last executing test programs: 1m56.709432254s ago: executing program 4 (id=3476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x70000000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xff600000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m56.075003429s ago: executing program 4 (id=3477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 1m55.450871319s ago: executing program 4 (id=3482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000060000000000000000000850000001700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m54.759941575s ago: executing program 4 (id=3487): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 1m54.153632397s ago: executing program 4 (id=3491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x6c}}, 0x20050800) 1m53.649371658s ago: executing program 4 (id=3493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 1m38.34066753s ago: executing program 32 (id=3493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 1m23.550134587s ago: executing program 2 (id=3660): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd1, 0x0, 0x0) 1m22.921717807s ago: executing program 2 (id=3663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000000000000c0015"], 0x48}}, 0x0) 1m22.190974895s ago: executing program 2 (id=3665): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd(0x3) 1m21.610917423s ago: executing program 2 (id=3667): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x0, 0xffffffff, 0x0, 0x0) 1m20.820956179s ago: executing program 2 (id=3670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setflags(r0, 0x2, 0x0) 1m20.190345289s ago: executing program 2 (id=3674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1m4.958046386s ago: executing program 33 (id=3674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1m0.921353328s ago: executing program 5 (id=3797): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x9, 0xfd, 0xfffffff8}) 1m0.304880535s ago: executing program 5 (id=3799): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) 59.673737124s ago: executing program 5 (id=3800): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x3, @mcast1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}}], 0x1, 0x841) 59.053101452s ago: executing program 5 (id=3803): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt(r0, 0x1, 0x9, &(0x7f0000000040)=""/199, &(0x7f00000001c0)=0xc7) 58.498583483s ago: executing program 5 (id=3805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x0, 0x0, 0x408, 0x408, 0x408, 0x4, 0x0, {[{{@uncond, 0xc0, 0x408}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @multicast1, 0xf}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x23}, @local, 0xffffffff, 0xffffffff, 0xe, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, {[0x0, 0xff, 0xff, 0xff]}}, 0x370, 0x0, 0x6, 0x30d, 0x10, 0x6, 'veth1_to_team\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x0, 0x170}, 0xc0, 0xe8}, @unspec=@SECMARK={0x0, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:kmsg_device_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd3) 57.969455699s ago: executing program 5 (id=3807): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='adfs\x00', 0x0, 0x0) 55.712042133s ago: executing program 6 (id=3817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x9, 0x70bd25, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) 55.144853149s ago: executing program 6 (id=3820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3c8, 0x1f8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1c}, @loopback, 0xffffffff, 0x0, 0xc, 0x2, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x800, 0x5, 0x0, 0x2, 0x9, 0x8, 'bridge_slave_1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x0, 0x120}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 54.411595032s ago: executing program 6 (id=3824): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 53.858390199s ago: executing program 6 (id=3828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) 53.503649178s ago: executing program 6 (id=3829): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000400)={0x0, [[0x0, 0x1000101, 0x0, 0xfffffffc, 0x81, 0x0, 0x40], [0x0, 0x80000000, 0x2000000, 0x10, 0x1000, 0x0, 0x0, 0xa3], [0xf6, 0x3b6f, 0x0, 0x5, 0x0, 0x20000]], '\x00', [{0x0, 0x200000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {}, {0x2}, {0x800}, {0xfffffff7, 0x200000}, {}, {0x0, 0xfffffffd}, {}, {0x8, 0x10020002}, {0x2}], '\x00', 0x20, 0x0, 0x0, 0x0, 0x0, 0x2}) 52.961016548s ago: executing program 6 (id=3831): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x2010406, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0], 0x1, 0x58d9, &(0x7f0000005940)="$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") llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x3d) 42.720582257s ago: executing program 34 (id=3807): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='adfs\x00', 0x0, 0x0) 37.531169593s ago: executing program 35 (id=3831): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x2010406, &(0x7f0000000280)=ANY=[@ANYBLOB="6673636b2c696e6c696e655f646174612c6e6f636f772c64656772616465642c7374725f686173683d736970686173682c6e6f7265636f766572792c646973636172642c7265636f6e7374727563745f616c6c6f632c657261737572655f636f64652c61636c2c6e6f5f73706c6974627261696e5f636865636b2c686173682c7569643d60f5bcf1f0886aa09c3c1a36a4acd170f79d99800ec58a8fa0669aed5b2e6dc7d26249c977b4972a48e21c83e56e660eb824b55fb6fe7021537f7294c63b4e8f49e5edc90ea200f9a56692234f36ac83fa45e23f1879c3e8af5a70098903af1e8cefe57f9d52019e7577a65dc627f6104d7ad6cc518ec42fc8de572feb8b7f1533100ed74d1df6f8ebd5b80edd012c208fdd9a4f46f963de4fac6ad1058a32399f16166143d8a62681a95e24d023f5d8a4ae20991058d845914e0297e75e76d64b9c9a314a616be6e7622dfc515bd8f8ebc56f10a1a26b3f532511ed165d6cf776505b278bca7afc874422c53a98", @ANYRES32, @ANYRES32=0x0], 0x1, 0x58d9, &(0x7f0000005940)="$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") llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x3d) 28.538793314s ago: executing program 1 (id=3927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 27.895414672s ago: executing program 1 (id=3931): r0 = io_uring_setup(0x3c9b, &(0x7f0000000200)={0x0, 0x8ad5, 0x40, 0x0, 0x18e}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000380)=[@ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_op={0x1, 0x11}, @ioring_restriction_sqe_flags_required], 0x3) 27.239601523s ago: executing program 1 (id=3935): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x32314147}}) 26.79995761s ago: executing program 1 (id=3938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_newroute={0x1c, 0x18, 0x105, 0x0, 0x0, {0xa, 0x913366bff9406c8, 0x20, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 26.14417842s ago: executing program 1 (id=3942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000300}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 25.221677084s ago: executing program 1 (id=3947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x24091}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 13.428029167s ago: executing program 3 (id=4000): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0000b594000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 12.721110575s ago: executing program 3 (id=4004): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x48524742, 0x9, 0x0, [{0x12000000}, {0x0, 0x2}], 0x0, 0x0, 0x16, 0x1}}) 12.141120752s ago: executing program 3 (id=4007): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 11.06427758s ago: executing program 3 (id=4011): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, 0xe8) 10.474582574s ago: executing program 3 (id=4015): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x541b, 0x0) 9.840531394s ago: executing program 36 (id=3947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x24091}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 9.771918044s ago: executing program 3 (id=4020): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_init1(0x80000) 5.488041307s ago: executing program 0 (id=4041): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000540)=@multiplanar_userptr={0x1000, 0x6, 0x4, 0xe000, 0xf33, {}, {0x1, 0x0, 0x8, 0x7, 0x7, 0x5, "e292a335"}, 0x1, 0x2, {0x0}, 0xb0}) 4.951342577s ago: executing program 8 (id=4044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x45, 0x10c, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.901401743s ago: executing program 0 (id=4045): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='exec ::A'], 0x8) 4.371809496s ago: executing program 8 (id=4048): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) 4.345246123s ago: executing program 0 (id=4049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 3.74758591s ago: executing program 0 (id=4051): setreuid(0x0, 0xee00) iopl(0x3) 3.740978429s ago: executing program 9 (id=4052): r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, 0x0, 0x0) 3.734169496s ago: executing program 8 (id=4053): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delsa={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfc, {@in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x4d3, 0x2, 0x33}}, 0x28}}, 0x0) 3.189562396s ago: executing program 0 (id=4055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 3.156670065s ago: executing program 8 (id=4056): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) 3.100818824s ago: executing program 9 (id=4057): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000111401000000000000000000080001000000000008004f000400000008004a000000000008004b"], 0x30}}, 0x0) 2.953052972s ago: executing program 7 (id=4058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x32, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}}, 0x0) 2.561165283s ago: executing program 9 (id=4059): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) 2.479511479s ago: executing program 8 (id=4060): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) 2.318277583s ago: executing program 7 (id=4061): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001dc0)) 2.288950073s ago: executing program 0 (id=4062): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e61e, [{{0x9, 0x2, 0x7c}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[]) 1.958438007s ago: executing program 9 (id=4063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 1.775971948s ago: executing program 7 (id=4064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x0, 0xf0, 0x1c0, 0x290, 0x1c0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private, 0x21}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private1, 0x0, 0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xffff00, 0xff, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xff, 0xffffffff], 'pimreg\x00', 'geneve0\x00', {}, {0xc35a0874372725d5}, 0x67, 0xff, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, 0x24, 0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a6) 1.771504187s ago: executing program 8 (id=4065): r0 = fanotify_init(0x0, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)="d8829481de905b8f", 0x8}], 0x1) 1.311948633s ago: executing program 9 (id=4066): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000280)={0x1, 0x1, 0x8, 0x0, 0x4}, 0xc) 1.221144237s ago: executing program 7 (id=4067): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1000000000000225, 0x5406, 0x0, 0x0) 798.851302ms ago: executing program 9 (id=4068): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc, 0xb7, 0x68, 0x40, 0x45e, 0x283, 0x990b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x5c, 0x29, 0x1d, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 669.21414ms ago: executing program 7 (id=4069): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f00000000c0)=0xfff) 0s ago: executing program 7 (id=4070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000750200000900000001"], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000005c0), 0x20000000, 0x2}, 0x20) kernel console output (not intermixed with test programs): for ifindex 0 [ 271.180311][T12132] JBD2: Ignoring recovery information on journal [ 271.245404][T12132] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 271.375442][T12175] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2666'. [ 271.540432][ T5836] bcachefs (loop3): shutdown complete [ 271.718155][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 272.065559][T12191] loop1: detected capacity change from 0 to 4096 [ 272.241082][T12173] loop5: detected capacity change from 0 to 32768 [ 272.277500][T12191] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 272.392505][T12203] loop2: detected capacity change from 0 to 512 [ 272.439040][T12173] (syz.5.2667,12173,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.496952][T12173] (syz.5.2667,12173,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.527270][T12207] loop4: detected capacity change from 0 to 64 [ 272.724222][T12173] JBD2: Ignoring recovery information on journal [ 272.809419][T12203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.819664][T12173] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 272.840484][T12203] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.012522][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.126595][ T5821] ocfs2: Unmounting device (7,5) on (node local) [ 273.132387][T12227] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.726049][T12248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2693'. [ 273.960996][T12259] netlink: 'syz.0.2706': attribute type 4 has an invalid length. [ 274.741278][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 274.750353][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 274.941903][T12267] loop1: detected capacity change from 0 to 32768 [ 275.119032][T12291] program syz.2.2720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.709760][T12316] sit0: entered promiscuous mode [ 275.728696][T12316] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 275.741505][T12319] program syz.3.2735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.761273][T12316] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2729'. [ 276.098220][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 276.107380][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 276.116396][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 276.238161][T12338] netlink: 'syz.3.2744': attribute type 10 has an invalid length. [ 276.246261][T12338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2744'. [ 276.255947][T12338] bridge0: port 4(hsr0) entered blocking state [ 276.262350][T12338] bridge0: port 4(hsr0) entered disabled state [ 276.268725][T12338] hsr0: entered allmulticast mode [ 276.273991][T12338] hsr_slave_0: entered allmulticast mode [ 276.279698][T12338] hsr_slave_1: entered allmulticast mode [ 276.286851][T12338] hsr0: entered promiscuous mode [ 276.292483][T12338] bridge0: port 4(hsr0) entered blocking state [ 276.298875][T12338] bridge0: port 4(hsr0) entered forwarding state [ 276.696346][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2754'. [ 276.716719][T12355] loop5: detected capacity change from 0 to 2048 [ 277.061818][T12355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.412522][ T5821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.589288][T12389] netlink: 'syz.0.2767': attribute type 7 has an invalid length. [ 277.614609][T12395] loop2: detected capacity change from 0 to 256 [ 277.640904][T12389] netlink: 'syz.0.2767': attribute type 8 has an invalid length. [ 277.655255][T12395] exfat: Deprecated parameter 'utf8' [ 277.732612][T12395] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 277.904303][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 278.024126][T12409] overlayfs: conflicting options: nfs_export=on,index=off [ 278.733024][T12424] loop3: detected capacity change from 0 to 32768 [ 278.775073][T12431] loop0: detected capacity change from 0 to 256 [ 278.857665][T12424] ea_get: invalid extended attribute [ 278.863988][T12424] ffff88805476e898: 04 00 00 00 .... [ 279.113161][T12436] loop4: detected capacity change from 0 to 2048 [ 279.341821][T12403] loop5: detected capacity change from 0 to 32768 [ 279.376099][T12403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2773 (12403) [ 279.450336][T12403] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.481290][T12403] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 279.530605][T12403] BTRFS info (device loop5): using free-space-tree [ 279.903827][ T5821] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.387012][T12434] loop1: detected capacity change from 0 to 32771 [ 280.420409][T12490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2808'. [ 280.453523][T12491] IPv6: sit2: Disabled Multicast RS [ 280.494153][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 280.523681][T12493] loop3: detected capacity change from 0 to 1024 [ 280.901083][ T11] hfsplus: b-tree write err: -5, ino 4 [ 281.431359][T12522] tmpfs: Bad value for 'mpol' [ 281.879701][T12537] snd_dummy snd_dummy.0: control 0:0:1073741821:syz1:0 is already present [ 282.176620][T12543] netlink: 'syz.1.2833': attribute type 3 has an invalid length. [ 282.176652][T12543] netlink: 'syz.1.2833': attribute type 28 has an invalid length. [ 282.176672][T12543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2833'. [ 282.211984][T12539] loop3: detected capacity change from 0 to 32768 [ 282.217392][T12545] loop2: detected capacity change from 0 to 1024 [ 282.232648][T12539] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2831 (12539) [ 282.261525][T12539] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 282.261624][T12539] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 282.261661][T12539] BTRFS info (device loop3): disk space caching is enabled [ 282.261683][T12539] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 282.306792][T12545] MTD: Couldn't look up './file0': -15 [ 282.453173][ T1080] hfsplus: b-tree write err: -5, ino 4 [ 282.557715][T12539] BTRFS info (device loop3): rebuilding free space tree [ 282.577690][T12572] loop1: detected capacity change from 0 to 2048 [ 282.578470][T12572] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.610967][T12570] team_slave_0: entered allmulticast mode [ 282.747721][T12539] BTRFS info (device loop3): disabling free space tree [ 282.747788][T12539] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.747859][T12539] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 282.764622][T12572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.936809][ T5836] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 282.998267][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.789598][T12614] netlink: 'syz.2.2855': attribute type 4 has an invalid length. [ 283.797579][T12614] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2855'. [ 283.808644][T12614] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 283.882437][T12616] bridge1: entered promiscuous mode [ 283.888188][T12611] loop5: detected capacity change from 0 to 32768 [ 284.008929][T12621] Cannot find set identified by id 0 to match [ 284.054381][T12618] loop3: detected capacity change from 0 to 64 [ 284.064339][T12611] jfs_create: dtInsert returned -EIO [ 284.131125][T12611] ERROR: (device loop5): jfs_create: [ 284.131125][T12611] [ 284.394283][T12634] tipc: Can't bind to reserved service type 2 [ 284.656270][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2871'. [ 284.854643][T12648] loop3: detected capacity change from 0 to 1024 [ 285.079812][T12648] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 285.130955][T12648] System zones: 0-1, 3-36 [ 285.136576][T12648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.225859][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 285.290642][T12648] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 285.362511][T12648] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 285.506106][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.886962][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 286.068858][T12704] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2897'. [ 286.422345][T12716] xt_NFQUEUE: number of queues (5) out of range (got 65538) [ 287.010929][ T5887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 287.262105][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 287.272596][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 287.275124][T12756] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2924'. [ 287.281742][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.281775][ T5887] usb 3-1: Product: syz [ 287.303081][ T5887] usb 3-1: Manufacturer: syz [ 287.307689][ T5887] usb 3-1: SerialNumber: syz [ 287.324827][ T5887] usb 3-1: config 0 descriptor?? [ 287.590280][ T5887] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 287.640821][ T5887] eb 9a 47 80 9b f8 7a f0 [ 287.645424][ T5887] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 287.774368][ T29] audit: type=1326 audit(2000000115.519:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.0.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1420985d29 code=0x7ffc0000 [ 287.926001][T12745] loop5: detected capacity change from 0 to 32768 [ 287.934112][ T29] audit: type=1326 audit(2000000115.529:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.0.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1420985d29 code=0x7ffc0000 [ 287.934165][ T29] audit: type=1326 audit(2000000115.529:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.0.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f1420985d29 code=0x7ffc0000 [ 287.934206][ T29] audit: type=1326 audit(2000000115.529:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.0.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1420985d29 code=0x7ffc0000 [ 288.026940][ T5886] usb 3-1: USB disconnect, device number 7 [ 288.069099][ T29] audit: type=1326 audit(2000000115.529:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.0.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1420985d29 code=0x7ffc0000 [ 288.276861][T12785] netlink: 'syz.3.2934': attribute type 7 has an invalid length. [ 288.286196][T12785] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2934'. [ 288.341808][T12745] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 288.514274][T12801] loop4: detected capacity change from 0 to 4096 [ 288.540982][T12745] XFS (loop5): Ending clean mount [ 288.548393][T12745] XFS (loop5): Quotacheck needed: Please wait. [ 288.566566][T12801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.699746][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.741576][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 288.747207][T12745] XFS (loop5): Quotacheck: Done. [ 288.916834][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 288.930992][ T5888] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 288.931035][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.936583][ T5888] usb 4-1: config 0 descriptor?? [ 288.939431][ T5821] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 288.942810][ T5888] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 289.159424][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 289.169029][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.181399][ T5888] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 289.181464][ T5888] usb 4-1: media controller created [ 289.246991][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.301796][T12820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2951'. [ 289.581571][T12831] capability: warning: `syz.1.2955' uses 32-bit capabilities (legacy support in use) [ 289.592285][ T5888] DVB: Unable to find symbol lgdt330x_attach() [ 289.598488][ T5888] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 289.628326][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 289.646685][ T5888] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 289.703386][ T5888] usb 4-1: USB disconnect, device number 10 [ 289.864993][ T5888] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 289.934476][T12842] netlink: 'syz.4.2959': attribute type 1 has an invalid length. [ 290.074073][T12837] loop2: detected capacity change from 0 to 4096 [ 290.114766][T12837] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 290.330611][T12837] ntfs3(loop2): failed to convert "c46c" to iso8859-14 [ 290.714214][T12865] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2970'. [ 290.741025][T12865] 0·: renamed from hsr0 (while UP) [ 290.782789][T12865] 0·: entered promiscuous mode [ 290.788174][T12865] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 291.031074][T12878] raw_sendmsg: syz.1.2978 forgot to set AF_INET. Fix it! [ 291.281812][T12890] tmpfs: Bad value for 'mpol' [ 291.401190][ T5887] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 291.502259][T12851] loop4: detected capacity change from 0 to 32768 [ 291.523777][T12898] loop5: detected capacity change from 0 to 128 [ 291.531834][T12851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2965 (12851) [ 291.578003][T12898] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 291.613081][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.625817][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.651189][T12851] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.670537][T12851] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 291.672459][T12898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.731274][T12851] BTRFS info (device loop4): using free-space-tree [ 291.850553][ T5887] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 291.860026][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.868613][ T5887] usb 3-1: SerialNumber: syz [ 291.913806][ T5887] usb 3-1: 0:2 : does not exist [ 291.934911][T12912] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 292.261511][ T5957] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 292.374863][ T9] usb 3-1: USB disconnect, device number 8 [ 292.498364][T12939] bridge2: entered allmulticast mode [ 292.528207][ T5822] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 292.616704][T12944] loop1: detected capacity change from 0 to 512 [ 292.630975][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 292.647468][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.660404][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.712243][T12944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.727067][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 292.750573][T12944] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.843649][T12951] bridge1: entered promiscuous mode [ 292.849102][T12951] bridge1: entered allmulticast mode [ 292.932641][ T5957] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 292.942239][ T5957] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.950525][ T5957] usb 4-1: Manufacturer: syz [ 292.968075][ T5957] usb 4-1: config 0 descriptor?? [ 293.090300][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.462760][ T5886] usb 4-1: USB disconnect, device number 11 [ 293.613661][T12976] loop4: detected capacity change from 0 to 1024 [ 293.852914][T12965] loop2: detected capacity change from 0 to 32768 [ 293.871442][T12976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.024086][T12965] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 294.040410][T12991] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3021'. [ 294.222229][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.356541][T12999] loop0: detected capacity change from 0 to 2048 [ 294.519424][ T5835] (syz-executor,5835,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 294.559156][T13011] loop3: detected capacity change from 0 to 256 [ 294.568583][T13009] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.591025][ T5835] ocfs2: Unmounting device (7,2) on (node local) [ 294.651322][T12999] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 294.720653][T13011] FAT-fs (loop3): Directory bread(block 64) failed [ 294.739853][T12999] Remounting filesystem read-only [ 294.749824][T13011] FAT-fs (loop3): Directory bread(block 65) failed [ 294.799503][T13011] FAT-fs (loop3): Directory bread(block 66) failed [ 294.806813][T13011] FAT-fs (loop3): Directory bread(block 67) failed [ 294.814207][T13011] FAT-fs (loop3): Directory bread(block 68) failed [ 294.847616][T13011] FAT-fs (loop3): Directory bread(block 69) failed [ 294.898680][T13011] FAT-fs (loop3): Directory bread(block 70) failed [ 294.923031][T13011] FAT-fs (loop3): Directory bread(block 71) failed [ 294.942426][T13011] FAT-fs (loop3): Directory bread(block 72) failed [ 294.968227][T13011] FAT-fs (loop3): Directory bread(block 73) failed [ 295.031966][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 295.108914][T13024] loop4: detected capacity change from 0 to 16 [ 295.152523][T13024] erofs (device loop4): mounted with root inode @ nid 36. [ 295.191344][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 295.231824][ T9] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 295.240132][ T9] usb 2-1: config 8 has no interface number 0 [ 295.271720][ T9] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 295.310945][ T9] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 295.366218][ T9] usb 2-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 295.417814][ T9] usb 2-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.468465][ T9] usb 2-1: config 8 interface 206 has no altsetting 0 [ 295.498728][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 295.522548][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.529056][T13032] loop4: detected capacity change from 0 to 1024 [ 295.530612][ T9] usb 2-1: Product: syz [ 295.570976][ T9] usb 2-1: Manufacturer: syz [ 295.586099][ T9] usb 2-1: SerialNumber: syz [ 295.622108][T13032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.759413][T13032] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #11: comm syz.4.3040: directory missing '..' [ 295.777210][T13043] loop2: detected capacity change from 0 to 256 [ 295.808691][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 295.817242][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 295.824871][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 295.832444][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 295.849127][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 295.858156][ T9] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 295.866620][T13043] exfat: Deprecated parameter 'namecase' [ 295.884786][ T9] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 295.904329][T13043] exfat: Deprecated parameter 'namecase' [ 295.949601][T13043] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 295.982559][ T9] usb 2-1: USB disconnect, device number 7 [ 295.985100][T13049] loop0: detected capacity change from 0 to 1764 [ 296.044637][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 296.099434][ T9] garmin_gps 2-1:8.206: device disconnected [ 296.203876][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.595930][T13065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3056'. [ 296.665213][T13073] loop5: detected capacity change from 0 to 128 [ 296.710136][T13073] FAT-fs (loop5): Directory bread(block 3236) failed [ 296.723732][T13073] FAT-fs (loop5): Directory bread(block 3237) failed [ 296.730576][T13073] FAT-fs (loop5): Directory bread(block 3238) failed [ 296.773165][T13073] FAT-fs (loop5): Directory bread(block 3239) failed [ 296.786985][T13073] FAT-fs (loop5): Directory bread(block 3240) failed [ 296.834361][T13073] FAT-fs (loop5): Directory bread(block 3241) failed [ 296.950889][T13073] FAT-fs (loop5): Directory bread(block 3242) failed [ 296.957660][T13073] FAT-fs (loop5): Directory bread(block 3243) failed [ 297.009856][T13073] FAT-fs (loop5): Directory bread(block 3236) failed [ 297.049756][T13073] FAT-fs (loop5): Directory bread(block 3237) failed [ 297.079567][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'. [ 297.092588][T13089] netlink: 'syz.1.3067': attribute type 32 has an invalid length. [ 297.101128][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 297.326746][T13094] Unsupported ieee802154 address type: 0 [ 297.595664][T13101] loop0: detected capacity change from 0 to 128 [ 297.652524][T13101] EXT4-fs (loop0): Test dummy encryption mode enabled [ 297.831049][T13109] loop5: detected capacity change from 0 to 64 [ 297.880991][T13101] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.901666][T13101] ext4 filesystem being mounted at /564/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 298.026173][T13117] openvswitch: netlink: IP tunnel dst address not specified [ 298.092987][T13077] loop4: detected capacity change from 0 to 32768 [ 298.144006][T13109] Trying to free block not in datazone [ 298.164843][T13109] Trying to free block not in datazone [ 298.170379][T13109] Trying to free block not in datazone [ 298.218893][T13109] Trying to free block not in datazone [ 298.225283][T13109] minix_free_block (loop5:6): bit already cleared [ 298.231983][T13109] Trying to free block not in datazone [ 298.240188][T13109] Trying to free block not in datazone [ 298.250191][T13077] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 298.450463][T13101] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 298.597656][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3088'. [ 298.689400][ T5826] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.837548][ T5822] ocfs2: Unmounting device (7,4) on (node local) [ 299.204739][T13167] loop3: detected capacity change from 0 to 1024 [ 299.301136][T13170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.333399][T13167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.474804][T13179] sctp: [Deprecated]: syz.1.3107 (pid 13179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.474804][T13179] Use struct sctp_sack_info instead [ 299.695186][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.776748][T13188] loop2: detected capacity change from 0 to 256 [ 299.807504][T13188] exfat: Deprecated parameter 'utf8' [ 299.818672][T13188] exfat: Deprecated parameter 'utf8' [ 300.004222][T13200] xt_connbytes: Forcing CT accounting to be enabled [ 300.011251][T13200] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 300.100926][T13202] netlink: 'syz.1.3116': attribute type 21 has an invalid length. [ 300.138681][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 300.179268][T13207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.232797][T13209] loop4: detected capacity change from 0 to 64 [ 300.279718][T13188] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 300.433209][T13218] syz.3.3126: attempt to access beyond end of device [ 300.433209][T13218] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 300.446410][T13218] FAT-fs (loop7): unable to read boot sector [ 300.814978][T13233] loop2: detected capacity change from 0 to 64 [ 301.021717][T13231] loop5: detected capacity change from 0 to 4096 [ 301.613061][ T29] audit: type=1326 audit(2000000129.369:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13259 comm="syz.5.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 301.632389][T13261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3146'. [ 301.701088][ T29] audit: type=1326 audit(2000000129.369:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13259 comm="syz.5.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 301.780849][ T29] audit: type=1326 audit(2000000129.379:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13259 comm="syz.5.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 301.819758][T13267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3148'. [ 301.881173][ T29] audit: type=1326 audit(2000000129.379:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13259 comm="syz.5.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 301.972021][ T29] audit: type=1326 audit(2000000129.379:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13259 comm="syz.5.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 302.101188][T13275] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3153'. [ 302.207097][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3154'. [ 302.282644][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3155'. [ 302.606259][T13292] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3162'. [ 302.789046][T13296] loop4: detected capacity change from 0 to 64 [ 302.806448][T13297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.813767][T13297] IPv6: NLM_F_CREATE should be set when creating new route [ 302.871875][T13296] hfs: keylen 94 too large [ 302.876500][T13296] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 303.162319][T13307] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 303.278362][T13313] loop1: detected capacity change from 0 to 512 [ 303.279369][T13311] netlink: 'syz.4.3170': attribute type 5 has an invalid length. [ 303.355452][T13311] ip6erspan0: entered promiscuous mode [ 303.465725][T13313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.521170][T13313] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.604415][T13329] loop3: detected capacity change from 0 to 8 [ 303.611452][T13329] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 303.801190][T13329] cramfs: Error -3 while decompressing! [ 303.807393][T13329] cramfs: ffffffff9a4de368(26)->ffff888053abf000(4096) [ 303.850561][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.926875][T13329] cramfs: Error -3 while decompressing! [ 303.932657][T13329] cramfs: ffffffff9a4de382(26)->ffff8880527b2000(4096) [ 303.939834][T13329] cramfs: Error -3 while decompressing! [ 303.946000][T13329] cramfs: ffffffff9a4de368(26)->ffff888053abf000(4096) [ 303.986230][T13343] loop0: detected capacity change from 0 to 256 [ 304.033300][T13343] exfat: Deprecated parameter 'namecase' [ 304.123554][T13343] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 304.198408][T13346] loop1: detected capacity change from 0 to 2048 [ 304.206343][T13343] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 304.236810][T13346] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.318380][T13346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.365925][T13360] loop4: detected capacity change from 0 to 1024 [ 304.409266][T13346] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3184: bg 0: block 234: padding at end of block bitmap is not set [ 304.410523][T13363] loop2: detected capacity change from 0 to 1024 [ 304.433944][T13346] EXT4-fs (loop1): Remounting filesystem read-only [ 304.441568][T13346] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1605: inode #18: comm syz.1.3184: cleanup dec ref error -28 [ 304.531913][T13360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.569328][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.586785][T13366] loop0: detected capacity change from 0 to 256 [ 304.805767][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.042583][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 305.241777][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.270217][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.323228][ T9] usb 2-1: config 0 descriptor?? [ 305.342554][ T9] cp210x 2-1:0.0: cp210x converter detected [ 305.626526][T13403] loop0: detected capacity change from 0 to 512 [ 305.671284][ T5888] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 305.860950][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 305.894510][ T5888] usb 6-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 305.934577][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 305.939427][T13401] loop4: detected capacity change from 0 to 32768 [ 305.950727][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 305.958509][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 305.967572][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 305.978753][ T9] usb 2-1: USB disconnect, device number 8 [ 305.996064][ T5888] usb 6-1: Product: syz [ 306.012767][T13403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.041222][T13401] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 306.043052][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.058952][ T9] cp210x 2-1:0.0: device disconnected [ 306.060683][ T5888] usb 6-1: SerialNumber: syz [ 306.067464][T13403] ext4 filesystem being mounted at /587/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.158987][ T5888] usb 6-1: config 0 descriptor?? [ 306.177827][ T5888] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 306.186829][ T5888] usb 6-1: Detected FT2232C/D [ 306.251481][ T5822] ocfs2: Unmounting device (7,4) on (node local) [ 306.298252][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.413548][T13422] loop1: detected capacity change from 0 to 128 [ 306.667086][T13430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3224'. [ 306.807247][T13432] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3225'. [ 306.844865][ T5888] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 306.853851][ T5888] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 306.864609][T13432] tc_dump_action: action bad kind [ 306.906772][ T5888] usb 6-1: USB disconnect, device number 12 [ 306.984686][ T5888] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 307.018835][T13443] binder: 13441:13443 ioctl 400c620e 0 returned -14 [ 307.053203][ T5888] ftdi_sio 6-1:0.0: device disconnected [ 307.290059][T13444] loop3: detected capacity change from 0 to 4096 [ 307.511167][T13456] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3236'. [ 307.526051][T13456] vlan2: entered allmulticast mode [ 308.709150][T13501] loop0: detected capacity change from 0 to 4096 [ 308.741455][T13501] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 308.874563][T13482] loop1: detected capacity change from 0 to 32768 [ 309.006205][T13482] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 309.015009][T13482] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.043140][T13501] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 309.400309][T13538] ip6t_srh: unknown srh match flags 4000 [ 309.615809][T13482] XFS (loop1): null uuid in log - IRIX style log [ 309.745322][T13482] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x41. [ 309.788792][T13482] XFS (loop1): failed to locate log tail [ 309.796816][T13482] XFS (loop1): log mount/recovery failed: error -74 [ 309.808305][T13554] loop2: detected capacity change from 0 to 64 [ 309.890893][T13482] XFS (loop1): log mount failed [ 309.959796][T13558] netlink: 'syz.4.3282': attribute type 8 has an invalid length. [ 310.285597][T13566] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3286'. [ 310.331264][T13566] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3286'. [ 310.955338][T13589] loop2: detected capacity change from 0 to 256 [ 311.111847][T13544] loop3: detected capacity change from 0 to 32768 [ 311.127837][T13589] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 311.175678][T13544] (syz.3.3275,13544,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 311.250416][T13544] (syz.3.3275,13544,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 311.418871][T13588] loop0: detected capacity change from 0 to 8192 [ 311.437229][T13544] (syz.3.3275,13544,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 311.464955][T13544] JBD2: Ignoring recovery information on journal [ 311.671751][T13610] tmpfs: Bad value for 'mpol' [ 311.683668][T13602] loop4: detected capacity change from 0 to 4096 [ 311.822274][T13544] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 312.074686][T13544] (syz.3.3275,13544,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 312.097613][T13544] (syz.3.3275,13544,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 312.120896][T13544] (syz.3.3275,13544,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 312.125350][T13626] loop5: detected capacity change from 0 to 512 [ 312.132158][T13544] (syz.3.3275,13544,1):ocfs2_quota_read:201 ERROR: status = -5 [ 312.145744][T13544] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 312.155263][T13626] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 312.191349][T13626] EXT4-fs (loop5): 1 truncate cleaned up [ 312.197946][T13626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.201134][T13544] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 312.221203][T13544] (syz.3.3275,13544,1):ocfs2_acquire_dquot:885 ERROR: status = -5 [ 312.231522][T13544] (syz.3.3275,13544,1):ocfs2_mknod:314 ERROR: status = -5 [ 312.238707][T13544] (syz.3.3275,13544,1):ocfs2_mknod:502 ERROR: status = -5 [ 312.246524][T13544] (syz.3.3275,13544,1):ocfs2_mkdir:659 ERROR: status = -5 [ 312.319095][ T29] audit: type=1326 audit(2000000140.019:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.2.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606cd85d29 code=0x7ffc0000 [ 312.362899][T13626] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3316: corrupted in-inode xattr: overlapping e_value [ 312.418865][ T5836] ocfs2: Unmounting device (7,3) on (node local) [ 312.526974][ T29] audit: type=1326 audit(2000000140.029:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.2.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f606cd85d29 code=0x7ffc0000 [ 312.584883][T13626] EXT4-fs (loop5): Remounting filesystem read-only [ 312.626845][T13626] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1772: inode #15: comm syz.5.3316: unable to update i_inline_off [ 312.673515][ T29] audit: type=1326 audit(2000000140.029:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.2.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606cd85d29 code=0x7ffc0000 [ 312.810969][ T29] audit: type=1326 audit(2000000140.029:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.2.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606cd85d29 code=0x7ffc0000 [ 313.113617][ T5821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.759538][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3334'. [ 313.970082][T13655] loop3: detected capacity change from 0 to 32768 [ 314.168356][T13690] loop2: detected capacity change from 0 to 128 [ 314.375718][T13697] tmpfs: Bad value for 'mpol' [ 314.758322][T13713] loop1: detected capacity change from 0 to 512 [ 314.911853][T13713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.959657][T13713] ext4 filesystem being mounted at /554/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.011380][T13713] EXT4-fs error (device loop1): ext4_xattr_block_list:768: inode #15: comm syz.1.3355: corrupted xattr block 33: e_value out of bounds [ 315.190017][T13727] loop5: detected capacity change from 0 to 8 [ 315.293073][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.710948][T13744] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.175697][T13747] loop4: detected capacity change from 0 to 32768 [ 316.200227][T13747] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3371 (13747) [ 316.335967][T13747] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 316.369221][T13747] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 316.430556][T13733] loop2: detected capacity change from 0 to 32768 [ 316.433173][T13747] BTRFS info (device loop4): disk space caching is enabled [ 316.442540][T13733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3363 (13733) [ 316.460728][T13733] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 316.481117][T13733] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 316.489651][T13733] BTRFS info (device loop2): using free-space-tree [ 316.492064][T13747] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 316.580105][T13748] loop5: detected capacity change from 0 to 32768 [ 316.610889][ T5899] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 316.620042][T13764] netlink: 'syz.3.3376': attribute type 4 has an invalid length. [ 316.686689][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.710845][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.722706][T13748] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 316.722706][T13748] [ 316.791984][T13748] xtLookup: xtSearch returned -5 [ 316.815408][ T5899] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 316.818872][T13748] add_index: get/read_metapage failed! [ 316.830134][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.850322][ T5899] usb 2-1: Product: syz [ 316.860451][ T5899] usb 2-1: Manufacturer: syz [ 316.870591][ T5899] usb 2-1: SerialNumber: syz [ 316.893661][ T5899] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 316.989871][ T835] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 317.047999][T13747] BTRFS info (device loop4): rebuilding free space tree [ 317.110566][T13747] BTRFS info (device loop4): disabling free space tree [ 317.117772][T13747] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 317.136985][T13747] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 317.273787][ T5835] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 317.777484][ T5822] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 318.955010][T13827] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 320.182836][T13844] loop2: detected capacity change from 0 to 256 [ 320.567528][T13851] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 320.574783][T13851] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 321.487131][T13863] veth3: entered promiscuous mode [ 322.046815][T13871] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 322.149320][T13871] overlayfs: overlapping lowerdir path [ 322.169535][T13875] kAFS: No cell specified [ 322.648690][T13884] loop2: detected capacity change from 0 to 16 [ 322.766106][T13884] erofs (device loop2): mounted with root inode @ nid 36. [ 323.492426][T13901] netlink: 'syz.2.3426': attribute type 24 has an invalid length. [ 323.611168][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 324.471638][ C0] sched: DL replenish lagged too much [ 324.544934][T13922] loop5: detected capacity change from 0 to 256 [ 324.648681][T13922] exfat: Deprecated parameter 'utf8' [ 324.710258][T13922] exfat: Deprecated parameter 'utf8' [ 324.761201][T13922] exfat: Deprecated parameter 'utf8' [ 324.847129][T13922] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 325.075804][T13927] loop4: detected capacity change from 0 to 256 [ 327.257659][T13958] No such timeout policy "syz0" [ 327.321707][T13959] @ÿ: renamed from veth0_vlan (while UP) [ 327.434364][T13920] loop0: detected capacity change from 0 to 32768 [ 327.786039][T13963] loop5: detected capacity change from 0 to 256 [ 328.016088][T13963] FAT-fs (loop5): Directory bread(block 64) failed [ 328.103018][T13963] FAT-fs (loop5): Directory bread(block 65) failed [ 328.109732][T13963] FAT-fs (loop5): Directory bread(block 66) failed [ 328.264033][T13963] FAT-fs (loop5): Directory bread(block 67) failed [ 328.270729][T13963] FAT-fs (loop5): Directory bread(block 68) failed [ 328.377833][T13963] FAT-fs (loop5): Directory bread(block 69) failed [ 328.490984][T13963] FAT-fs (loop5): Directory bread(block 70) failed [ 328.497697][T13963] FAT-fs (loop5): Directory bread(block 71) failed [ 328.630378][T13963] FAT-fs (loop5): Directory bread(block 72) failed [ 328.700910][T13963] FAT-fs (loop5): Directory bread(block 73) failed [ 328.888916][T13979] netlink: 'syz.4.3466': attribute type 1 has an invalid length. [ 328.936749][ T5957] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 328.961060][T13979] netlink: 'syz.4.3466': attribute type 3 has an invalid length. [ 329.034083][T13979] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3466'. [ 329.174486][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 329.235810][ T5957] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 329.298045][ T5957] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 329.395464][ T5957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.521022][ T5957] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.600933][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.695404][ T5957] usb 4-1: Product: syz [ 329.699633][ T5957] usb 4-1: Manufacturer: syz [ 329.770820][ T5957] usb 4-1: SerialNumber: syz [ 329.833117][T13990] loop0: detected capacity change from 0 to 256 [ 329.894554][T13992] xt_hashlimit: max too large, truncated to 1048576 [ 329.905671][T13988] bond1: entered promiscuous mode [ 329.963506][T13992] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 329.982293][T13988] bond1: entered allmulticast mode [ 330.054249][T13988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.089158][T13990] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 330.247623][ T5957] usb 4-1: 0:2 : does not exist [ 330.454259][ T5957] usb 4-1: USB disconnect, device number 12 [ 330.866551][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.299821][T14032] netlink: 'syz.0.3490': attribute type 3 has an invalid length. [ 333.388007][T14032] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3490'. [ 333.887129][T14038] batadv2: entered promiscuous mode [ 333.974321][T14041] loop2: detected capacity change from 0 to 512 [ 333.985828][T14038] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 334.095309][T14041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.211335][T14041] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.561379][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.748468][T14018] loop3: detected capacity change from 0 to 32768 [ 336.309890][T14075] loop2: detected capacity change from 0 to 64 [ 337.189016][T14089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3517'. [ 337.861241][T14098] syz.0.3520 uses old SIOCAX25GETINFO [ 337.887137][T14102] netlink: 'syz.3.3521': attribute type 6 has an invalid length. [ 338.118127][T14100] loop1: detected capacity change from 0 to 4096 [ 338.281602][T14100] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 338.963622][T14100] ntfs3(loop1): ino=0, attr_set_size [ 339.041216][T14100] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 339.155851][T14119] loop5: detected capacity change from 0 to 2048 [ 339.296657][T14119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.460862][ T29] audit: type=1800 audit(2000000167.209:88): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3531" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 339.481314][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.627431][T14141] ipt_ECN: cannot use operation on non-tcp rule [ 341.759588][T14158] netlink: 'syz.1.3550': attribute type 1 has an invalid length. [ 341.860932][T14158] netlink: 'syz.1.3550': attribute type 1 has an invalid length. [ 342.191659][T14163] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 342.500366][T14135] loop3: detected capacity change from 0 to 32768 [ 342.609176][T14135] btrfs: Deprecated parameter 'usebackuproot' [ 342.667200][T14135] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 342.757777][T14135] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3539 (14135) [ 342.933336][T14135] BTRFS info (device loop3 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 343.046391][T14135] BTRFS info (device loop3 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 343.147211][T14135] BTRFS info (device loop3 state S): using free-space-tree [ 343.201177][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 343.241482][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 343.321256][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 343.402539][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 343.511281][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 343.616333][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 343.692315][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 343.783455][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 343.861310][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 343.924701][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'. [ 343.951966][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 343.952246][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 343.970960][T14194] netlink: 'syz.5.3563': attribute type 3 has an invalid length. [ 344.041404][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 344.041704][T14135] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 344.164056][T14135] BTRFS error (device loop3 state S): open_ctree failed [ 344.613509][T14204] loop0: detected capacity change from 0 to 64 [ 344.843849][T14206] Invalid option length (1044984) for dns_resolver key [ 344.859690][ T29] audit: type=1800 audit(2000000172.609:89): pid=14204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3566" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 344.946333][T14166] loop1: detected capacity change from 0 to 32768 [ 345.051195][T14166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3554 (14166) [ 345.176140][T14166] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 345.291000][T14166] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 345.299644][T14166] BTRFS info (device loop1): using free-space-tree [ 345.487877][T14166] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 345.488235][T14166] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 345.717355][T14166] BTRFS error (device loop1): open_ctree failed [ 346.472860][T14231] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3572'. [ 347.480462][T14203] loop5: detected capacity change from 0 to 32768 [ 348.296067][T14258] loop2: detected capacity change from 0 to 512 [ 348.495041][T14262] loop3: detected capacity change from 0 to 256 [ 348.540068][T14258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 348.618444][T14258] System zones: 1-12 [ 348.661044][T14258] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #11: comm syz.2.3583: iget: bogus i_mode (0) [ 348.792072][T14258] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3583: couldn't read orphan inode 11 (err -117) [ 348.953525][T14258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.533531][T14276] loop0: detected capacity change from 0 to 1764 [ 349.552220][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.931278][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3590'. [ 350.254508][T14247] loop1: detected capacity change from 0 to 32768 [ 351.359729][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.376277][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.385828][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.395716][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.414505][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 351.422711][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.555559][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.563131][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.570495][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.585509][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.607531][ T5832] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 351.615182][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.869819][T14302] loop0: detected capacity change from 0 to 2048 [ 352.102521][T14302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.504845][T14299] chnl_net:caif_netlink_parms(): no params data found [ 353.713588][T14328] loop0: detected capacity change from 0 to 512 [ 353.732750][ T54] Bluetooth: hci6: command tx timeout [ 353.743384][ T46] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 353.808954][T14328] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 353.979103][T14328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 354.018495][ T46] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 354.049203][T14328] System zones: 1-12 [ 354.070897][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.081362][T14328] EXT4-fs (loop0): orphan cleanup on readonly fs [ 354.089611][T14328] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3610: bg 0: block 361: padding at end of block bitmap is not set [ 354.158278][ T46] usb 6-1: Product: syz [ 354.190879][ T46] usb 6-1: Manufacturer: syz [ 354.195534][ T46] usb 6-1: SerialNumber: syz [ 354.278185][ T46] usb 6-1: config 0 descriptor?? [ 354.321117][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.358958][T14328] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 354.402583][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.459894][T14328] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.3610: attempt to clear invalid blocks 33619980 len 1 [ 354.478722][T14299] bridge_slave_0: entered allmulticast mode [ 354.569146][T14299] bridge_slave_0: entered promiscuous mode [ 354.593079][T14328] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3610: invalid indirect mapped block 1811939328 (level 0) [ 354.642143][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.711990][T14328] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3610: invalid indirect mapped block 2 (level 2) [ 354.725496][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.791198][T14299] bridge_slave_1: entered allmulticast mode [ 354.809699][ T46] usb 6-1: f81604_write: reg: 105 data: 42 failed: -EPROTO [ 354.833221][T14328] EXT4-fs (loop0): 1 truncate cleaned up [ 354.839886][T14328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 354.879209][T14299] bridge_slave_1: entered promiscuous mode [ 354.890919][ T46] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 354.898892][ T46] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 355.033490][ T46] usb 6-1: USB disconnect, device number 13 [ 355.182408][T14328] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 355.256174][T14299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.374422][T14299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.485093][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 355.818580][ T54] Bluetooth: hci6: command tx timeout [ 355.837123][T14346] loop3: detected capacity change from 0 to 512 [ 355.973973][T14325] loop1: detected capacity change from 0 to 32768 [ 356.014742][T14299] team0: Port device team_slave_0 added [ 356.062485][T14325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3608 (14325) [ 356.122194][T14299] team0: Port device team_slave_1 added [ 356.292997][T14325] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 356.394395][T14325] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 356.477520][T14325] BTRFS info (device loop1): using free-space-tree [ 356.543325][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 356.543647][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 356.556321][T14356] loop5: detected capacity change from 0 to 64 [ 356.658844][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 356.659143][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 356.677687][T14299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.767812][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 356.768085][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 356.833761][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.902527][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 356.902802][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 357.004091][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 357.135346][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 357.230984][T14299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.256718][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 357.257013][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 357.374765][T14325] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 357.457489][T14299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.516793][T14325] BTRFS error (device loop1): open_ctree failed [ 357.681983][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.892017][ T54] Bluetooth: hci6: command tx timeout [ 357.944632][T14299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.731920][T14299] hsr_slave_0: entered promiscuous mode [ 358.793889][T14299] hsr_slave_1: entered promiscuous mode [ 358.911194][T14299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.972932][T14299] Cannot create hsr debugfs directory [ 359.171011][T14397] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 359.867230][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 359.961322][ T54] Bluetooth: hci6: command tx timeout [ 360.467593][T14299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.695372][T14299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.853831][T14299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 361.050930][T14299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.260953][T14393] loop5: detected capacity change from 0 to 32768 [ 361.539562][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3648'. [ 361.837084][T14299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.023704][T14299] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.135071][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.142254][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.271789][T14434] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3653'. [ 362.324060][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.331251][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.623241][T14437] loop1: detected capacity change from 0 to 64 [ 362.647166][T14299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.793310][T14299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.702717][T14421] loop3: detected capacity change from 0 to 32768 [ 363.806014][T14421] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3645 (14421) [ 363.955789][T14449] loop0: detected capacity change from 0 to 4096 [ 364.424180][T14299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.656989][T14463] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 365.948751][T14444] loop5: detected capacity change from 0 to 32768 [ 366.115243][T14444] (syz.5.3651,14444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.273669][T14444] (syz.5.3651,14444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.532818][T14444] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 366.552882][T14299] veth0_vlan: entered promiscuous mode [ 366.577959][T14444] (syz.5.3651,14444,1):ocfs2_initialize_super:2281 ERROR: status = -12 [ 366.661668][T14444] (syz.5.3651,14444,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 366.734426][T14482] netlink: 'syz.0.3669': attribute type 29 has an invalid length. [ 366.843000][T14299] veth1_vlan: entered promiscuous mode [ 367.242930][T14299] veth0_macvtap: entered promiscuous mode [ 367.362610][T14299] veth1_macvtap: entered promiscuous mode [ 367.476725][T14462] loop3: detected capacity change from 0 to 32768 [ 367.566307][T14462] (syz.3.3662,14462,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear " or missing value [ 367.639777][T14462] (syz.3.3662,14462,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 367.667977][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.766305][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.851457][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.924243][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.949259][T14493] loop0: detected capacity change from 0 to 64 [ 368.006636][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.136380][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.209522][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.296411][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.357616][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.423501][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.490973][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.564763][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.627034][T14299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.709349][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.827656][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.909090][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.998517][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.061218][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.130843][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.228220][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.314298][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.392851][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.450812][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.504949][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.583087][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.671696][T14299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.767611][T14299] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.881124][T14299] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.949760][T14299] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.023022][T14299] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.563895][ T29] audit: type=1326 audit(2000000198.319:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 370.708226][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.783394][ T29] audit: type=1326 audit(2000000198.319:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 370.810816][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.006114][ T29] audit: type=1326 audit(2000000198.399:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 371.161172][ T8320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.226934][ T8320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.242796][ T29] audit: type=1326 audit(2000000198.399:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9653b85d29 code=0x7ffc0000 [ 372.434979][T14542] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 373.153345][ T29] audit: type=1400 audit(2000000200.899:94): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14549 comm="syz.6.3700" [ 373.486129][T14558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3704'. [ 373.724672][T14561] gre1: entered promiscuous mode [ 373.729680][T14561] gre1: entered allmulticast mode [ 374.640991][T14578] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 374.835566][T14581] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3715'. [ 375.289930][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3718'. [ 375.347823][T14586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3718'. [ 375.467348][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3720'. [ 376.572324][T14572] loop5: detected capacity change from 0 to 32768 [ 376.673233][T14572] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3711 (14572) [ 376.880933][T14572] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 376.964266][T14572] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 377.049825][T14572] BTRFS info (device loop5): disk space caching is enabled [ 377.119567][T14572] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 377.187157][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3732'. [ 377.267299][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 377.267626][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 377.389968][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 377.481401][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 377.611215][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 377.681200][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 377.801053][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 377.882195][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 377.984396][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 378.077857][T14633] loop6: detected capacity change from 0 to 256 [ 378.095088][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 378.095357][T14572] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 378.138614][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.157622][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.208239][T14572] BTRFS error (device loop5): open_ctree failed [ 378.419820][T14633] FAT-fs (loop6): Directory bread(block 64) failed [ 378.473348][T14633] FAT-fs (loop6): Directory bread(block 65) failed [ 378.520984][T14633] FAT-fs (loop6): Directory bread(block 66) failed [ 378.564258][T14633] FAT-fs (loop6): Directory bread(block 67) failed [ 378.630978][T14633] FAT-fs (loop6): Directory bread(block 68) failed [ 378.668190][T14633] FAT-fs (loop6): Directory bread(block 69) failed [ 378.699299][T14644] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3740'. [ 378.719573][T14633] FAT-fs (loop6): Directory bread(block 70) failed [ 378.747700][T14633] FAT-fs (loop6): Directory bread(block 71) failed [ 378.801569][T14633] FAT-fs (loop6): Directory bread(block 72) failed [ 378.842341][T14633] FAT-fs (loop6): Directory bread(block 73) failed [ 381.003075][T14681] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3759'. [ 381.627329][T14693] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 382.045739][T14699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3767'. [ 382.556928][T14707] loop5: detected capacity change from 0 to 8 [ 382.608118][T14708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3772'. [ 382.696279][T14708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3772'. [ 382.729622][T14707] SQUASHFS error: Unable to read inode 0xa7 [ 383.531568][T14724] xt_recent: Unsupported userspace flags (00000042) [ 384.604042][T14738] loop0: detected capacity change from 0 to 128 [ 384.626635][T14737] ax25_connect(): syz.5.3787 uses autobind, please contact jreuter@yaina.de [ 384.763698][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3788'. [ 384.792218][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 384.802453][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 384.832818][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 384.852497][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 384.860577][ T5832] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 384.869335][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.939555][T14740] netlink: 448 bytes leftover after parsing attributes in process `syz.6.3788'. [ 385.678929][T14751] loop0: detected capacity change from 0 to 256 [ 385.905258][ T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 385.935836][T14757] loop5: detected capacity change from 0 to 64 [ 386.164393][T14716] loop3: detected capacity change from 0 to 32768 [ 386.171137][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 386.244005][ T46] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 386.307411][T14741] chnl_net:caif_netlink_parms(): no params data found [ 386.336560][ T46] usb 7-1: config 0 has no interface number 0 [ 386.384420][ T46] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 386.497981][ T46] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 386.618715][ T46] usb 7-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 386.683409][ T46] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 386.699514][T14762] lo speed is unknown, defaulting to 1000 [ 386.734144][T14762] lo speed is unknown, defaulting to 1000 [ 386.767702][ T46] usb 7-1: Product: syz [ 386.805229][ T46] usb 7-1: SerialNumber: syz [ 386.872902][ T46] usb 7-1: config 0 descriptor?? [ 386.921607][T14752] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 386.931206][ T5832] Bluetooth: hci7: command tx timeout [ 387.229282][ T46] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.307362][T14762] lo speed is unknown, defaulting to 1000 [ 387.315804][ T46] usb 7-1: invalid MIDI in EP 0 [ 387.320962][T14741] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.328075][T14741] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.439032][T14741] bridge_slave_0: entered allmulticast mode [ 387.465020][T14762] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 387.531092][T14741] bridge_slave_0: entered promiscuous mode [ 387.594813][T14741] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.644531][ T46] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 387.671155][T14741] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.757079][T14741] bridge_slave_1: entered allmulticast mode [ 387.830862][ T46] usb 7-1: USB disconnect, device number 2 [ 387.838960][T14741] bridge_slave_1: entered promiscuous mode [ 387.854776][T14762] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 388.241307][ T6057] udevd[6057]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.407602][T14741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.502391][T14762] lo speed is unknown, defaulting to 1000 [ 388.571382][T14777] netlink: 'syz.3.3802': attribute type 3 has an invalid length. [ 388.629819][T14741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.873216][T14762] lo speed is unknown, defaulting to 1000 [ 389.011510][ T5832] Bluetooth: hci7: command tx timeout [ 389.071594][T14741] team0: Port device team_slave_0 added [ 389.106212][T14761] loop0: detected capacity change from 0 to 32768 [ 389.124480][T14762] lo speed is unknown, defaulting to 1000 [ 389.205729][T14741] team0: Port device team_slave_1 added [ 389.255111][T14762] lo speed is unknown, defaulting to 1000 [ 389.342618][T14761] read_mapping_page failed! [ 389.637597][T14787] syz.5.3807: attempt to access beyond end of device [ 389.637597][T14787] nbd5: rw=0, sector=6, nr_sectors = 2 limit=0 [ 389.687848][T14762] lo speed is unknown, defaulting to 1000 [ 389.695959][T14741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.750804][T14741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.780974][T14787] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 389.791297][T14789] loop3: detected capacity change from 0 to 128 [ 389.798654][T14789] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 389.906892][T14789] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.938553][T14741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.024408][T14789] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00ff0003) [ 390.125524][T14789] FAT-fs (loop3): Filesystem has been set read-only [ 390.166403][T14762] lo speed is unknown, defaulting to 1000 [ 390.182255][T14741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.242089][T14741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.490962][T14741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.604291][T14762] lo speed is unknown, defaulting to 1000 [ 390.643137][T14793] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 390.710470][T14795] loop3: detected capacity change from 0 to 256 [ 390.788286][T14795] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.945241][T14762] lo speed is unknown, defaulting to 1000 [ 391.057461][T14741] hsr_slave_0: entered promiscuous mode [ 391.076261][T14797] loop0: detected capacity change from 0 to 64 [ 391.090878][ T5832] Bluetooth: hci7: command tx timeout [ 391.218815][T14741] hsr_slave_1: entered promiscuous mode [ 391.417788][T14741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.490885][T14741] Cannot create hsr debugfs directory [ 392.231827][T14811] loop1: detected capacity change from 0 to 16 [ 392.327834][T14811] erofs (device loop1): mounted with root inode @ nid 36. [ 392.473146][T14815] x_tables: unsorted underflow at hook 2 [ 393.172247][ T5832] Bluetooth: hci7: command tx timeout [ 393.181293][T14741] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 393.267724][T14741] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 393.626146][T14741] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 393.751589][T14741] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.335313][T14741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.489908][T14741] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.644198][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.651403][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.776309][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 394.820945][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 394.885220][T14837] tc_dump_action: action bad kind [ 394.961259][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.968426][ T8320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.266109][T14741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.587859][T14827] loop3: detected capacity change from 0 to 32768 [ 395.684394][T14827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3827 (14827) [ 395.899881][T14827] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 396.037145][T14827] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 396.121636][T14827] BTRFS info (device loop3): using free-space-tree [ 396.667291][T14741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.680639][T14827] BTRFS error (device loop3): open_ctree failed [ 396.944029][T14835] loop6: detected capacity change from 0 to 32768 [ 396.985317][T14833] loop0: detected capacity change from 0 to 40427 [ 397.347429][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3836'. [ 397.601866][T14835] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 397.847631][T14835] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 397.931508][T14835] bcachefs (loop6): Version upgrade required: [ 397.931508][T14835] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 397.931508][T14835] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 397.931508][T14835] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 398.607307][T14835] bcachefs (loop6): dropping and reconstructing all alloc info [ 398.702515][T14835] bcachefs (loop6): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 398.762592][T14835] bcachefs (loop6): bch2_fs_recovery(): error EINTR [ 398.834273][T14835] bcachefs (loop6): bch2_fs_start(): error starting filesystem EINTR [ 398.883826][T14835] bcachefs (loop6): shutting down [ 399.052537][T14835] bcachefs (loop6): shutdown complete [ 399.089567][T14741] veth0_vlan: entered promiscuous mode [ 399.155022][T14741] veth1_vlan: entered promiscuous mode [ 399.376448][T14741] veth0_macvtap: entered promiscuous mode [ 399.473788][T14741] veth1_macvtap: entered promiscuous mode [ 399.548003][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.642210][T14897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3845'. [ 399.661263][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.702141][ T29] audit: type=1326 audit(2000000227.459:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.1.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3530385d29 code=0x7ffc0000 [ 399.756420][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.826629][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.860971][ T29] audit: type=1326 audit(2000000227.499:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.1.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3530385d29 code=0x7ffc0000 [ 399.910874][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.980838][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.990706][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.070884][ T29] audit: type=1326 audit(2000000227.569:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.1.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3530385d29 code=0x7ffc0000 [ 400.140820][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.150687][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.209487][T14901] loop0: detected capacity change from 0 to 256 [ 400.250878][ T29] audit: type=1326 audit(2000000227.569:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.1.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3530385d29 code=0x7ffc0000 [ 400.291521][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.371540][T14901] FAT-fs (loop0): Directory bread(block 64) failed [ 400.378170][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.413940][ T29] audit: type=1326 audit(2000000227.569:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.1.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3530385d29 code=0x7ffc0000 [ 400.443019][T14901] FAT-fs (loop0): Directory bread(block 65) failed [ 400.472009][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.493666][T14901] FAT-fs (loop0): Directory bread(block 66) failed [ 400.561697][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.582017][T14901] FAT-fs (loop0): Directory bread(block 67) failed [ 400.588828][T14901] FAT-fs (loop0): Directory bread(block 68) failed [ 400.630817][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.663142][T14901] FAT-fs (loop0): Directory bread(block 69) failed [ 400.669822][T14901] FAT-fs (loop0): Directory bread(block 70) failed [ 400.712236][T14741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.743290][T14901] FAT-fs (loop0): Directory bread(block 71) failed [ 400.754503][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.784333][T14901] FAT-fs (loop0): Directory bread(block 72) failed [ 400.831686][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.848804][T14885] loop3: detected capacity change from 0 to 32768 [ 400.856983][T14901] FAT-fs (loop0): Directory bread(block 73) failed [ 400.891773][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.958333][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.072757][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.091777][T14885] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 401.132100][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.188310][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.258817][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.312576][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.372244][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.397576][T14885] XFS (loop3): Ending clean mount [ 401.421488][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.477127][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.526657][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.573253][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.584311][T14917] loop1: detected capacity change from 0 to 256 [ 401.651230][T14741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.715165][T14741] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.741867][ T5836] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 401.794056][T14917] FAT-fs (loop1): Directory bread(block 64) failed [ 401.825776][T14741] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.842914][T14917] FAT-fs (loop1): Directory bread(block 65) failed [ 401.849532][T14917] FAT-fs (loop1): Directory bread(block 66) failed [ 401.888277][T14741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.937125][T14917] FAT-fs (loop1): Directory bread(block 67) failed [ 401.949582][T14741] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.997146][T14917] FAT-fs (loop1): Directory bread(block 68) failed [ 402.085518][T14917] FAT-fs (loop1): Directory bread(block 69) failed [ 402.181188][T14917] FAT-fs (loop1): Directory bread(block 70) failed [ 402.187789][T14917] FAT-fs (loop1): Directory bread(block 71) failed [ 402.291186][T14917] FAT-fs (loop1): Directory bread(block 72) failed [ 402.297788][T14917] FAT-fs (loop1): Directory bread(block 73) failed [ 402.539219][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.611197][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.760097][ T8320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.813483][ T8320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.554241][T14931] loop0: detected capacity change from 0 to 1024 [ 403.797038][T14928] loop3: detected capacity change from 0 to 4096 [ 403.808458][T14933] loop1: detected capacity change from 0 to 1024 [ 403.873152][T14928] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 403.887882][ T8320] hfsplus: b-tree write err: -5, ino 4 [ 404.180439][T14928] ntfs3(loop3): failed to convert "c46c" to default [ 404.237601][T14937] set match dimension is over the limit! [ 404.346284][ T12] hfsplus: b-tree write err: -5, ino 4 [ 405.430389][T14950] loop0: detected capacity change from 0 to 2048 [ 405.573251][T14950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.860183][T14953] loop1: detected capacity change from 0 to 4096 [ 406.430071][T14962] veth3: entered promiscuous mode [ 406.621479][T14953] ntfs3(loop1): ino=5, "/" directory corrupted [ 406.665304][T14953] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 406.737440][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 406.757038][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 406.766349][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 406.774648][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 406.782309][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 406.789794][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 406.823970][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3875'. [ 407.000356][T14965] lo speed is unknown, defaulting to 1000 [ 408.110097][T14965] chnl_net:caif_netlink_parms(): no params data found [ 408.456910][ T29] audit: type=1107 audit(2000000236.209:100): pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 408.854241][ T54] Bluetooth: hci8: command tx timeout [ 409.085197][T15002] loop1: detected capacity change from 0 to 256 [ 409.142601][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.149834][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.251735][ T29] audit: type=1326 audit(2000000236.989:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bb385d29 code=0x7ffc0000 [ 409.301148][T14965] bridge_slave_0: entered allmulticast mode [ 409.374792][T14965] bridge_slave_0: entered promiscuous mode [ 409.403080][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.460932][ T29] audit: type=1326 audit(2000000237.039:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f76bb385d29 code=0x7ffc0000 [ 409.491291][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.591094][T14965] bridge_slave_1: entered allmulticast mode [ 409.641134][T14965] bridge_slave_1: entered promiscuous mode [ 409.701042][ T29] audit: type=1326 audit(2000000237.039:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bb385d29 code=0x7ffc0000 [ 409.957513][ T29] audit: type=1326 audit(2000000237.039:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.7.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bb385d29 code=0x7ffc0000 [ 410.134031][T14965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.191199][ T5887] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 410.241640][T14965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.511629][ T5887] usb 8-1: Using ep0 maxpacket: 32 [ 410.573885][ T5887] usb 8-1: unable to get BOS descriptor or descriptor too short [ 410.611949][ T5887] usb 8-1: config 7 has an invalid interface number: 128 but max is 0 [ 410.660130][ T5887] usb 8-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 410.730564][ T5887] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 410.819975][T14965] team0: Port device team_slave_0 added [ 410.837857][ T5887] usb 8-1: config 7 has no interface number 0 [ 410.893304][ T5887] usb 8-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 410.990951][ T5887] usb 8-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 411.021780][ T54] Bluetooth: hci8: command tx timeout [ 411.041593][T14965] team0: Port device team_slave_1 added [ 411.090902][ T5887] usb 8-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 411.184756][ T5887] usb 8-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 411.264232][T14998] loop0: detected capacity change from 0 to 32768 [ 411.291048][ T5887] usb 8-1: config 7 interface 128 has no altsetting 0 [ 411.350075][T14998] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3887 (14998) [ 411.365872][T14965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.400863][ T5887] usb 8-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 411.450645][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.478012][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.560274][ T5887] usb 8-1: Product: syz [ 411.566626][T14998] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 411.615303][ T5887] usb 8-1: Manufacturer: syz [ 411.619975][ T5887] usb 8-1: SerialNumber: syz [ 411.671756][T14998] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 411.729985][T15009] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 411.739077][T14965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.771254][T14998] BTRFS info (device loop0): disk space caching is enabled [ 411.821530][T14998] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 411.914129][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'. [ 411.965948][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 411.966434][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 412.011581][T14965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.034120][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'. [ 412.056556][ T5887] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.076068][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 412.076358][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 412.115460][ T5887] usb 8-1: MIDIStreaming interface descriptor not found [ 412.170918][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.212959][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 412.213268][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 412.268559][ T5832] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 412.297515][ T5832] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 412.310285][ T5832] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 412.318710][ T5832] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 412.326770][ T5832] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 412.334945][ T5832] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 412.371567][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 412.371825][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 412.448285][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 412.485476][T14965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.530307][ T5887] usb 8-1: USB disconnect, device number 2 [ 412.589256][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 412.589551][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 412.697390][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 412.809667][T14998] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 412.952561][T14998] BTRFS error (device loop0): open_ctree failed [ 413.083677][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.137982][ T5832] Bluetooth: hci8: command tx timeout [ 413.452010][T14965] hsr_slave_0: entered promiscuous mode [ 413.543471][T14965] hsr_slave_1: entered promiscuous mode [ 413.589976][T15017] loop3: detected capacity change from 0 to 32768 [ 413.613177][T14965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.676235][T14965] Cannot create hsr debugfs directory [ 413.715404][T15023] lo speed is unknown, defaulting to 1000 [ 414.451975][ T5832] Bluetooth: hci9: command tx timeout [ 415.179311][ T5832] Bluetooth: hci8: command tx timeout [ 415.415861][T15061] loop3: detected capacity change from 0 to 256 [ 415.451711][T14965] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 415.546737][T14965] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 415.554586][T15061] exfat: Deprecated parameter 'utf8' [ 415.559932][T15061] exfat: Deprecated parameter 'namecase' [ 415.640946][T15061] exfat: Deprecated parameter 'namecase' [ 415.702388][T14965] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 415.718206][T15061] exfat: Deprecated parameter 'utf8' [ 415.809647][T15023] chnl_net:caif_netlink_parms(): no params data found [ 415.860170][T15061] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 415.929393][T14965] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 416.532859][ T5832] Bluetooth: hci9: command tx timeout [ 416.705732][T15076] netlink: 'syz.3.3915': attribute type 1 has an invalid length. [ 416.752411][T15076] netlink: 'syz.3.3915': attribute type 3 has an invalid length. [ 416.795521][T15076] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3915'. [ 416.945027][T15078] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚޹+ÕuµŽê!Þ÷œ8¦ [ 416.965254][T15023] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.039182][T15023] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.086609][T15023] bridge_slave_0: entered allmulticast mode [ 417.152862][T15023] bridge_slave_0: entered promiscuous mode [ 417.195715][T15053] loop0: detected capacity change from 0 to 32768 [ 417.215102][T15023] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.274960][T15053] (syz.0.3907,15053,1):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small! (size 2, needed 8) [ 417.304000][T15023] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.340997][T15023] bridge_slave_1: entered allmulticast mode [ 417.397918][T15023] bridge_slave_1: entered promiscuous mode [ 417.971305][T15023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.115552][T15023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.449241][T14965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.611250][ T5832] Bluetooth: hci9: command tx timeout [ 418.793469][T15023] team0: Port device team_slave_0 added [ 418.847201][T14965] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.065157][T14509] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.072353][T14509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.109150][T15103] loop7: detected capacity change from 0 to 64 [ 419.218723][T14509] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.225901][T14509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.394785][T15023] team0: Port device team_slave_1 added [ 419.718131][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'. [ 419.794562][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'. [ 419.858012][T15023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.901998][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.087607][T15023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.191902][T15023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.245158][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.389008][T15023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.691586][ T5832] Bluetooth: hci9: command tx timeout [ 421.120285][T15023] hsr_slave_0: entered promiscuous mode [ 421.211580][T15023] hsr_slave_1: entered promiscuous mode [ 421.347921][T15023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.411431][T15023] Cannot create hsr debugfs directory [ 421.647551][T15137] loop3: detected capacity change from 0 to 2048 [ 421.700118][T15138] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (11) [ 421.755940][T15137] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 422.732091][T14965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.757830][T15150] loop0: detected capacity change from 0 to 2048 [ 422.905783][T15153] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.317413][T15023] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 423.485764][T15023] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.626941][T15023] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.776840][T15023] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 424.428923][T15023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.622715][T15023] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.764824][T15106] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.772077][T15106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.912464][T14965] veth0_vlan: entered promiscuous mode [ 425.002996][T14965] veth1_vlan: entered promiscuous mode [ 425.034369][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.041689][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.257444][ T54] Bluetooth: hci9: command 0x0405 tx timeout [ 425.434520][T14965] veth0_macvtap: entered promiscuous mode [ 425.511432][T14965] veth1_macvtap: entered promiscuous mode [ 425.629038][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.697294][T15176] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3957'. [ 425.740326][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.784362][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.843255][T15161] loop0: detected capacity change from 0 to 32768 [ 425.860084][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.915264][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.983259][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.055253][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.110376][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.159428][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.208704][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.261042][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.299366][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.333467][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.386674][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.422819][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.474652][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.547701][T14965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.687769][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.800951][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.899991][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.000447][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.081054][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.141684][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.225595][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.295216][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.371698][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.445107][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.482371][T15190] netlink: 'syz.7.3965': attribute type 25 has an invalid length. [ 427.509745][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.563002][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.616223][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.693590][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.740717][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.802581][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.900240][T14965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.068039][T14965] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.171147][T14965] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.179908][T14965] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.313095][T14965] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.599288][T15023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.447128][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.496968][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.761159][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.769042][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.018496][T15225] udf: Unexpected value for 'utf8' [ 430.663364][T15023] veth0_vlan: entered promiscuous mode [ 430.748307][T15023] veth1_vlan: entered promiscuous mode [ 431.084255][T15023] veth0_macvtap: entered promiscuous mode [ 431.183800][T15023] veth1_macvtap: entered promiscuous mode [ 431.377954][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.462172][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.557348][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.653567][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.715860][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.792887][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.866342][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.934604][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.036946][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.117845][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.179551][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.222484][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.247695][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.276642][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.314081][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.338813][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.363223][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.388634][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.503075][T15023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.593924][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.681161][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.746707][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.841643][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.903234][T15257] loop7: detected capacity change from 0 to 8 [ 432.921064][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.990810][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.000689][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.061342][T15257] SQUASHFS error: Failed to read block 0x730: -5 [ 433.067746][T15257] SQUASHFS error: Unable to read metadata cache entry [72e] [ 433.122213][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.228349][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.297762][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.346822][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.405442][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.432898][T15264] loop3: detected capacity change from 0 to 16 [ 433.460932][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.492809][T15264] erofs (device loop3): mounted with root inode @ nid 36. [ 433.516301][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.583207][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.604894][T15264] erofs (device loop3): read error -117 @ 0 of nid 36 [ 433.654714][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.700826][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.750882][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.822132][T15023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.965252][T15023] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.070549][T15023] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.158550][T15023] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.236136][T15023] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.914490][T15106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.987667][T15106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.262151][T14509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.335810][T14509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.732931][ T5887] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 435.972700][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 436.051577][ T5887] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.143849][ T5887] usb 9-1: config 0 interface 0 has no altsetting 0 [ 436.224184][T15298] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 436.280953][ T5887] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 436.334856][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.440956][ T5887] usb 9-1: Product: syz [ 436.495040][ T5887] usb 9-1: Manufacturer: syz [ 436.541200][ T5887] usb 9-1: SerialNumber: syz [ 436.599737][ T5887] usb 9-1: config 0 descriptor?? [ 437.229561][ T5887] usb 9-1: USB disconnect, device number 2 [ 438.424696][T15337] loop8: detected capacity change from 0 to 16 [ 438.544538][T15337] erofs (device loop8): mounted with root inode @ nid 36. [ 438.678368][T15337] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 438.793717][T15337] erofs (device loop8): failed to decompress -4 in[53, 4043] out[1851] [ 438.873154][T15337] erofs (device loop8): read error -117 @ 43 of nid 36 [ 438.940712][T15342] loop7: detected capacity change from 0 to 164 [ 439.299233][T15342] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 439.589785][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.596315][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.992162][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 440.026635][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 440.041235][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 440.071855][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 440.082296][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 440.089678][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 440.341252][T15354] lo speed is unknown, defaulting to 1000 [ 440.963634][T15359] loop8: detected capacity change from 0 to 4096 [ 441.054483][T15359] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 441.326644][T15359] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 441.395451][T15359] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 441.511529][T15359] ntfs3(loop8): Failed to load root (-22). [ 441.591318][T15359] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22. [ 441.713445][T15354] chnl_net:caif_netlink_parms(): no params data found [ 441.963829][T15359] tmpfs: Bad value for 'mpol' [ 442.150909][ T54] Bluetooth: hci10: command tx timeout [ 442.598943][ T29] audit: type=1400 audit(2000000270.349:105): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="::A" pid=15395 comm="syz.0.4045" [ 442.641428][T15354] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.648586][T15354] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.741133][T15354] bridge_slave_0: entered allmulticast mode [ 442.836754][T15354] bridge_slave_0: entered promiscuous mode [ 442.971881][T15354] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.979026][T15354] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.136024][T15354] bridge_slave_1: entered allmulticast mode [ 443.235899][T15354] bridge_slave_1: entered promiscuous mode [ 443.678360][T15354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.810104][T15354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.216316][ T54] Bluetooth: hci10: command tx timeout [ 444.575399][T15430] netlink: 'syz.7.4058': attribute type 1 has an invalid length. [ 444.587354][T15354] team0: Port device team_slave_0 added [ 444.684081][T15354] team0: Port device team_slave_1 added [ 445.205697][T15354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.300928][T15354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.511167][T15354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.535526][ T5957] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 445.650635][T15354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.718329][T15354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.793779][ T5957] usb 1-1: too many configurations: 30, using maximum allowed: 8 [ 445.851258][ T5957] usb 1-1: config index 0 descriptor too short (expected 124, got 72) [ 445.891441][ T5957] usb 1-1: config index 1 descriptor too short (expected 124, got 72) [ 445.948712][T15354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.987160][ T5957] usb 1-1: config index 2 descriptor too short (expected 124, got 72) [ 446.091260][ T5957] usb 1-1: config index 3 descriptor too short (expected 124, got 72) [ 446.184067][ T5957] usb 1-1: config index 4 descriptor too short (expected 124, got 72) [ 446.250687][ T5957] usb 1-1: config index 5 descriptor too short (expected 124, got 72) [ 446.290976][ T54] Bluetooth: hci10: command tx timeout [ 446.329319][ T5957] usb 1-1: config index 6 descriptor too short (expected 124, got 72) [ 446.397971][ T5957] usb 1-1: config index 7 descriptor too short (expected 124, got 72) [ 446.437959][T15354] hsr_slave_0: entered promiscuous mode [ 446.500560][ T5957] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 446.538672][T15354] hsr_slave_1: entered promiscuous mode [ 446.558484][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.637972][T15354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.646338][ T5957] usb 1-1: Product: syz [ 446.650542][ T5957] usb 1-1: Manufacturer: syz [ 446.706396][T15354] Cannot create hsr debugfs directory [ 446.718346][ T5957] usb 1-1: SerialNumber: syz [ 446.769972][ T5957] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 446.828693][ T5888] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 447.082796][ T5957] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 447.331977][ T5957] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 447.384551][ T5957] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 447.438001][ T5957] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.621182][ T54] Bluetooth: hci10: command tx timeout [ 449.971595][ T5888] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 449.978640][ T5888] ath9k_htc: Failed to initialize the device [ 452.232278][ T5957] usb 10-1: Product: syz [ 452.236592][ T5957] usb 10-1: Manufacturer: syz [ 453.877324][ T5957] usb 10-1: SerialNumber: syz [ 485.260605][T15167] usb 1-1: USB disconnect, device number 10 [ 485.314742][ T30] INFO: task kworker/u8:3:52 blocked for more than 151 seconds. [ 485.358084][T15167] usb 1-1: ath9k_htc: USB layer deinitialized [ 485.385706][ T30] Not tainted 6.13.0-rc5-syzkaller #0 [ 485.467646][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.740804][ T30] task:kworker/u8:3 state:D stack:20880 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 486.175613][ T30] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 486.381039][ T30] Call Trace: [ 486.384390][ T30] [ 486.387350][ T30] __schedule+0x1850/0x4c30 [ 486.579169][ T5957] usb 10-1: config 0 descriptor?? [ 486.660987][ T30] ? __pfx___schedule+0x10/0x10 [ 486.665933][ T30] ? __pfx_lock_release+0x10/0x10 [ 486.880824][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.886553][ T30] ? kthread_data+0x52/0xd0 [ 487.062098][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.162829][ T30] ? wq_worker_sleeping+0x66/0x240 [ 487.250952][ T30] ? schedule+0x90/0x320 [ 487.331049][ T30] schedule+0x14b/0x320 [ 487.335305][ T30] schedule_timeout+0xb0/0x290 [ 487.340116][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 487.483999][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 487.572591][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 487.578678][ T30] ? wait_for_completion+0x2fe/0x620 [ 487.711003][ T30] ? wait_for_completion+0x2fe/0x620 [ 487.716381][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.813201][ T5957] usb 10-1: can't set config #0, error -71 [ 487.838574][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.930928][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 487.936243][ T30] ? wait_for_completion+0x2fe/0x620 [ 488.091131][ T30] wait_for_completion+0x355/0x620 [ 488.096357][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 488.270925][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.276654][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.400894][ T30] ? __init_swait_queue_head+0xae/0x150 [ 488.406538][ T30] __synchronize_srcu+0x357/0x400 [ 488.531403][ T30] ? __pfx___synchronize_srcu+0x10/0x10 [ 488.537046][ T30] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 488.681997][ T30] ? ktime_get_mono_fast_ns+0x303/0x320 [ 488.687654][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.821213][ T30] ? synchronize_srcu+0x2a7/0x2d0 [ 488.826337][ T30] ? process_scheduled_works+0x976/0x1840 [ 488.960983][ T30] fsnotify_mark_destroy_workfn+0x146/0x350 [ 489.061613][ T30] ? __pfx_fsnotify_mark_destroy_workfn+0x10/0x10 [ 489.151174][ T30] ? process_scheduled_works+0x976/0x1840 [ 489.156975][ T30] process_scheduled_works+0xa68/0x1840 [ 489.301179][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 489.307249][ T30] ? assign_work+0x364/0x3d0 [ 489.457696][ T30] worker_thread+0x870/0xd30 [ 489.492845][ T30] ? __kthread_parkme+0x169/0x1d0 [ 489.497964][ T30] ? __pfx_worker_thread+0x10/0x10 [ 489.640895][ T30] kthread+0x2f2/0x390 [ 489.645144][ T30] ? __pfx_worker_thread+0x10/0x10 [ 489.650289][ T30] ? __pfx_kthread+0x10/0x10 [ 489.850969][ T30] ret_from_fork+0x4d/0x80 [ 489.855465][ T30] ? __pfx_kthread+0x10/0x10 [ 489.860090][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.020899][ T30] [ 490.080938][ T30] INFO: task kworker/u8:7:1146 blocked for more than 156 seconds. [ 490.090172][ T30] Not tainted 6.13.0-rc5-syzkaller #0 [ 490.284462][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.418750][ T30] task:kworker/u8:7 state:D stack:21424 pid:1146 tgid:1146 ppid:2 flags:0x00004000 [ 490.550854][ T30] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 490.558450][ T30] Call Trace: [ 490.710964][ T30] [ 490.713977][ T30] __schedule+0x1850/0x4c30 [ 490.718824][ T30] ? __pfx___schedule+0x10/0x10 [ 490.890948][ T30] ? __pfx_lock_release+0x10/0x10 [ 490.896073][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.040877][ T30] ? kthread_data+0x52/0xd0 [ 491.045459][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.072963][ T5957] usb 10-1: USB disconnect, device number 2 [ 491.170877][ T30] ? wq_worker_sleeping+0x66/0x240 [ 491.176088][ T30] ? schedule+0x90/0x320 [ 491.180374][ T30] schedule+0x14b/0x320 [ 491.341675][ T30] schedule_timeout+0xb0/0x290 [ 491.346623][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 491.480883][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 491.487002][ T30] ? wait_for_completion+0x2fe/0x620 SYZFAIL: failed to send rpc fd=3 want=152 sent=0 n=-1 (errno 32: Broken pipe) [ 491.582010][ T30] ? wait_for_completion+0x2fe/0x620 [ 491.587402][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.683755][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.689497][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 491.850961][ T30] ? wait_for_completion+0x2fe/0x620 [ 491.856361][ T30] wait_for_completion+0x355/0x620 [ 492.071121][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 492.076849][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.190860][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.197016][ T30] ? __init_swait_queue_head+0xae/0x150 [ 492.279448][ T30] __synchronize_srcu+0x357/0x400 [ 492.301192][ T30] ? __pfx___synchronize_srcu+0x10/0x10 [ 492.306828][ T30] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 492.344056][ T30] ? ktime_get_mono_fast_ns+0x303/0x320 [ 492.349699][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.390809][ T30] ? synchronize_srcu+0x2a7/0x2d0 [ 492.395930][ T30] ? process_scheduled_works+0x976/0x1840 [ 492.430951][ T30] fsnotify_connector_destroy_workfn+0x44/0xb0 [ 492.437207][ T30] process_scheduled_works+0xa68/0x1840 [ 492.471023][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.477129][ T30] ? assign_work+0x364/0x3d0 [ 492.515280][ T30] worker_thread+0x870/0xd30 [ 492.520049][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.560994][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.566712][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 492.607376][ T30] ? __kthread_parkme+0x169/0x1d0 [ 492.630896][ T30] ? __pfx_worker_thread+0x10/0x10 [ 492.636086][ T30] kthread+0x2f2/0x390 [ 492.640201][ T30] ? __pfx_worker_thread+0x10/0x10 [ 492.680810][ T30] ? __pfx_kthread+0x10/0x10 [ 492.685497][ T30] ret_from_fork+0x4d/0x80 [ 492.689952][ T30] ? __pfx_kthread+0x10/0x10 [ 492.740804][ T30] ret_from_fork_asm+0x1a/0x30 [ 492.745674][ T30] [ 492.767097][ T30] [ 492.767097][ T30] Showing all locks held in the system: [ 492.894247][ T30] 3 locks held by kworker/0:1/9: [ 492.899244][ T30] 1 lock held by khungtaskd/30: [ 492.978236][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 493.070856][ T30] 2 locks held by kworker/u8:3/52: [ 493.076032][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 493.210992][ T30] #1: ffffc90000bc7d00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 493.301303][ T30] 2 locks held by kworker/0:2/835: [ 493.306491][ T30] 3 locks held by kworker/u8:5/1080: [ 493.376547][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 493.480824][ T30] #1: ffffc9000415fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 493.597336][ T30] #2: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 493.660867][ T30] 2 locks held by kworker/u8:7/1146: [ 493.666217][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 493.790848][ T30] #1: ffffc9000417fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 493.899234][ T30] 2 locks held by getty/5574: [ 493.928048][ T30] #0: ffff88814d95f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 493.991561][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 494.080922][ T30] 4 locks held by kworker/0:3/5886: [ 494.087607][ T30] 3 locks held by kworker/0:5/5899: [ 494.120944][ T30] 3 locks held by kworker/1:8/5957: [ 494.126213][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 494.180134][ T30] #1: ffffc9000472fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 494.217340][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 494.256945][ T30] 2 locks held by syz.4.3493/14038: [ 494.271326][ T30] #0: ffffffff901b87d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 494.311013][ T30] #1: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 494.360969][ T30] 1 lock held by syz.2.3674/14488: [ 494.366144][ T30] #0: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 494.436544][ T30] 2 locks held by syz-executor/14741: [ 494.460943][ T30] #0: ffff8880271fcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 494.490827][ T30] #1: ffff8880271fc078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 494.531178][ T30] 2 locks held by syz.5.3807/14787: [ 494.536447][ T30] #0: ffff8880255d74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 494.591237][ T30] #1: ffff8880255dc198 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0x100 [ 494.637540][ T30] 2 locks held by syz.6.3831/14835: [ 494.650807][ T30] #0: ffffffff8f053b68 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x42f/0x650 [ 494.660081][ T30] #1: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 494.731073][ T30] 2 locks held by syz-executor/15023: [ 494.736508][ T30] #0: ffff888057c94d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 494.776066][ T30] #1: ffff888057c94078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 494.827886][ T30] 2 locks held by syz.1.3947/15146: [ 494.851121][ T30] #0: ffffffff901b21d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 494.875612][ T30] #1: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 494.916031][ T30] 2 locks held by dhcpcd/15364: [ 494.955531][ T30] #0: ffff88807803ee08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 494.990956][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 495.020865][ T30] 1 lock held by syz.0.4062/15438: [ 495.026249][ T30] #0: ffffffff8fcb2b88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 495.077446][ T30] 4 locks held by dhcpcd-run-hook/15486: [ 495.091153][ T30] [ 495.093521][ T30] ============================================= [ 495.093521][ T30] [ 495.219182][ T30] NMI backtrace for cpu 1 [ 495.223575][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc5-syzkaller #0 [ 495.232367][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 495.242465][ T30] Call Trace: [ 495.245766][ T30] [ 495.248720][ T30] dump_stack_lvl+0x241/0x360 [ 495.253447][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.258690][ T30] ? __pfx__printk+0x10/0x10 [ 495.263339][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 495.268316][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 495.273894][ T30] ? _printk+0xd5/0x120 [ 495.278094][ T30] ? __pfx__printk+0x10/0x10 [ 495.282748][ T30] ? __wake_up_klogd+0xcc/0x110 [ 495.287635][ T30] ? __pfx__printk+0x10/0x10 [ 495.292290][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.297953][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 495.303013][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 495.309021][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320