 [ 198.118051][ T37] usbtmc 5-1:16.0: can't read capabilities [ 198.278777][ T6954] loop1: detected capacity change from 0 to 512 [ 198.310442][ T6954] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.372: iget: bad i_size value: 38620345925642 [ 198.310495][ T6954] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.315835][ C0] EXT4-fs (loop1): initial error at time 2000000069: ext4_orphan_get:1397: inode 15 [ 198.315873][ C0] EXT4-fs (loop1): last error at time 2000000069: ext4_orphan_get:1397: inode 15 [ 198.373300][ T6954] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.372: couldn't read orphan inode 15 (err -117) [ 198.373331][ T6954] loop1: lost filesystem error report for type 5 error -117 [ 198.440992][ T6954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.787804][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.963993][ T5622] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0) [ 199.343501][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 199.349769][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 199.361483][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 199.387040][ T6843] udevd[6843]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 199.387895][ T6247] udevd[6247]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 199.424097][ T6842] udevd[6842]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 199.462164][ T5815] udevd[5815]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 199.464386][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 199.468552][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 199.528487][ T5878] udevd[5878]: inotify_add_watch(7, /dev/loop2p10, 10) failed: No such file or directory [ 199.616510][ T6971] udevd[6971]: inotify_add_watch(7, /dev/loop2p12, 10) failed: No such file or directory [ 200.116007][ T5347] usb 5-1: USB disconnect, device number 3 [ 200.639589][ T6993] loop3: detected capacity change from 0 to 1024 [ 201.207413][ T6993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.265378][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 203.509703][ T7022] loop1: detected capacity change from 0 to 256 [ 203.569816][ T7022] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.951935][ T7029] loop2: detected capacity change from 0 to 4096 [ 204.069445][ T6972] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0) [ 204.370945][ T5854] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 205.479089][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.524257][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.553688][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.560275][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.571012][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.948095][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 205.948117][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 206.034588][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.499161][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 206.499187][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 206.570995][ T69] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.617745][ T69] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.617797][ T69] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.617835][ T69] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.985127][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.147871][ T7079] loop3: detected capacity change from 0 to 512 [ 207.855117][ T7079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.855295][ T7079] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.865937][ T4931] Bluetooth: hci0: command tx timeout [ 208.013419][ T7090] EXT4-fs (loop3): shut down requested (2) [ 208.463969][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.488587][ T7079] Quota error (device loop3): write_blk: dquota write failed [ 208.488611][ T7079] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 208.573539][ T7079] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 208.827464][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.072681][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 209.289816][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.312973][ T7104] uprobe: syz.2.424:7104 failed to unregister, leaking uprobe [ 209.947457][ T4931] Bluetooth: hci0: command tx timeout [ 211.511453][ T7145] loop0: detected capacity change from 0 to 512 [ 211.832397][ T7148] loop3: detected capacity change from 0 to 32768 [ 211.833617][ T7148] btrfs: Deprecated parameter 'usebackuproot' [ 211.833638][ T7148] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 211.843845][ T7148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.441 (7148) [ 211.890601][ T7145] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.440: iget: bad i_size value: 38620345925642 [ 211.890637][ T7145] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.891194][ T7145] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.440: couldn't read orphan inode 15 (err -117) [ 211.891225][ T7145] loop0: lost filesystem error report for type 5 error -117 [ 211.923740][ T7148] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.923863][ T7148] BTRFS info (device loop3): using crc32c checksum algorithm [ 212.019486][ T7145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.026082][ T4931] Bluetooth: hci0: command tx timeout [ 212.334262][ T2216] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 212.334414][ T7148] BTRFS error (device loop3): failed to load root extent [ 212.334452][ T7148] BTRFS warning (device loop3): try to load backup roots slot 1 [ 212.386650][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 212.386788][ T7148] BTRFS warning (device loop3): couldn't read tree root [ 212.386810][ T7148] BTRFS warning (device loop3): try to load backup roots slot 2 [ 212.389455][ T1432] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 212.389752][ T7148] BTRFS warning (device loop3): couldn't read tree root [ 212.389830][ T7148] BTRFS warning (device loop3): try to load backup roots slot 3 [ 212.473691][ T7148] BTRFS info (device loop3): rebuilding free space tree [ 212.637090][ T7148] BTRFS info (device loop3): checking UUID tree [ 212.638964][ T7148] BTRFS info (device loop3): enabling ssd optimizations [ 212.638990][ T7148] BTRFS info (device loop3): turning on async discard [ 212.639009][ T7148] BTRFS info (device loop3): enabling free space tree [ 212.639027][ T7148] BTRFS info (device loop3): force clearing of disk cache [ 212.639043][ T7148] BTRFS info (device loop3): enabling auto defrag [ 212.639060][ T7148] BTRFS info (device loop3): trying to use backup root at mount time [ 212.639078][ T7148] BTRFS info (device loop3): use zstd compression, level 3 [ 212.653733][ T7168] EXT4-fs (loop0): shut down requested (1) [ 213.590341][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.671468][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 213.688147][ T5624] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.844657][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.928719][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.934695][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.938075][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.942057][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.105898][ T5626] Bluetooth: hci0: command tx timeout [ 214.537163][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 214.551668][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.551751][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.598316][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.598345][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.680871][ T5854] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 215.069434][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 215.791411][ T57] bridge_slave_1: left allmulticast mode [ 215.791581][ T57] bridge_slave_1: left promiscuous mode [ 215.859862][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.347741][ T4931] Bluetooth: hci1: command tx timeout [ 216.879724][ T57] bridge_slave_0: left allmulticast mode [ 216.881340][ T57] bridge_slave_0: left promiscuous mode [ 216.881586][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.273457][ T7235] loop0: detected capacity change from 0 to 4096 [ 218.407490][ T7235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.425975][ T4931] Bluetooth: hci1: command tx timeout [ 218.803313][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.858313][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 219.396833][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.508333][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.641456][ T57] bond0 (unregistering): Released all slaves [ 220.516539][ T4931] Bluetooth: hci1: command tx timeout [ 221.239584][ T7270] loop0: detected capacity change from 0 to 128 [ 221.273939][ T7270] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.282591][ T7270] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.316353][ T7267] syz.2.476 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 221.614810][ T5625] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.688350][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 221.777813][ T7279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.478'. [ 221.840693][ T7280] netlink: 48 bytes leftover after parsing attributes in process `syz.0.478'. [ 221.947248][ T4931] Bluetooth: hci4: command 0x0406 tx timeout [ 221.975134][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 222.028079][ T4931] Bluetooth: hci2: command 0x0406 tx timeout [ 222.159706][ T7273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.385498][ T7279] bond1: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 222.385855][ T7280] bond1: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 222.586374][ T5626] Bluetooth: hci1: command tx timeout [ 223.268417][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.268811][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.269147][ T7049] bridge_slave_0: entered allmulticast mode [ 223.342875][ T7049] bridge_slave_0: entered promiscuous mode [ 223.575882][ T5861] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 223.736403][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 223.742059][ T5861] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 223.742090][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.796991][ T5861] usb 3-1: config 0 descriptor?? [ 223.820974][ T5861] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 224.799069][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.799394][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.799734][ T7049] bridge_slave_1: entered allmulticast mode [ 224.812577][ T7049] bridge_slave_1: entered promiscuous mode [ 224.889369][ T9] usb 3-1: USB disconnect, device number 5 [ 225.058257][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 226.580028][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 226.707836][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.832868][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.016687][ T57] hsr_slave_0: left promiscuous mode [ 227.045890][ T57] hsr_slave_1: left promiscuous mode [ 227.088779][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.088897][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.264649][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.264675][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.946251][ T57] veth1_macvtap: left promiscuous mode [ 227.946603][ T57] veth0_macvtap: left promiscuous mode [ 227.981928][ T57] veth1_vlan: left promiscuous mode [ 228.007581][ T57] veth0_vlan: left promiscuous mode [ 228.825647][ T5626] block nbd0: Receive control failed (result -32) [ 228.890167][ T5626] block nbd0: Receive control failed (result -32) [ 228.890256][ T5626] block nbd0: Receive control failed (result -32) [ 228.973045][ T7351] nbd0: detected capacity change from 0 to 128 [ 229.078443][ T5854] block nbd0: Dead connection, failed to find a fallback [ 229.078486][ T5854] block nbd0: shutting down sockets [ 229.078699][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.078820][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.122913][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.122947][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.123114][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.123140][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.123330][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.123356][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.123515][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.123540][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.123723][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.123747][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.123927][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.123953][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.124109][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.124133][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.124251][ T5854] ldm_validate_partition_table(): Disk read failed. [ 229.124326][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.124351][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.124519][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.280975][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.281400][ T5854] Dev nbd0: unable to read RDB block 0 [ 229.284765][ T5854] nbd0: unable to read partition table [ 229.363705][ T5854] ldm_validate_partition_table(): Disk read failed. [ 229.364324][ T5854] Dev nbd0: unable to read RDB block 0 [ 229.417210][ T5854] nbd0: unable to read partition table [ 229.963273][ T7374] loop2: detected capacity change from 0 to 1024 [ 230.200868][ T7374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.201031][ T7374] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.931187][ T38] audit: type=1800 audit(2000000101.680:115): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.509" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 230.931233][ T38] audit: type=1800 audit(2000000101.720:116): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.509" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 231.069503][ T57] team0 (unregistering): Port device team_slave_1 removed [ 231.161639][ T57] team0 (unregistering): Port device team_slave_0 removed [ 231.254234][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 231.292150][ T7395] loop3: detected capacity change from 0 to 512 [ 231.322848][ T7395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.558686][ T7395] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.515: iget: bad i_size value: 38620345925642 [ 231.558727][ T7395] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.561246][ T7395] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.515: couldn't read orphan inode 15 (err -117) [ 231.561278][ T7395] loop3: lost filesystem error report for type 5 error -117 [ 231.573940][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 231.573967][ C1] EXT4-fs (loop3): initial error at time 2000000102: ext4_orphan_get:1397: inode 15 [ 231.574004][ C1] EXT4-fs (loop3): last error at time 2000000102: ext4_orphan_get:1402 [ 231.671421][ T7395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.722296][ T5623] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 232.056887][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.134613][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0) [ 232.326457][ T7402] netlink: 264 bytes leftover after parsing attributes in process `syz.3.516'. [ 232.326499][ T7402] netlink: 264 bytes leftover after parsing attributes in process `syz.3.516'. [ 232.540698][ T7380] tipc: Started in network mode [ 232.540732][ T7380] tipc: Node identity 96988640a77, cluster identity 4711 [ 232.541205][ T7380] tipc: Enabled bearer , priority 0 [ 232.595542][ T7382] syzkaller0: MTU too low for tipc bearer [ 232.595563][ T7382] tipc: Disabling bearer [ 233.049371][ T7049] team0: Port device team_slave_0 added [ 233.092330][ T7049] team0: Port device team_slave_1 added [ 233.346873][ T7412] loop0: detected capacity change from 0 to 8 [ 233.511341][ T7412] SQUASHFS error: lzo decompression failed, data probably corrupt [ 233.511381][ T7412] SQUASHFS error: Failed to read block 0x91: -5 [ 233.511401][ T7412] SQUASHFS error: Unable to read metadata cache entry [8f] [ 233.511418][ T7412] SQUASHFS error: Unable to read inode 0x11f [ 233.558447][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.558466][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.558496][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.669468][ T7412] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 233.748402][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.748420][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.748449][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.259725][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 234.626471][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 234.733441][ T7434] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.916721][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 235.360712][ T7049] hsr_slave_0: entered promiscuous mode [ 235.374689][ T7049] hsr_slave_1: entered promiscuous mode [ 235.388344][ T7049] debugfs: 'hsr0' already exists in 'hsr' [ 235.394672][ T7049] Cannot create hsr debugfs directory [ 235.409868][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 235.609239][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 237.958074][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.958555][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.958911][ T7175] bridge_slave_0: entered allmulticast mode [ 237.963368][ T7175] bridge_slave_0: entered promiscuous mode [ 238.055903][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.056176][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.056639][ T7175] bridge_slave_1: entered allmulticast mode [ 238.060629][ T7175] bridge_slave_1: entered promiscuous mode [ 238.313113][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 239.214033][ T7175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.293531][ T7175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.749963][ T3179] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.750003][ T3179] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.398869][ T7175] team0: Port device team_slave_0 added [ 242.459011][ T7175] team0: Port device team_slave_1 added [ 242.837790][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.837809][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.837839][ T7175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.075203][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.075223][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.075280][ T7175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.541630][ T3179] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.541669][ T3179] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.740251][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 245.914505][ T3179] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.914544][ T3179] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.250377][ T7555] loop0: detected capacity change from 0 to 512 [ 246.290362][ T7555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 246.318181][ T7555] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.551: bad orphan inode 131083 [ 246.318215][ T7555] loop0: lost filesystem error report for type 5 error -117 [ 246.325817][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 246.325845][ C0] EXT4-fs (loop0): initial error at time 2000000117: ext4_orphan_get:1423 [ 246.325870][ C0] EXT4-fs (loop0): last error at time 2000000117: ext4_orphan_get:1423 [ 246.381650][ T7555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.451558][ T7175] hsr_slave_0: entered promiscuous mode [ 246.472839][ T7175] hsr_slave_1: entered promiscuous mode [ 246.483042][ T7175] debugfs: 'hsr0' already exists in 'hsr' [ 246.483071][ T7175] Cannot create hsr debugfs directory [ 246.651576][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.822494][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 247.237918][ T3179] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.237957][ T3179] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.302916][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 248.041077][ T7049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.272204][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.390214][ T7589] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 248.407864][ T7049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.600743][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.024588][ T7589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.275422][ T38] audit: type=1326 audit(2000000120.060:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.2.560" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad920ecdd9 code=0x0 [ 249.303275][ T7591] vlan2: entered allmulticast mode [ 249.303357][ T7591] bond1: entered allmulticast mode [ 249.303851][ T7049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.371228][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.673586][ T7049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.806241][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.110645][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 251.850171][ T3179] bridge_slave_1: left allmulticast mode [ 251.850206][ T3179] bridge_slave_1: left promiscuous mode [ 251.850510][ T3179] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.908539][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 251.984552][ T3179] bridge_slave_0: left allmulticast mode [ 251.984591][ T3179] bridge_slave_0: left promiscuous mode [ 251.984942][ T3179] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.656658][ T3179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.722138][ T3179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.760497][ T3179] bond0 (unregistering): Released all slaves [ 254.696697][ T7675] loop2: detected capacity change from 0 to 512 [ 255.648577][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.648667][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.877884][ T7683] [ 255.877897][ T7683] ====================================================== [ 255.877906][ T7683] WARNING: possible circular locking dependency detected [ 255.877921][ T7683] syzkaller #0 Not tainted [ 255.877932][ T7683] ------------------------------------------------------ [ 255.877940][ T7683] syz.3.591/7683 is trying to acquire lock: [ 255.877951][ T7683] ffff88805fa13298 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 255.878012][ T7683] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.878012][ T7683] but task is already holding lock: [ 255.878019][ T7683] ffff88803b3d0e60 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 255.878077][ T7683] [ 255.878077][ T7683] which lock already depends on the new lock. [ 255.878077][ T7683] [ 255.878085][ T7683] [ 255.878085][ T7683] the existing dependency chain (in reverse order) is: [ 255.878093][ T7683] [ 255.878093][ T7683] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 255.878118][ T7683] mutex_lock_nested+0x5a/0x1d0 [ 255.878150][ T7683] nbd_queue_rq+0x37b/0x1100 [ 255.878172][ T7683] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 255.878192][ T7683] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 255.878214][ T7683] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 255.878233][ T7683] blk_mq_run_hw_queue+0x368/0x520 [ 255.878261][ T7683] blk_mq_dispatch_list+0xd1f/0xe20 [ 255.878280][ T7683] blk_mq_flush_plug_list+0x48d/0x570 [ 255.878301][ T7683] __blk_flush_plug+0x3ed/0x4d0 [ 255.878321][ T7683] __submit_bio+0x28d/0x580 [ 255.878342][ T7683] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 255.878361][ T7683] block_read_full_folio+0x7b7/0x830 [ 255.878382][ T7683] filemap_read_folio+0x137/0x3b0 [ 255.878401][ T7683] do_read_cache_folio+0x2bf/0x560 [ 255.878421][ T7683] read_part_sector+0xb8/0x2b0 [ 255.878447][ T7683] adfspart_check_ICS+0xb1/0x960 [ 255.878468][ T7683] bdev_disk_changed+0x817/0x1770 [ 255.878487][ T7683] blkdev_get_whole+0x2e5/0x480 [ 255.878508][ T7683] bdev_open+0x31e/0xcc0 [ 255.878526][ T7683] blkdev_open+0x485/0x620 [ 255.878547][ T7683] do_dentry_open+0x83d/0x13e0 [ 255.878569][ T7683] vfs_open+0x3b/0x350 [ 255.878589][ T7683] path_openat+0x2e43/0x38a0 [ 255.878616][ T7683] do_file_open+0x23e/0x4a0 [ 255.878644][ T7683] do_sys_openat2+0x113/0x200 [ 255.878666][ T7683] __x64_sys_openat+0x138/0x170 [ 255.878690][ T7683] do_syscall_64+0x15f/0xf80 [ 255.878720][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.878741][ T7683] [ 255.878741][ T7683] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 255.878780][ T7683] mutex_lock_nested+0x5a/0x1d0 [ 255.878812][ T7683] nbd_queue_rq+0xc6/0x1100 [ 255.878836][ T7683] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 255.878857][ T7683] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 255.878880][ T7683] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 255.878903][ T7683] blk_mq_run_hw_queue+0x368/0x520 [ 255.878933][ T7683] blk_mq_dispatch_list+0xd1f/0xe20 [ 255.878954][ T7683] blk_mq_flush_plug_list+0x48d/0x570 [ 255.878975][ T7683] __blk_flush_plug+0x3ed/0x4d0 [ 255.878996][ T7683] __submit_bio+0x28d/0x580 [ 255.879017][ T7683] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 255.879047][ T7683] block_read_full_folio+0x7b7/0x830 [ 255.879069][ T7683] filemap_read_folio+0x137/0x3b0 [ 255.879090][ T7683] do_read_cache_folio+0x2bf/0x560 [ 255.879111][ T7683] read_part_sector+0xb8/0x2b0 [ 255.879130][ T7683] adfspart_check_ICS+0xb1/0x960 [ 255.879151][ T7683] bdev_disk_changed+0x817/0x1770 [ 255.879170][ T7683] blkdev_get_whole+0x2e5/0x480 [ 255.879191][ T7683] bdev_open+0x31e/0xcc0 [ 255.879210][ T7683] blkdev_open+0x485/0x620 [ 255.879233][ T7683] do_dentry_open+0x83d/0x13e0 [ 255.879255][ T7683] vfs_open+0x3b/0x350 [ 255.879277][ T7683] path_openat+0x2e43/0x38a0 [ 255.879307][ T7683] do_file_open+0x23e/0x4a0 [ 255.879336][ T7683] do_sys_openat2+0x113/0x200 [ 255.879359][ T7683] __x64_sys_openat+0x138/0x170 [ 255.879389][ T7683] do_syscall_64+0x15f/0xf80 [ 255.879412][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.879432][ T7683] [ 255.879432][ T7683] -> #4 (set->srcu){.+.+}-{0:0}: [ 255.879462][ T7683] __synchronize_srcu+0xca/0x300 [ 255.879482][ T7683] elevator_switch+0x1e8/0x7a0 [ 255.879502][ T7683] elevator_change+0x2cc/0x450 [ 255.879521][ T7683] elevator_set_default+0x36c/0x430 [ 255.879540][ T7683] blk_register_queue+0x3e9/0x4e0 [ 255.879563][ T7683] __add_disk+0x677/0xd50 [ 255.879587][ T7683] add_disk_fwnode+0xfb/0x480 [ 255.879613][ T7683] nbd_dev_add+0x72c/0xb50 [ 255.879635][ T7683] nbd_init+0x168/0x1f0 [ 255.879660][ T7683] do_one_initcall+0x250/0x870 [ 255.879688][ T7683] do_initcall_level+0x104/0x190 [ 255.879713][ T7683] do_initcalls+0x59/0xa0 [ 255.879737][ T7683] kernel_init_freeable+0x2a6/0x3e0 [ 255.879762][ T7683] kernel_init+0x1d/0x1d0 [ 255.879791][ T7683] ret_from_fork+0x514/0xb70 [ 255.879816][ T7683] ret_from_fork_asm+0x1a/0x30 [ 255.879845][ T7683] [ 255.879845][ T7683] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 255.879874][ T7683] mutex_lock_nested+0x5a/0x1d0 [ 255.879905][ T7683] elevator_change+0x1b3/0x450 [ 255.879923][ T7683] elevator_set_none+0xb5/0x140 [ 255.879942][ T7683] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 255.879968][ T7683] nbd_start_device+0x17f/0xb20 [ 255.879991][ T7683] nbd_genl_connect+0x1651/0x1c80 [ 255.880014][ T7683] genl_family_rcv_msg_doit+0x22a/0x330 [ 255.880053][ T7683] genl_rcv_msg+0x61c/0x7a0 [ 255.880077][ T7683] netlink_rcv_skb+0x232/0x4b0 [ 255.880096][ T7683] genl_rcv+0x28/0x40 [ 255.880118][ T7683] netlink_unicast+0x780/0x920 [ 255.880146][ T7683] netlink_sendmsg+0x813/0xb40 [ 255.880166][ T7683] sock_sendmsg_nosec+0x112/0x150 [ 255.880193][ T7683] ____sys_sendmsg+0x55c/0x870 [ 255.880213][ T7683] ___sys_sendmsg+0x2a5/0x360 [ 255.880234][ T7683] __x64_sys_sendmsg+0x1c3/0x2a0 [ 255.880256][ T7683] do_syscall_64+0x15f/0xf80 [ 255.880280][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.880301][ T7683] [ 255.880301][ T7683] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 255.880338][ T7683] blk_alloc_queue+0x54e/0x690 [ 255.880369][ T7683] __blk_mq_alloc_disk+0x197/0x390 [ 255.880392][ T7683] nbd_dev_add+0x499/0xb50 [ 255.880414][ T7683] nbd_init+0x168/0x1f0 [ 255.880437][ T7683] do_one_initcall+0x250/0x870 [ 255.880464][ T7683] do_initcall_level+0x104/0x190 [ 255.880487][ T7683] do_initcalls+0x59/0xa0 [ 255.880510][ T7683] kernel_init_freeable+0x2a6/0x3e0 [ 255.880534][ T7683] kernel_init+0x1d/0x1d0 [ 255.880561][ T7683] ret_from_fork+0x514/0xb70 [ 255.880583][ T7683] ret_from_fork_asm+0x1a/0x30 [ 255.880611][ T7683] [ 255.880611][ T7683] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 255.880639][ T7683] fs_reclaim_acquire+0x71/0x100 [ 255.880671][ T7683] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 255.880701][ T7683] __alloc_skb+0x1d0/0x7d0 [ 255.880718][ T7683] tcp_stream_alloc_skb+0x3f/0x5c0 [ 255.880744][ T7683] tcp_sendmsg_locked+0x134b/0x5370 [ 255.880768][ T7683] tcp_sendmsg+0x2f/0x50 [ 255.880790][ T7683] sock_sendmsg_nosec+0xf9/0x150 [ 255.880811][ T7683] sock_write_iter+0x308/0x410 [ 255.880832][ T7683] vfs_write+0x629/0xba0 [ 255.880855][ T7683] ksys_write+0x156/0x270 [ 255.880879][ T7683] do_syscall_64+0x15f/0xf80 [ 255.880898][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.880914][ T7683] [ 255.880914][ T7683] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 255.880937][ T7683] __lock_acquire+0x15a5/0x2d10 [ 255.880954][ T7683] lock_acquire+0x106/0x350 [ 255.880969][ T7683] lock_sock_nested+0x41/0x130 [ 255.880991][ T7683] inet_shutdown+0x6a/0x390 [ 255.881010][ T7683] nbd_mark_nsock_dead+0x2e9/0x560 [ 255.881046][ T7683] sock_shutdown+0x15e/0x260 [ 255.881064][ T7683] nbd_clear_sock+0x24/0x170 [ 255.881084][ T7683] nbd_ioctl+0x337/0xe40 [ 255.881104][ T7683] blkdev_ioctl+0x5e6/0x750 [ 255.881123][ T7683] __se_sys_ioctl+0xff/0x170 [ 255.881148][ T7683] do_syscall_64+0x15f/0xf80 [ 255.881167][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.881184][ T7683] [ 255.881184][ T7683] other info that might help us debug this: [ 255.881184][ T7683] [ 255.881190][ T7683] Chain exists of: [ 255.881190][ T7683] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 255.881190][ T7683] [ 255.881222][ T7683] Possible unsafe locking scenario: [ 255.881222][ T7683] [ 255.881228][ T7683] CPU0 CPU1 [ 255.881233][ T7683] ---- ---- [ 255.881238][ T7683] lock(&nsock->tx_lock); [ 255.881250][ T7683] lock(&cmd->lock); [ 255.881262][ T7683] lock(&nsock->tx_lock); [ 255.881275][ T7683] lock(sk_lock-AF_INET); [ 255.881286][ T7683] [ 255.881286][ T7683] *** DEADLOCK *** [ 255.881286][ T7683] [ 255.881292][ T7683] 2 locks held by syz.3.591/7683: [ 255.881302][ T7683] #0: ffff888026fdf248 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x133/0xe40 [ 255.881349][ T7683] #1: ffff88803b3d0e60 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 255.881393][ T7683] [ 255.881393][ T7683] stack backtrace: [ 255.881424][ T7683] CPU: 1 UID: 0 PID: 7683 Comm: syz.3.591 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 255.881447][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.881464][ T7683] Call Trace: [ 255.881471][ T7683] [ 255.881479][ T7683] dump_stack_lvl+0xe8/0x150 [ 255.881506][ T7683] print_circular_bug+0x2e1/0x300 [ 255.881532][ T7683] check_noncircular+0x12e/0x150 [ 255.881557][ T7683] __lock_acquire+0x15a5/0x2d10 [ 255.881585][ T7683] ? inet_shutdown+0x6a/0x390 [ 255.881607][ T7683] lock_acquire+0x106/0x350 [ 255.881624][ T7683] ? inet_shutdown+0x6a/0x390 [ 255.881647][ T7683] ? do_raw_spin_lock+0x12b/0x2f0 [ 255.881676][ T7683] lock_sock_nested+0x41/0x130 [ 255.881699][ T7683] ? inet_shutdown+0x6a/0x390 [ 255.881721][ T7683] inet_shutdown+0x6a/0x390 [ 255.881743][ T7683] nbd_mark_nsock_dead+0x2e9/0x560 [ 255.881766][ T7683] sock_shutdown+0x15e/0x260 [ 255.881789][ T7683] nbd_clear_sock+0x24/0x170 [ 255.881812][ T7683] nbd_ioctl+0x337/0xe40 [ 255.881831][ T7683] ? irqentry_exit+0x218/0x760 [ 255.881851][ T7683] ? trace_irq_disable+0x3b/0x140 [ 255.881879][ T7683] ? __pfx_nbd_ioctl+0x10/0x10 [ 255.881902][ T7683] ? __pfx_nbd_ioctl+0x10/0x10 [ 255.881921][ T7683] ? __pfx_nbd_ioctl+0x10/0x10 [ 255.881946][ T7683] ? blkdev_ioctl+0x5cf/0x750 [ 255.881965][ T7683] ? __pfx_nbd_ioctl+0x10/0x10 [ 255.881987][ T7683] blkdev_ioctl+0x5e6/0x750 [ 255.882008][ T7683] ? __pfx_blkdev_ioctl+0x10/0x10 [ 255.882051][ T7683] ? __fget_files+0x2a/0x420 [ 255.882074][ T7683] ? bpf_lsm_file_ioctl+0x9/0x20 [ 255.882095][ T7683] ? __pfx_blkdev_ioctl+0x10/0x10 [ 255.882114][ T7683] __se_sys_ioctl+0xff/0x170 [ 255.882142][ T7683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.882160][ T7683] do_syscall_64+0x15f/0xf80 [ 255.882180][ T7683] ? trace_irq_disable+0x3b/0x140 [ 255.882206][ T7683] ? clear_bhb_loop+0x40/0x90 [ 255.882225][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.882241][ T7683] RIP: 0033:0x7f12a437cdd9 [ 255.882264][ T7683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.882279][ T7683] RSP: 002b:00007f12a2594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.882299][ T7683] RAX: ffffffffffffffda RBX: 00007f12a45f6180 RCX: 00007f12a437cdd9 [ 255.882312][ T7683] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000004 [ 255.882322][ T7683] RBP: 00007f12a4412d69 R08: 0000000000000000 R09: 0000000000000000 [ 255.882333][ T7683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.882344][ T7683] R13: 00007f12a45f6218 R14: 00007f12a45f6180 R15: 00007ffda2faa748 [ 255.882364][ T7683] [ 255.885573][ T5623] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0) [ 255.895986][ T7683] block nbd3: shutting down sockets [ 256.187253][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 257.612084][ T7690] gretap0: entered promiscuous mode [ 257.616466][ T7690] macvtap1: entered promiscuous mode [ 257.618809][ T7690] macvtap1: entered allmulticast mode [ 257.618856][ T7690] gretap0: entered allmulticast mode [ 257.732066][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 257.938846][ T3179] hsr_slave_0: left promiscuous mode [ 257.982180][ T3179] hsr_slave_1: left promiscuous mode [ 258.087419][ T3179] veth1_macvtap: left promiscuous mode [ 258.087483][ T3179] veth0_macvtap: left promiscuous mode [ 258.087640][ T3179] veth1_vlan: left promiscuous mode [ 258.087746][ T3179] veth0_vlan: left promiscuous mode [ 258.946847][ T3179] team0 (unregistering): Port device team_slave_1 removed [ 258.986883][ T3179] team0 (unregistering): Port device team_slave_0 removed [ 260.516985][ T5623] syz-executor (5623) used greatest stack depth: 17496 bytes left [ 260.594976][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 261.074640][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 261.397333][ T3179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.437606][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 261.677427][ T3179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.928259][ T3179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.137998][ T3179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.498010][ T3179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.498049][ T3179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.757850][ T3179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.757879][ T3179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.782218][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 263.017574][ T3179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.017614][ T3179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.117614][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 263.277250][ T3179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.277278][ T3179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.727680][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 264.027989][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 264.363683][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 264.961442][ T5276] 8021q: adding VLAN 0 to HW filter on device eth14 [ 265.716194][ T3179] bridge_slave_1: left allmulticast mode [ 265.716216][ T3179] bridge_slave_1: left promiscuous mode [ 265.716394][ T3179] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.796385][ T3179] bridge_slave_0: left allmulticast mode [ 265.796409][ T3179] bridge_slave_0: left promiscuous mode [ 265.796582][ T3179] bridge0: port 1(bridge_slave_0) entered disabled state